Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: J0879ItyrznC3Lft+lpTG5QlF1Wwlh1JE/LRjSI6Mhs=
Subject key identifier: DB:56:45:FD:E5:C9:9B:8D:AA:63:B0:22:59:7B:F0:86:6F:8B:11:CD
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 01988A699119702407FDF29320BEB8B04F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 0582
Signing time: Fri 08 Aug 2025 16:00:30 +0000
Manifest this update: Fri 08 Aug 2025 16:00:30 +0000
Manifest next update: Sat 09 Aug 2025 16:00:30 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: Cut0EHWTuPGBYIfPf1p+G8gpfZf7klADP9hp1wwSWgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:91:19:70:24:07:fd:f2:93:20:be:b8:b0:4f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Aug 8 16:00:30 2025 GMT
Not After : Aug 9 16:00:30 2025 GMT
Subject: CN=db5645fde5c99b8daa63b022597bf0866f8b11cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:20:33:05:1a:99:b5:3c:2c:98:6a:a7:60:
80:0d:8d:a6:79:a1:77:4b:86:a0:2b:37:bd:cf:9e:
35:f4:db:09:02:bc:c8:d7:e4:15:5a:a6:ab:a0:a4:
94:7c:b9:cd:c7:af:3c:56:4e:f6:a2:ce:c3:73:a9:
94:b0:e7:9e:d0:5b:44:30:8e:30:41:e0:79:ef:01:
a7:02:b7:47:5d:4c:5e:3c:eb:20:c8:92:68:93:24:
f4:c5:c6:fe:d7:6b:af:23:7f:df:2f:eb:74:14:38:
ee:3e:c8:ae:3c:b8:81:39:81:5a:e7:ea:94:f1:4c:
f9:81:39:af:0c:a1:67:7d:65:34:52:29:a7:45:39:
68:5a:7b:79:fc:09:4f:cd:5b:c5:f0:5d:be:7b:f9:
ce:d1:f4:3a:00:e5:de:72:c1:66:c4:b6:48:da:11:
55:f5:d4:2e:3c:88:8b:00:2f:0b:0f:a7:8f:9d:84:
a1:63:e1:f9:fc:13:f3:96:41:9c:b0:bf:75:95:22:
d3:e1:06:a2:67:f3:e1:0c:17:74:a2:9d:7f:ae:65:
1d:e2:dd:68:5e:b4:0d:25:0a:43:ac:05:48:c3:e2:
ca:cc:b4:45:30:93:78:aa:71:df:f7:47:94:35:07:
8e:43:1f:82:38:bd:e8:e0:ea:40:ee:af:2b:44:9c:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:56:45:FD:E5:C9:9B:8D:AA:63:B0:22:59:7B:F0:86:6F:8B:11:CD
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:e9:c1:df:5a:58:1b:01:a1:f6:5e:36:0f:b3:80:30:71:
8b:2d:f4:5f:76:26:81:9c:b5:7f:4e:f3:37:1f:98:b1:ff:81:
7b:f6:5e:3a:39:d8:86:f5:ee:c8:19:58:36:9a:49:56:ac:43:
25:1a:8c:f4:c4:3c:20:73:80:7a:76:67:c0:2c:f7:04:2d:d0:
fb:27:ec:ae:b3:32:e8:32:1a:52:83:e8:3a:6c:5e:59:4a:80:
22:c0:07:ed:c0:e0:ab:74:fb:97:fb:ad:c8:de:d2:10:95:e4:
17:a5:5b:68:2c:c9:b6:09:37:af:ec:24:1f:6f:91:ed:f2:f0:
e7:03:a5:bf:22:a6:8f:ce:49:3d:f4:ce:fb:bd:a0:be:ab:22:
d1:c0:8e:c4:bc:62:54:82:2d:23:33:73:4f:6a:74:42:34:49:
23:17:b7:43:f6:92:bb:87:b3:e3:0a:77:8b:2e:67:aa:b9:51:
08:2c:f8:20:c7:48:ae:f0:3d:57:3c:3a:9e:6e:f4:a7:4f:54:
cb:b0:ac:83:fe:c6:1e:dc:7e:92:87:51:66:19:db:ba:1c:ab:
85:a4:71:17:3f:6c:65:ff:3e:1d:1c:54:49:09:56:20:0b:e6:
4b:10:44:85:01:2d:ec:48:17:fb:11:fd:ab:5a:a2:54:23:0c:
b0:7c:9c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:23 2025 by rpki-client