Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File: g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier: ELLlYEZc3qH1J+24rXM0v+BWWqWHib5SrAy/7a+visU=
Subject key identifier: A3:E0:63:74:9F:6E:03:32:FE:07:AF:4A:0D:50:15:05:63:5D:E8:79
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 0198D472860DC422DE739A41F392A12053AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number: 07BB
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: En8-GoJ8b8wzWMOZSSvYdOC_d0Q.roa (hash: PL43OakReMXHfp4mMkhTD4X7qZfQiScwqWGHnEOSCsQ=)
2: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: Ag+Hy9bqy4KJqL9VuLfu240OBkO2knPvdxmWvOF7U9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:86:0d:c4:22:de:73:9a:41:f3:92:a1:20:53:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=a3e063749f6e0332fe07af4a0d501505635de879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:40:ad:b2:02:7f:e8:6d:89:61:df:04:f4:
11:ed:69:46:12:e7:64:2a:63:8c:95:24:0e:b6:a1:
8e:b4:cc:97:b4:35:50:27:b6:b1:17:dc:76:88:95:
58:5e:bc:c3:64:a0:52:e3:aa:35:ae:da:89:0a:32:
6a:c1:2d:f5:dc:7c:2d:31:cc:1f:50:09:88:57:65:
c8:17:bf:0f:a6:13:55:67:41:47:a8:08:99:4a:ba:
cb:b1:b3:ab:d6:81:75:b9:ac:0a:1f:89:51:50:d6:
f9:a4:21:fe:74:fd:40:39:aa:f1:1e:4f:cc:d7:d4:
74:5f:cb:77:66:c0:a9:f4:e6:d1:f2:2b:d8:e9:c9:
ee:db:dd:86:28:1d:0b:d1:11:50:12:b4:0a:f2:64:
f5:26:44:8a:28:08:cd:89:1a:34:69:da:1a:5e:b8:
23:4e:db:76:79:ce:d2:78:10:71:90:2b:e3:16:86:
4a:d1:3e:8f:c7:2f:d1:62:ce:75:6c:95:4a:8d:36:
a1:eb:d5:54:18:ea:fd:be:25:77:d7:33:cb:35:c3:
e0:2b:78:87:8b:9c:3b:c8:3b:84:73:b2:c7:db:6c:
c4:dd:cf:30:f2:c5:9e:34:30:a1:c2:9b:85:2c:e3:
fd:84:71:df:3d:1a:29:ef:2d:77:37:34:4c:ee:02:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:63:74:9F:6E:03:32:FE:07:AF:4A:0D:50:15:05:63:5D:E8:79
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:6d:e4:fb:5f:cb:91:a1:77:86:43:a7:9f:67:26:16:c0:
e2:4d:d9:02:9c:80:0f:15:03:4e:54:5a:3d:25:78:9f:7f:ec:
f8:a1:9c:18:e3:71:a5:bd:7e:6a:1a:70:84:50:b7:11:7e:43:
8e:e1:2e:c2:ad:4e:45:5a:ce:2b:73:a1:f6:7c:00:16:2c:04:
36:fa:88:1e:52:0b:26:48:27:33:d7:6a:eb:81:9d:03:97:3c:
95:af:53:e8:75:93:8a:2d:74:c6:40:43:2e:c9:6c:56:eb:e5:
a9:40:8e:9c:ea:6b:b6:75:00:f4:16:ca:3a:18:74:ff:dc:5e:
53:c3:47:4c:b5:cd:59:b5:97:26:2d:dd:bd:36:9a:39:2e:e9:
42:5b:67:65:8a:a8:f7:2e:dc:28:1b:96:40:38:d5:dd:05:da:
a9:f6:9e:f7:06:fa:eb:81:97:0c:aa:94:48:9f:b0:40:85:82:
a2:0a:cf:0e:54:af:71:82:ac:4a:66:ef:69:ea:8d:b7:bc:18:
00:92:69:dc:a4:f0:90:50:20:9e:48:3d:41:52:11:38:15:1f:
9d:07:61:ad:b3:a1:93:f7:8a:6e:7e:60:1a:39:7c:63:66:a9:
22:00:b0:3f:ce:0d:d2:c2:99:aa:91:30:55:74:7e:f2:46:d1:
01:a7:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:34 2025 by rpki-client