Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: XaB1zg03GYymzrvemJuxDUoNBlsEZcOUhWnu1+9XVt4=
Subject key identifier: 7F:51:1D:9C:17:7A:F2:A8:DB:03:8E:71:58:C5:3E:AB:6E:D5:DA:E2
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 019770AC374CB70F1DB0DF7FE51C4E1AF5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 092F
Signing time: Sat 14 Jun 2025 23:00:23 +0000
Manifest this update: Sat 14 Jun 2025 23:00:23 +0000
Manifest next update: Sun 15 Jun 2025 23:00:23 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: cbU7S//wwW2PVYN60am34ObI88WSzpd6t+ITcocGhNs=)
2: 8E6R6Y44D9-qyRI6dYC2IvHdVys.roa (hash: 7k1o4N+vAim0gSVRwVbbhvuvzFML/zVM+Z44HbQyM50=)
3: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:37:4c:b7:0f:1d:b0:df:7f:e5:1c:4e:1a:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jun 14 23:00:23 2025 GMT
Not After : Jun 15 23:00:23 2025 GMT
Subject: CN=7f511d9c177af2a8db038e7158c53eab6ed5dae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:01:e8:f9:c0:82:97:a4:e2:cc:58:40:10:
c9:56:6e:ef:55:c6:20:c1:c9:f1:da:5a:84:5f:77:
f0:c6:09:01:3e:2d:47:eb:64:f5:b8:ed:24:a6:a2:
6f:2d:b7:82:6c:96:31:a5:77:38:44:ad:24:3e:b1:
ad:eb:15:07:ec:7d:ac:1b:cb:90:ee:de:5f:48:87:
8f:c9:bc:c5:4d:0a:eb:05:43:36:cd:d1:54:01:fe:
7e:df:45:eb:fe:ab:b3:89:06:7c:b7:45:e3:da:79:
a0:f2:3f:fd:57:d7:1b:41:94:f1:a5:34:1b:be:df:
31:8c:b4:3a:17:be:be:7e:39:71:19:01:12:0c:fe:
97:80:b5:4d:ab:f0:3d:8d:1d:ba:e1:c2:58:8d:08:
c8:6b:51:da:99:c8:ba:82:aa:63:d7:30:8d:78:13:
36:9b:ac:a0:ab:26:73:61:9c:6d:eb:eb:84:e4:17:
c3:ea:cb:8b:ea:8c:62:d8:af:3b:78:f1:4b:5b:71:
b1:f4:77:6f:cc:b8:92:7c:4a:81:07:13:f1:ba:10:
17:c5:1c:2e:9a:c7:f3:e6:39:01:12:34:d6:cb:c0:
72:cb:40:ab:11:38:81:38:3e:37:90:fe:7c:0b:cf:
e3:09:f2:20:59:51:fb:ce:18:40:69:3e:f3:f6:4d:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:1D:9C:17:7A:F2:A8:DB:03:8E:71:58:C5:3E:AB:6E:D5:DA:E2
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c8:51:cc:23:98:df:16:f4:d0:7b:66:b0:b8:b1:e9:58:88:
d8:63:f5:e7:50:f5:73:7a:c5:0f:01:8d:55:db:7a:07:bc:7e:
ba:44:54:2c:b1:f9:25:78:fa:3c:93:5a:d0:20:42:4e:d7:5c:
1b:7e:c0:7a:23:9c:d4:ad:9a:af:33:d6:ca:3b:97:e3:d1:71:
a6:f6:89:70:cb:29:a9:74:af:3b:6d:f9:af:a7:ce:76:c8:45:
62:51:7b:79:7e:65:90:24:fe:c1:62:e8:66:23:c0:ea:70:ee:
65:99:32:cc:da:5b:95:9e:72:a0:d1:7c:e8:89:31:30:cf:5f:
c6:82:89:a3:40:52:b7:7f:33:ac:97:b8:8d:13:97:50:44:1e:
47:e8:dd:a1:73:87:f4:c5:4e:60:2f:f7:33:db:5d:97:a3:93:
51:3a:0c:b2:f3:27:11:44:40:61:34:54:0a:fd:5e:20:99:66:
74:11:bf:ab:d9:2b:b0:22:e5:e1:69:e1:f9:a9:a6:84:84:ba:
6b:9b:f6:1a:b7:19:eb:17:ff:b4:7d:ea:e5:b6:e6:08:5f:33:
d6:bc:8d:fb:6a:00:4d:98:37:4f:22:88:10:09:45:02:2f:c7:
a5:3d:93:58:3c:04:50:76:8b:f0:c6:8a:1d:ac:9c:72:4c:4e:
30:be:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:57 2025 by rpki-client