Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: QJV6Tz5hMMKuKRpZ3gHzG0xWVSpxLtRjObOhSGdDpfg=
Subject key identifier: 3D:B1:8F:4E:78:A2:D2:43:55:2D:67:B8:DF:3C:69:A7:AE:D6:31:60
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 0199FD3441F56354907F06C044828E66C711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 0642
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: jVemRmLmEZtOzZZpVZFgwH3gV3yItNJCfuHbrfcazqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:41:f5:63:54:90:7f:06:c0:44:82:8e:66:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=3db18f4e78a2d243552d67b8df3c69a7aed63160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:3d:12:a1:d6:e9:3d:da:dd:8f:d8:7e:dc:
84:ac:e7:2e:71:50:00:c2:ad:cc:a9:92:ad:7d:97:
43:ec:48:cf:7e:84:27:48:c1:03:bc:a4:82:e3:39:
d4:2b:85:37:f5:fd:cd:e6:d4:cd:80:86:6e:b1:d2:
ed:08:a9:9a:a8:90:96:80:64:9a:ed:92:24:95:79:
5c:17:56:f2:15:23:c2:e6:4f:aa:fd:c6:4b:45:35:
00:fb:a4:3b:e3:f4:2d:a2:a0:a3:fa:99:27:4e:a4:
79:c1:9e:e5:19:b1:ef:62:5f:b8:95:48:86:88:74:
cd:a1:00:bf:e8:d5:a7:b1:f7:c6:62:5a:d9:a6:fb:
80:79:cd:d5:8c:8d:96:3b:be:38:3d:99:d0:18:5b:
7d:3b:c7:fd:0d:53:64:29:71:42:81:eb:b2:9f:f1:
49:30:90:d1:4a:10:4b:7d:f5:33:35:92:1b:73:51:
ee:eb:05:a4:ac:37:b7:67:a0:c8:fb:6d:20:91:ed:
cd:b5:f6:c7:d1:e1:3b:e1:fd:e5:b4:9f:c0:e9:80:
18:6c:de:d7:01:75:b6:d1:8c:cc:b7:75:fd:9c:dd:
ae:1d:83:72:98:c4:9a:17:5c:9c:69:25:35:bb:d1:
b0:7f:e6:35:15:92:c9:b0:c3:04:13:a8:9e:7a:f9:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:8F:4E:78:A2:D2:43:55:2D:67:B8:DF:3C:69:A7:AE:D6:31:60
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:12:aa:83:0d:a8:1b:00:44:dc:75:cd:8d:61:be:67:01:
39:1e:27:60:e8:c4:e8:c7:d6:f4:b5:49:29:12:6a:eb:5c:a9:
59:25:4a:ca:86:0c:d2:80:a1:d3:26:b9:f7:fd:4e:86:4c:b5:
e8:0e:8e:20:9c:b2:25:85:39:fc:78:4d:4c:c9:7c:04:86:4c:
6a:b8:f0:53:34:a3:88:bc:94:b1:48:bc:a9:f1:81:e5:f6:61:
24:4f:c2:77:6b:d7:ab:af:da:b9:83:26:c5:e4:ae:8e:7b:02:
e8:d0:60:58:b5:1a:92:8c:6a:b1:18:91:0c:55:ce:cb:ed:ac:
57:9d:58:12:d2:8b:7c:4a:79:5f:59:cf:25:56:60:44:5a:b9:
50:cb:05:2c:30:87:43:75:40:f1:87:5e:cc:88:82:55:ab:85:
6c:ad:7b:21:63:38:e6:51:35:a8:b4:d8:a6:f1:1f:13:3d:16:
2d:41:4d:7f:7a:c6:76:de:65:0f:8f:e3:1d:82:23:5e:9a:96:
8b:ca:d0:17:27:dd:2a:84:cb:74:06:cf:34:a2:7e:95:b8:59:
8f:fc:a6:7c:a7:fb:60:84:07:d1:72:f9:a9:5a:39:86:cc:a3:
6f:7d:73:f3:35:f5:f3:bd:02:5a:2c:a5:ac:64:a9:b5:6e:e2:
b0:38:e1:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEH1Y1SQfwbARIKOZscRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2VjMTVjYTRmOTI0ZDk2Njk2NzU0NTEyNGY2NTUzMTBk
MmM5NzMwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EygzZGIxOGY0ZTc4YTJkMjQzNTUyZDY3YjhkZjNjNjlhN2FlZDYzMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbw9EqHW6T3a3Y/YftyErOcucVAA
wq3MqZKtfZdD7EjPfoQnSMEDvKSC4znUK4U39f3N5tTNgIZusdLtCKmaqJCWgGSa
7ZIklXlcF1byFSPC5k+q/cZLRTUA+6Q74/QtoqCj+pknTqR5wZ7lGbHvYl+4lUiG
iHTNoQC/6NWnsffGYlrZpvuAec3VjI2WO744PZnQGFt9O8f9DVNkKXFCgeuyn/FJ
MJDRShBLffUzNZIbc1Hu6wWkrDe3Z6DI+20gke3NtfbH0eE74f3ltJ/A6YAYbN7X
AXW20YzMt3X9nN2uHYNymMSaF1ycaSU1u9Gwf+Y1FZLJsMMEE6ieevkxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2xj054otJDVS1nuN88aaeu1jFgMB8GA1UdIwQY
MBaAFEd+wVyk+STZZpZ1RRJPZVMQ0slzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUt
M2M5YTY2YmFjMzk1LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYTNlNDktYzVkNC00NjliLThlODUtM2M5YTY2YmFjMzk1
LzEvUjM3QlhLVDVKTmxtbG5WRkVrOWxVeERTeVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNISqoMN
qBsARNx1zY1hvmcBOR4nYOjE6MfW9LVJKRJq61ypWSVKyoYM0oCh0ya59/1Ohky1
6A6OIJyyJYU5/HhNTMl8BIZMarjwUzSjiLyUsUi8qfGB5fZhJE/Cd2vXq6/auYMm
xeSujnsC6NBgWLUakoxqsRiRDFXOy+2sV51YEtKLfEp5X1nPJVZgRFq5UMsFLDCH
Q3VA8YdezIiCVauFbK17IWM45lE1qLTYpvEfEz0WLUFNf3rGdt5lD4/jHYIjXpqW
i8rQFyfdKoTLdAbPNKJ+lbhZj/ymfKf7YIQH0XL5qVo5hsyjb31z8zX1870CWiyl
rGSptW7isDjhYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:48 2025 by rpki-client