Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: 72JIlwgzMAdp/P3Mpq+Iz6qM4s7Hxsn3biBX4cZVzX4=
Subject key identifier: 9A:BB:45:22:6D:31:D7:67:E8:79:97:F8:64:10:CB:F3:68:12:6C:06
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 0197B5FBD42E00E0CC94DCCD389C4B725BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 0514
Signing time: Sat 28 Jun 2025 10:01:09 +0000
Manifest this update: Sat 28 Jun 2025 10:01:09 +0000
Manifest next update: Sun 29 Jun 2025 10:01:09 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: ahrNG953S02G3OxkVLmG0hjYVpEiI6Pg0YKAQggO9iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d4:2e:00:e0:cc:94:dc:cd:38:9c:4b:72:5b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Jun 28 10:01:09 2025 GMT
Not After : Jun 29 10:01:09 2025 GMT
Subject: CN=9abb45226d31d767e87997f86410cbf368126c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:20:14:56:18:45:3e:62:a5:44:8b:60:0f:
79:e9:2e:7f:e1:39:5e:77:bb:a5:ea:66:5f:dc:a8:
fa:43:62:65:43:16:67:97:ac:8c:87:25:ab:cb:9a:
e0:e3:72:a3:ff:46:1d:90:8b:12:19:76:1d:93:23:
77:3a:ef:c1:87:7e:74:4a:07:21:aa:c3:63:d6:eb:
76:48:cf:78:51:80:02:9b:40:58:b5:67:5f:7c:89:
23:7d:97:2b:bf:78:bb:1f:1c:f7:39:de:49:3b:7b:
a5:40:72:f6:5b:25:40:2e:10:59:ce:64:67:a1:d0:
e1:08:36:a0:22:83:e3:79:3c:66:3f:54:9b:f9:fa:
37:92:9f:a4:d7:7c:8f:33:73:37:13:0c:56:75:e5:
19:1f:f9:37:0e:fd:26:5f:a0:5e:bc:47:52:52:0c:
d4:ea:89:87:2a:56:4a:90:ba:30:c5:35:b4:1a:d5:
e3:0c:33:ee:47:55:65:ad:74:cf:5f:b4:6b:f2:81:
8f:20:07:c7:16:fc:ef:a2:75:d3:10:70:19:ea:2f:
ca:a8:b3:87:06:f2:02:18:00:1a:83:d4:9a:00:b0:
f9:78:45:73:97:7f:8a:c5:63:05:9b:d0:c6:26:43:
7d:a6:03:6f:68:dc:24:66:ac:2d:82:51:e6:03:8f:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:45:22:6D:31:D7:67:E8:79:97:F8:64:10:CB:F3:68:12:6C:06
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:63:d3:f3:8c:81:9b:d1:9f:2c:22:5a:18:55:59:8f:92:07:
d2:8d:22:41:40:8b:8f:b0:f6:80:c1:88:a9:64:d1:2d:55:76:
37:f9:7c:9c:05:0c:72:c7:f9:c8:79:69:a2:9a:41:a8:d7:b9:
26:83:df:6f:00:f4:7b:93:ca:fb:fe:ff:87:1c:59:79:15:f6:
b1:fa:5e:8b:19:e9:90:44:c9:b8:d4:d3:65:76:24:fd:9e:0e:
45:5a:85:90:c4:4e:29:e0:62:c1:8b:75:90:3a:f2:e3:97:52:
b3:7f:a6:1d:86:4d:0a:5a:5b:a4:ae:d1:d6:85:38:3f:96:b8:
82:a8:d2:15:74:11:39:a9:e6:a5:f1:ec:70:ad:2b:30:9d:3d:
b3:fc:38:91:4c:0f:73:d5:8c:fa:7c:86:60:be:c9:48:82:7b:
f7:f2:98:ba:32:4d:0b:9a:f2:fd:d1:78:93:3a:8f:d3:be:81:
8a:3f:be:8b:0b:07:62:02:0c:51:83:fd:d9:7d:f7:cd:9b:02:
ee:d4:96:16:3d:c2:97:1a:5c:ac:62:d9:02:fe:ba:bd:7f:15:
b1:d3:9f:28:ff:d8:8f:03:ac:dc:52:bf:e0:88:c7:1f:32:16:
e0:d4:42:81:3f:ea:a9:38:5d:70:68:bb:6a:ca:53:cc:0d:de:
33:c1:4a:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+9QuAODMlNzNOJxLclu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2VjMTVjYTRmOTI0ZDk2Njk2NzU0NTEyNGY2NTUzMTBk
MmM5NzMwHhcNMjUwNjI4MTAwMTA5WhcNMjUwNjI5MTAwMTA5WjAzMTEwLwYDVQQD
Eyg5YWJiNDUyMjZkMzFkNzY3ZTg3OTk3Zjg2NDEwY2JmMzY4MTI2YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO8gFFYYRT5ipUSLYA956S5/4Tle
d7ul6mZf3Kj6Q2JlQxZnl6yMhyWry5rg43Kj/0YdkIsSGXYdkyN3Ou/Bh350Sgch
qsNj1ut2SM94UYACm0BYtWdffIkjfZcrv3i7Hxz3Od5JO3ulQHL2WyVALhBZzmRn
odDhCDagIoPjeTxmP1Sb+fo3kp+k13yPM3M3EwxWdeUZH/k3Dv0mX6BevEdSUgzU
6omHKlZKkLowxTW0GtXjDDPuR1VlrXTPX7Rr8oGPIAfHFvzvonXTEHAZ6i/KqLOH
BvICGAAag9SaALD5eEVzl3+KxWMFm9DGJkN9pgNvaNwkZqwtglHmA4+y8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq7RSJtMddn6HmX+GQQy/NoEmwGMB8GA1UdIwQY
MBaAFEd+wVyk+STZZpZ1RRJPZVMQ0slzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUt
M2M5YTY2YmFjMzk1LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUtM2M5YTY2YmFjMzk1
LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGPT84yB
m9GfLCJaGFVZj5IH0o0iQUCLj7D2gMGIqWTRLVV2N/l8nAUMcsf5yHlpoppBqNe5
JoPfbwD0e5PK+/7/hxxZeRX2sfpeixnpkETJuNTTZXYk/Z4ORVqFkMROKeBiwYt1
kDry45dSs3+mHYZNClpbpK7R1oU4P5a4gqjSFXQROanmpfHscK0rMJ09s/w4kUwP
c9WM+nyGYL7JSIJ79/KYujJNC5ry/dF4kzqP076Bij++iwsHYgIMUYP92X33zZsC
7tSWFj3ClxpcrGLZAv66vX8VsdOfKP/YjwOs3FK/4IjHHzIW4NRCgT/qqThdcGi7
aspTzA3eM8FKgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:07 2025 by rpki-client