Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: 6wvcQHAM5QVSFIAGcpklbC/oaLzzM8eaB07u2sFhsSg=
Subject key identifier: 31:B4:24:BE:B5:C6:CE:B2:6E:9D:38:2E:64:5A:90:B6:2D:BC:73:D0
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 0198D5BBA50F95E275B80E61301625BB6B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 05A9
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: cIP1b8RGLCJoEoL0orlZdc7u2pujG6vfV0zOVC0Rn6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a5:0f:95:e2:75:b8:0e:61:30:16:25:bb:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=31b424beb5c6ceb26e9d382e645a90b62dbc73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:ec:14:da:02:db:8a:f1:49:db:dd:d8:cc:
e7:50:56:3b:45:f8:79:f2:8f:95:a7:ae:f1:f7:98:
bd:59:4e:d9:98:d3:7e:57:e8:ce:62:f3:2e:aa:fe:
be:70:b5:93:bb:a2:44:68:96:57:35:26:19:a3:e2:
5a:ee:e8:51:bd:7a:74:3b:a0:2c:44:05:f0:d6:c9:
71:6d:68:8f:7d:9c:74:b0:e6:f2:35:4a:f7:97:81:
cb:24:77:14:cf:bc:c0:d7:c9:fa:49:d4:6d:5a:39:
2e:ac:29:79:6e:93:2f:d9:4a:05:85:c5:0a:46:98:
23:88:3d:30:32:53:62:73:6f:fc:59:a7:b9:fe:89:
bc:a3:a9:b1:df:be:ab:6e:0d:b5:6c:0c:fa:80:dc:
88:14:b2:82:ed:06:f2:fb:b5:dc:a4:01:97:2a:4c:
9d:4a:9b:ec:14:1e:86:63:ba:ce:ef:f1:16:23:d4:
1e:b4:c6:f1:04:37:cf:fe:4f:61:19:36:ed:da:fc:
3b:bf:4e:64:d7:11:c2:e2:85:a6:d0:d6:d1:79:50:
37:39:84:a0:89:aa:43:f7:55:bf:1b:2d:09:a2:43:
1e:13:f3:0d:7b:9a:86:c7:3f:63:ac:52:91:bf:29:
14:81:73:20:d5:69:0d:9b:3e:d2:59:8d:3f:d4:b7:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:24:BE:B5:C6:CE:B2:6E:9D:38:2E:64:5A:90:B6:2D:BC:73:D0
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:07:0d:0a:2d:3f:4f:9e:29:31:a2:dd:2c:3c:78:22:6b:da:
f1:b6:4e:1d:c2:03:1d:4d:84:87:49:42:f2:34:1a:af:51:1e:
25:72:d3:3a:bf:99:07:b4:28:77:b7:f9:86:9f:94:7b:4c:2c:
94:b1:2d:8d:85:a7:a6:ea:2a:f1:f5:da:4c:05:0c:d5:2e:3b:
8d:96:e1:6f:59:33:39:34:8b:9d:64:4b:27:1e:ec:96:51:af:
0b:d9:5b:56:a2:38:ed:a5:55:a7:5d:9e:cb:0c:cb:d2:50:c3:
c9:30:f5:c2:7b:02:b6:31:64:2e:a4:80:81:ca:7c:e2:4f:8d:
bb:77:6e:19:1f:59:de:3b:9d:34:c6:55:31:a1:5a:f6:a0:80:
fa:94:ac:39:df:0e:b4:7e:58:61:3d:af:2e:af:b6:2e:6c:eb:
04:67:ba:cc:36:e2:37:c2:13:df:4c:57:03:b4:6d:63:97:7b:
15:a9:3e:69:30:65:bc:38:5d:18:00:0b:9b:e6:28:1a:00:4b:
5f:70:9e:2f:0b:36:03:57:6e:8d:ec:85:da:38:dd:be:ef:a0:
a1:33:ec:87:dd:a7:4f:35:6a:4f:50:97:51:a7:7b:d2:e1:d0:
0d:f9:2a:97:37:18:62:f1:6d:8c:9a:5a:ca:87:8c:ce:5e:d7:
33:74:f6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:10 2025 by rpki-client