Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: 5BQaaMzIvUV+JYsRkzUuchdqjBw9bNGNK1LPrh9Mqng=
Subject key identifier: A6:E1:7A:65:68:2B:4D:8D:27:FE:E4:2D:96:69:71:26:29:70:F1:F4
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 0198D6CCF1AF7E18F178941DBCF92E7527A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 0F56
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: Rd0xPQxDZdvuoqKn/e9+jnvRdxyuH4ArDlj0M0ttMes=)
2: NZtS_yd4-bo9e2cvGKzyKvYI3pE.roa (hash: +rJHNNOfAgRLW2AYZ2GQZ4sJIXJPzKob0SOJ3Knzwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f1:af:7e:18:f1:78:94:1d:bc:f9:2e:75:27:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=a6e17a65682b4d8d27fee42d966971262970f1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:e6:91:98:36:96:7d:a7:f3:7b:1f:33:0f:
9c:87:12:48:8e:0b:e6:95:1c:9a:5a:5f:bc:b7:87:
39:cb:be:ba:0b:25:a2:32:5b:82:e6:b1:25:37:f9:
7d:ee:b0:5d:92:55:2b:51:e0:e7:76:8d:22:21:62:
2e:64:52:7f:54:6c:5c:51:4e:86:2b:db:53:a3:21:
79:46:a9:79:89:19:a4:f5:d1:fd:97:70:e4:20:df:
d6:37:0c:cb:bb:e6:e0:28:db:31:10:81:e1:c2:98:
3d:d4:ae:4c:a1:54:e8:e1:8a:f6:ab:66:af:e7:df:
ce:8d:9c:6c:62:b3:68:4e:d6:8a:87:7f:20:9f:61:
cc:5a:74:34:3f:67:75:30:b3:25:4c:1f:4d:e1:b9:
2f:68:3e:9f:cd:a1:5f:16:84:62:a9:23:04:79:51:
ef:c5:66:d6:dc:ef:70:2b:5b:d2:fa:d9:5c:c2:55:
41:f2:d9:14:0d:33:f7:09:c0:02:58:33:de:90:b3:
da:46:63:71:4a:9a:9e:33:2f:90:c4:5e:20:b6:ab:
b6:54:43:4b:74:8f:6d:33:43:39:09:13:c7:a4:47:
f2:3d:e2:11:f3:e9:c5:f4:82:da:76:8b:48:11:a9:
9f:5f:62:30:9c:f0:d2:b3:3b:f7:31:48:a5:11:76:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:7A:65:68:2B:4D:8D:27:FE:E4:2D:96:69:71:26:29:70:F1:F4
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:85:aa:9f:ae:a3:63:f5:f0:5a:a0:3e:cc:62:5b:56:a6:
cd:3a:14:02:c2:d3:68:f6:01:4b:f1:2d:33:8f:95:b8:f8:31:
83:d7:1a:62:82:57:dd:17:82:5a:f0:06:db:de:11:0a:07:b5:
6f:7c:30:59:29:ee:cd:52:35:b8:ac:e3:d6:79:f2:41:9d:91:
dc:f5:ba:44:38:bf:a7:72:46:02:23:11:6e:64:6e:8a:40:bc:
1e:ce:a0:17:f9:d6:89:fe:72:b5:b4:af:6a:2f:bb:58:ea:d0:
20:02:0f:d5:64:0f:a8:5a:cd:ea:fd:12:77:96:82:24:34:d5:
e5:f8:f9:12:46:59:ae:25:13:80:68:50:64:59:72:09:c7:f1:
17:5c:6f:5a:22:0a:7c:36:5c:e8:e4:3b:d3:1f:e6:8d:40:4d:
ab:16:f6:df:d7:92:7d:2e:fe:06:f2:f4:0d:86:b1:74:b9:7b:
31:40:ab:b8:83:5b:9b:bf:2a:08:34:0d:25:23:76:3a:79:49:
e1:b4:2c:c7:4b:41:8b:a3:85:fb:6c:3f:11:01:77:91:fb:fd:
e5:d2:10:23:58:02:df:de:d8:7b:66:db:03:f6:8d:a7:8e:4a:
6e:8c:8c:bc:f7:ef:bc:b9:74:bf:1a:ee:49:07:ac:8e:27:a0:
b1:7a:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:24 2025 by rpki-client