
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier: m2wA4mwQzqKLX+WJZutx0MXVnDX3rnXbwEYM9r7E0CA=
Subject key identifier: F1:5C:09:70:6F:36:31:9A:3F:92:48:DF:F5:66:A0:01:2E:9C:93:22
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 019A22F7534463342046B0FB22BBDB6BBE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:25 +0000
Manifest this update: Mon 27 Oct 2025 00:00:25 +0000
Manifest next update: Tue 28 Oct 2025 00:00:25 +0000
Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: u0oc0Ce0+DDCKRHcV3ONEHcNzpHiDWfrCzWr1SILZSw=)
2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:53:44:63:34:20:46:b0:fb:22:bb:db:6b:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Oct 27 00:00:25 2025 GMT
Not After : Oct 28 00:00:25 2025 GMT
Subject: CN=f15c09706f36319a3f9248dff566a0012e9c9322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:e7:3e:92:93:bd:c5:39:7f:10:dd:34:bd:
ee:41:1f:b7:60:c7:a2:03:42:19:3c:d1:16:d7:8e:
bd:e4:ef:79:3a:3a:80:c6:dc:98:8d:2b:d8:50:96:
c1:e9:dd:44:28:f3:c1:99:01:b6:c0:a2:bd:8f:a8:
c6:18:52:57:b7:2b:ed:b2:56:46:bd:fb:a3:7a:ee:
9c:be:ba:5f:09:75:a9:e0:c8:91:e8:84:c0:fb:ff:
29:82:67:21:3a:3a:63:ce:d5:19:5b:e0:8c:17:53:
46:9a:dc:33:2e:79:2e:b5:58:2c:de:61:d9:f1:39:
e4:8b:45:60:e5:15:69:92:5b:b2:90:49:17:ae:cf:
fd:06:d5:ad:57:49:a9:9c:2c:f2:36:82:66:78:11:
99:74:da:ff:81:1d:36:cf:6c:f5:84:44:42:7e:85:
de:c4:1d:64:d0:b9:66:59:b6:71:33:99:f5:de:9d:
91:07:1e:2d:c9:f4:70:59:01:70:9b:22:e8:a5:6e:
b7:67:1b:52:b5:3c:35:52:0f:74:ee:f2:a7:a9:85:
8d:78:1e:33:26:c1:1b:9a:e7:74:7f:85:cd:8f:80:
4c:58:6a:36:9f:f1:ec:a8:b9:84:f1:9f:d1:ba:eb:
2f:64:c5:f3:ef:d1:5c:29:1d:d3:f5:ab:05:00:1f:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:09:70:6F:36:31:9A:3F:92:48:DF:F5:66:A0:01:2E:9C:93:22
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:4b:63:d4:88:30:e1:a8:ba:60:31:39:5f:b4:b6:4c:2d:
6c:43:30:d6:23:b7:50:1c:06:8a:62:16:5a:03:1d:4f:82:09:
28:e2:7e:5d:db:c4:ef:c5:8e:6b:f1:35:e1:90:be:87:2b:f8:
3c:bf:8b:26:dc:c8:27:d1:5f:ef:c9:de:9c:17:ef:e6:e9:4a:
53:c6:eb:cb:78:e1:0c:da:9b:4c:82:ac:22:b6:f6:ed:13:5d:
81:f0:1a:03:b6:b8:de:fe:65:60:c7:c8:4e:8f:66:48:02:a2:
4d:ea:94:93:ce:82:dc:6d:bd:10:87:7b:ef:0f:79:7d:53:22:
4d:2e:a4:85:bb:ab:fa:9c:f6:65:99:68:e2:b4:28:aa:24:74:
64:71:2f:df:3e:ab:c4:07:1a:d3:60:3f:d6:96:f3:00:b4:ff:
cc:cb:b5:bf:2a:a7:63:71:54:43:cb:13:d3:09:1a:e0:99:a5:
2a:d4:d5:01:a9:7a:20:fc:79:36:50:2c:e4:b1:f6:b0:44:e9:
c9:dc:5b:19:1b:45:4f:98:a1:c3:44:fe:9d:44:08:79:95:f2:
11:5e:d6:14:4e:2c:3c:91:92:82:f8:10:a5:8e:f0:3e:cf:ca:
f1:9c:b6:65:46:cc:4a:09:a7:8c:d1:a7:67:63:48:65:85:97:
7a:37:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:51:00 2025 by rpki-client