Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: kBqLhN1RMFj7xVpglrNugmihaASLeud3Zox6KMgbboY=
Subject key identifier: CF:13:D9:E2:83:F2:8F:47:81:7F:FF:DA:DA:50:41:B1:A8:DE:B9:CC
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 0198D4741D55D2FF907007CE3D226C9C20BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 09E9
Signing time: Sat 23 Aug 2025 01:03:55 +0000
Manifest this update: Sat 23 Aug 2025 01:03:55 +0000
Manifest next update: Sun 24 Aug 2025 01:03:55 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: h66XY8rHTzrXYhhf6rX1MgnHvD6aDQ5DLC5z1Ac3iFg=)
2: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1d:55:d2:ff:90:70:07:ce:3d:22:6c:9c:20:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Aug 23 01:03:55 2025 GMT
Not After : Aug 24 01:03:55 2025 GMT
Subject: CN=cf13d9e283f28f47817fffdada5041b1a8deb9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1c:df:96:cd:86:b5:75:93:9e:71:86:dd:e6:
e4:7b:c8:da:51:98:92:9f:76:a7:cf:de:35:5e:b9:
b0:aa:a9:c7:98:b9:e9:a9:47:65:a5:b2:5f:31:a4:
26:31:cc:86:95:88:ea:33:23:08:ff:26:51:bd:04:
88:08:60:b4:c4:4a:ec:ba:9e:38:1c:a2:85:25:fc:
1d:12:02:55:ba:a2:ce:b6:89:2b:e1:df:7e:9f:f5:
ef:45:95:de:2f:66:59:5a:f9:94:e3:cc:ba:a2:57:
8d:0b:be:33:90:eb:fc:ae:86:30:e3:b7:9a:03:c9:
be:ad:49:06:d7:82:8f:35:75:65:b1:b0:9d:a4:2a:
06:20:5f:82:f6:4f:c3:a3:5f:ad:bb:83:6a:94:ff:
fc:fc:ec:9a:11:1f:d3:02:d2:c2:73:3d:1f:b3:25:
db:92:6a:0c:6a:20:98:08:74:dd:69:91:1b:e6:7e:
0c:80:42:d4:6e:cc:eb:64:1a:72:9f:c4:60:24:82:
05:19:ba:90:b6:d3:81:c8:ae:29:e9:85:2a:8c:e0:
fe:8e:78:68:d7:04:93:6c:9d:5d:18:ee:59:70:66:
ae:24:7d:46:35:d1:0a:f8:b2:42:34:6c:0c:07:6b:
55:ab:07:21:65:ce:ff:ff:84:7a:62:71:7a:e3:0b:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:D9:E2:83:F2:8F:47:81:7F:FF:DA:DA:50:41:B1:A8:DE:B9:CC
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:57:9c:62:a0:99:ad:aa:27:b8:ee:0d:2d:34:91:ae:86:
1a:88:05:4e:ac:e2:1c:09:c9:ce:4e:ec:f3:fb:5b:a9:38:e3:
7b:09:5f:71:7a:b0:48:b0:e2:25:98:2d:b0:8d:0a:af:b3:4c:
cc:03:6d:c6:93:59:4d:e1:0e:3d:7e:97:e0:a8:49:4a:bb:2a:
2f:dd:69:84:15:f3:1e:4b:6d:30:f4:8c:ac:8b:a5:42:10:c4:
74:7f:4e:95:56:04:44:43:8a:04:54:df:0d:e8:db:40:c6:c1:
b0:ba:96:f8:d6:87:8f:75:91:75:4e:eb:83:a4:36:88:54:6c:
5b:24:97:29:69:99:ae:73:4d:6b:e2:f6:62:56:e6:81:87:c9:
1b:be:c7:14:59:b2:5b:ff:d7:bb:53:28:85:e1:83:50:b0:ba:
11:5b:2e:76:fc:da:18:18:ea:92:77:15:79:ce:ab:36:b6:a8:
c6:cd:44:93:a6:d5:e2:88:b9:a5:54:70:79:a4:a8:f7:a6:5c:
09:0c:42:52:d5:74:44:8a:f9:7d:51:19:5a:d1:65:b7:0a:6f:
c8:db:5b:d5:53:3c:6b:08:09:86:c9:c9:6e:2e:1f:f7:e2:7e:
7b:5c:fb:2e:02:29:4b:31:84:a8:f7:47:a0:c7:50:76:46:8c:
46:c9:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:41 2025 by rpki-client