Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: cGlSFQFXZOewcUgvX63xPKrp/KDuc3jalyq4TQ9hr58=
Subject key identifier: 69:84:C1:FD:27:94:31:50:2A:92:62:AA:DF:82:35:14:DE:55:03:8C
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 01976C98EC73B63B5E2D194CB1CDF3E71FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 04EE
Signing time: Sat 14 Jun 2025 04:00:50 +0000
Manifest this update: Sat 14 Jun 2025 04:00:50 +0000
Manifest next update: Sun 15 Jun 2025 04:00:50 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: KngPn1rdVr7jonDmQK+ijpGqDdwsj5xIA1wu32V9d6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ec:73:b6:3b:5e:2d:19:4c:b1:cd:f3:e7:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Jun 14 04:00:50 2025 GMT
Not After : Jun 15 04:00:50 2025 GMT
Subject: CN=6984c1fd279431502a9262aadf823514de55038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:1c:7b:0c:3b:4e:41:fc:8b:e1:dc:e2:db:
8e:a9:d9:42:66:20:c5:3c:cc:5f:b2:af:18:92:ff:
e9:95:ea:b6:25:9e:4a:c8:38:e6:82:37:40:f4:93:
bc:54:3f:3a:ef:9c:c0:e7:b0:1d:37:87:68:03:47:
5d:0e:06:06:ad:26:ad:0e:1d:2b:69:a9:9e:fe:de:
b8:86:9b:14:96:f1:e6:fa:5a:ba:be:71:2d:91:86:
4c:62:56:f4:3c:52:6a:13:28:5c:08:b4:c0:7a:c8:
14:e4:c2:67:29:79:64:49:a9:ed:fd:55:25:c1:8a:
c7:fc:8e:f6:4f:68:21:47:aa:aa:48:44:83:22:e0:
9c:95:1a:ce:49:c2:d9:d1:1d:23:48:c8:00:d1:5b:
ec:d4:83:28:bf:33:0d:d6:1a:09:e7:9c:28:19:46:
af:bf:31:32:c5:2f:26:a0:86:bb:97:6d:6d:0d:be:
27:2a:a3:fe:9f:d5:03:4d:24:20:6f:f6:0e:50:5e:
8d:de:53:8c:75:94:6a:ab:28:99:b6:4b:a3:d9:69:
70:4b:d2:e2:3e:eb:f2:8d:a3:ab:eb:09:fa:1b:ab:
95:52:59:5a:4f:f3:a9:c0:4a:a1:5b:93:42:c7:37:
10:81:7c:bf:a7:c0:25:0a:7e:d7:b9:7d:00:f4:b2:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:C1:FD:27:94:31:50:2A:92:62:AA:DF:82:35:14:DE:55:03:8C
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:9e:9f:d3:34:94:c3:42:13:88:85:a5:43:00:eb:2c:de:
32:09:08:cd:c5:88:04:6c:71:f2:be:79:4b:62:cb:97:5c:98:
62:13:d0:88:61:5d:72:e5:a5:ce:30:1d:f5:16:fe:2b:a1:17:
03:fa:ee:68:1c:81:4f:62:55:d2:84:3f:7b:b9:bf:97:69:4f:
fb:d0:a3:2c:fe:1e:16:ed:36:05:2d:0a:e7:ed:16:64:22:83:
f7:fc:f5:d9:05:eb:41:76:0d:7d:4b:03:72:98:cf:bb:aa:7f:
16:11:4f:64:84:f5:c0:17:bf:6a:9f:1d:73:61:9a:cf:17:f5:
8d:1b:71:f3:09:f4:75:05:6d:56:b5:d7:ff:31:ad:5d:11:3e:
89:70:13:65:9d:b8:fa:62:5b:4c:4c:0c:45:85:70:84:f9:c3:
5b:d3:f8:6c:d6:0e:79:c8:08:c1:5d:59:34:1f:19:7d:47:8d:
0c:4d:68:1c:83:2e:50:0f:cf:30:67:97:94:57:7d:6e:fb:76:
33:69:23:3c:1c:ad:12:5c:33:6e:f6:3d:a8:0f:73:99:c5:20:
eb:39:3c:ea:ae:dd:f2:26:2c:f3:54:95:04:70:06:f9:60:87:
73:01:00:d5:25:6f:60:a2:fc:8b:30:31:02:3b:d6:41:9b:02:
5b:5a:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:33 2025 by rpki-client