Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: urWa1s8Qj/8LaD9mazrgeKiKc2zvewGTW3dXX2d4k+0=
Subject key identifier: A7:63:A2:43:36:46:96:13:CB:23:73:59:64:AB:42:0A:1A:6A:81:FA
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 019873E22DA30C54D46321E5DC96B7CE01CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:00:59 +0000
Manifest this update: Mon 04 Aug 2025 07:00:59 +0000
Manifest next update: Tue 05 Aug 2025 07:00:59 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: nBuao0QBJKwlfgB088LhLFz82vKbcA+JYY5UtVeoCkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2d:a3:0c:54:d4:63:21:e5:dc:96:b7:ce:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: Aug 4 07:00:59 2025 GMT
Not After : Aug 5 07:00:59 2025 GMT
Subject: CN=a763a24336469613cb23735964ab420a1a6a81fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:f9:86:d5:f2:f5:d2:24:1d:be:16:db:3d:
cd:e4:85:40:0f:1c:92:61:55:9f:6c:54:02:0a:73:
41:f7:f0:d6:91:8e:ca:f4:50:d3:41:1c:e6:7b:84:
b7:01:ab:b5:a9:cf:a0:6f:2a:ef:4d:af:4a:a7:26:
13:1e:d3:34:66:37:2b:e8:c6:f3:30:6e:7d:d9:4c:
4f:ad:5f:21:2e:78:0f:f7:a4:6e:0c:d4:83:be:31:
ad:e8:48:78:66:28:46:fb:03:c7:1e:b7:86:57:a2:
73:f8:68:81:0b:90:f2:f5:08:93:57:5c:f1:a5:c1:
ef:f1:1d:28:68:3c:7f:78:99:bc:54:9b:cd:e4:50:
0d:2b:82:13:e1:62:ba:2b:81:18:ed:60:34:08:47:
5d:b6:1d:d1:34:d7:9f:d0:ef:f7:2f:d5:13:96:33:
f9:36:ca:eb:d2:a4:ab:8a:04:2b:37:54:76:40:ee:
19:b7:2b:0b:4b:92:72:7d:0d:e4:fb:eb:49:28:93:
32:59:8b:b1:da:68:e0:f6:75:6c:e2:69:9f:a5:4a:
65:4d:aa:1a:c2:a4:c4:26:b9:a2:0d:0b:08:66:a4:
99:fc:29:ca:3e:4c:67:83:89:97:c3:b6:f5:08:fb:
33:4b:26:c1:09:23:a0:88:99:39:a3:99:bf:bc:e5:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:63:A2:43:36:46:96:13:CB:23:73:59:64:AB:42:0A:1A:6A:81:FA
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:7a:a1:70:b0:c7:b2:14:88:29:63:cb:ec:2f:29:e2:a0:
01:14:73:18:31:00:dd:92:cb:60:76:db:a1:5a:58:1b:55:24:
7c:54:aa:13:11:2a:63:cc:60:ea:aa:2a:a6:56:ad:d6:4e:9b:
1f:5e:77:1a:c2:59:66:10:ed:cc:71:c8:5c:b8:da:72:00:76:
e0:e1:26:1a:01:f2:9f:65:71:91:35:e3:ef:e2:f0:67:a8:06:
04:34:c9:81:d9:33:18:88:1f:37:e1:41:5d:41:9a:28:93:37:
8c:2b:5f:a3:ef:6e:79:82:1f:9e:06:b9:41:b7:68:d6:c3:2b:
39:70:93:8c:3e:ea:15:7f:c8:1a:43:ba:2e:9d:ec:7a:b7:b8:
17:b1:68:e3:65:2b:74:3d:ce:73:83:5f:24:1f:1f:1b:55:f6:
f3:ca:a4:5a:f2:bc:e3:8b:ea:2d:7f:d8:81:6e:fb:56:c8:03:
dc:e6:5f:15:73:66:5c:68:cc:a4:0d:ee:fc:5d:12:02:e3:6f:
21:f2:c6:fc:a8:37:77:90:18:7a:b6:7e:c5:25:4b:5c:2b:38:
50:20:eb:d0:7b:93:39:08:04:bc:47:d1:75:d4:0e:33:63:d5:
a6:66:27:2a:86:f3:d3:bb:1f:58:b6:17:02:5d:af:de:ec:98:
a5:b1:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:17 2025 by rpki-client