Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: uzW0qcJY5V8WC5X1s5QgXytnH5O4ZKlvon/NpIDj/cQ=
Subject key identifier: F1:AA:48:4B:A6:50:FB:E0:12:C3:C6:72:EB:E7:88:64:BF:F9:B0:10
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 0197B63311C4C14DB513DB0C240FC3B13364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 0953
Signing time: Sat 28 Jun 2025 11:01:29 +0000
Manifest this update: Sat 28 Jun 2025 11:01:29 +0000
Manifest next update: Sun 29 Jun 2025 11:01:29 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: AwDNFzJdcTDup4TIGbSm4JMQK2cniZ6NfOuyTu1cJfU=)
2: 8E6R6Y44D9-qyRI6dYC2IvHdVys.roa (hash: 7k1o4N+vAim0gSVRwVbbhvuvzFML/zVM+Z44HbQyM50=)
3: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:33:11:c4:c1:4d:b5:13:db:0c:24:0f:c3:b1:33:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jun 28 11:01:29 2025 GMT
Not After : Jun 29 11:01:29 2025 GMT
Subject: CN=f1aa484ba650fbe012c3c672ebe78864bff9b010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c0:67:85:a3:ce:19:31:e4:07:73:c5:ea:a8:
84:94:84:6c:89:bf:1f:ab:99:9d:72:5d:db:25:e0:
c7:60:53:e2:af:7b:b8:c0:9e:9c:a4:8e:b5:38:db:
3f:03:cb:8b:8a:3c:03:ce:01:4f:af:91:42:9f:31:
83:2f:37:76:d9:2c:9c:75:5c:5e:cc:98:7e:b7:02:
44:4f:14:c9:ae:6c:2d:26:fb:5e:90:d2:c7:f4:aa:
67:ee:7b:d5:49:c9:13:82:06:53:94:a8:fb:fb:41:
a6:8d:18:d0:53:b8:da:fa:f9:ff:1d:74:83:f0:ea:
9b:c0:c6:fd:51:24:63:6e:44:3e:50:1b:e1:a9:d2:
a5:90:b2:07:0a:53:c3:dd:f4:71:ff:cf:61:c4:45:
fa:2c:3f:c2:6a:f4:62:42:8d:48:84:e6:c9:47:df:
b5:d1:14:74:88:98:92:ed:37:e1:ff:87:82:2b:ff:
3d:0c:67:14:2d:90:5f:1c:ff:c4:88:cf:59:d7:da:
d7:98:c8:60:c0:61:64:f4:8a:43:d5:b4:92:84:cb:
22:4d:05:72:68:c0:06:81:c2:8f:66:b7:3c:06:ef:
bd:e7:92:51:95:fd:45:88:87:5b:66:40:88:60:22:
92:4b:55:b8:a3:9b:0d:ae:5c:cd:ad:f3:6a:8d:e3:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:48:4B:A6:50:FB:E0:12:C3:C6:72:EB:E7:88:64:BF:F9:B0:10
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:5e:29:db:b2:76:4d:c0:81:8f:3b:0f:e1:2d:53:d9:f9:
8d:c7:f4:d9:ec:4b:8f:9d:de:a2:4f:bc:0a:f5:47:b5:a3:a9:
d6:a4:03:5e:9b:1c:83:75:06:d8:49:89:93:5f:8e:da:5d:e2:
4e:56:de:6f:86:85:37:3b:d3:4e:52:a0:59:83:69:d9:80:69:
dc:28:f2:13:a5:dd:a5:73:fc:3e:80:f3:a3:bd:1f:7f:7f:3e:
e8:de:dc:38:7d:1e:95:48:d6:79:66:4e:66:c7:92:43:22:39:
c9:d8:f1:f1:13:97:2e:75:9a:f3:16:04:9e:e6:13:f9:3f:86:
d4:7f:95:c1:a6:3f:1c:84:1f:70:3d:2e:19:3d:a7:26:ac:73:
c2:40:df:6a:16:68:f6:99:cf:2a:4e:6e:62:9b:39:69:f7:7a:
b8:99:8c:38:ab:13:e5:be:8c:95:ac:45:a6:51:35:80:ab:e1:
52:9d:8e:4a:4d:4d:79:65:c3:78:80:b3:f3:9e:19:be:be:85:
7d:93:22:5c:11:b3:40:c5:d7:00:a4:97:a8:a2:08:e8:d9:01:
27:b1:1c:73:d8:1c:8a:b1:88:ba:c7:ae:22:27:d4:bc:21:f5:
a8:26:0b:58:e4:62:20:f7:d6:69:38:92:66:37:24:d1:af:94:
4f:21:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:45 2025 by rpki-client