Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier: pzCteELi6topjWEq7gDHYP6ln/ahDn7FWCGCWtR6Vzw=
Subject key identifier: AF:2F:AE:DD:25:0E:36:8E:32:61:C1:17:F0:4E:95:C3:75:F0:7A:8C
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 019885B14F32B748220BF62669CEA99AE46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 18:00:46 +0000
Manifest this update: Thu 07 Aug 2025 18:00:46 +0000
Manifest next update: Fri 08 Aug 2025 18:00:46 +0000
Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: A5t8PWh2hUjhGpaAVMZZXVeQ8Zqd67acDCFIzbC+moM=)
2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:4f:32:b7:48:22:0b:f6:26:69:ce:a9:9a:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Aug 7 18:00:46 2025 GMT
Not After : Aug 8 18:00:46 2025 GMT
Subject: CN=af2faedd250e368e3261c117f04e95c375f07a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:f3:9c:08:6a:c1:87:e7:90:ab:0d:8a:f0:
13:50:5a:fa:50:79:0d:61:21:de:99:dd:ea:83:95:
91:8c:16:de:78:65:f2:c9:84:77:e5:09:4a:94:c6:
6f:22:87:e6:8d:73:35:06:64:9f:5b:e9:83:e5:e2:
a3:b0:56:8d:e2:30:17:7c:e9:0a:e0:59:c7:bd:02:
41:6c:4c:cc:d6:6c:51:67:c5:70:1b:35:5e:c7:6a:
04:aa:54:22:81:29:74:71:cd:d2:84:34:1f:91:75:
83:2a:0f:e8:3c:05:6a:29:91:28:23:53:43:8c:51:
f4:73:b5:29:3e:e0:f1:de:9d:46:9a:c9:b6:a7:4f:
48:64:72:65:bb:e1:6e:0f:ba:d5:19:7e:6d:4d:c6:
8f:92:43:06:42:c7:cf:f4:42:ba:b2:c0:c8:10:c2:
d3:af:c0:fe:7b:07:41:8d:d2:56:3a:72:4f:e2:aa:
ea:57:96:f4:54:1e:05:db:d8:11:5d:f5:a1:50:07:
7f:d5:1a:ce:02:00:dd:d4:85:86:83:11:81:8f:41:
43:10:12:b6:8e:8a:28:37:fc:5e:9e:52:93:43:ed:
27:b7:79:31:00:1a:9c:2e:72:da:bf:2f:fa:2a:95:
2e:cb:99:66:98:ac:0a:91:6a:af:e8:e8:40:a4:33:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:AE:DD:25:0E:36:8E:32:61:C1:17:F0:4E:95:C3:75:F0:7A:8C
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cc:0c:66:67:67:b2:f4:4b:7d:85:a8:30:8e:e2:5a:c6:ce:
b1:b1:19:b6:c6:1d:c1:d6:75:66:94:d8:03:8a:97:9d:a7:72:
0f:3c:09:04:89:20:85:6c:3a:8a:45:72:45:6d:9f:e8:33:33:
ca:e2:81:6d:8d:ea:7f:89:56:4d:94:fd:6a:28:e2:8a:5d:81:
d0:50:e4:a7:05:0e:79:8c:a2:c7:90:b7:7a:9a:cc:b7:08:c5:
e5:55:d5:82:6e:bc:c7:d7:08:d4:cd:29:ea:3f:11:b1:fb:a1:
34:a0:ac:b5:8c:6f:b5:2d:ad:bd:b1:7f:d5:7e:ad:5f:f9:4f:
57:21:6c:d8:03:26:76:e4:6d:cd:c1:6f:9c:df:dc:de:49:09:
f1:7d:68:41:97:ef:29:46:a6:9b:a1:2e:9a:a1:25:d4:84:41:
8a:01:ac:ba:33:90:6d:bf:78:e8:8b:67:e4:f1:bc:ca:d7:0e:
41:27:bb:a3:8b:5d:d8:bd:12:19:40:4b:66:46:03:d4:d9:f1:
ab:ff:9e:96:15:28:a3:24:be:fa:52:9f:8c:91:eb:a2:e8:a4:
a6:ea:dc:41:29:ee:a9:df:ca:0b:2e:b7:59:1d:fb:29:51:b0:
ba:f4:2b:2e:c1:16:42:07:f6:e0:34:a4:ac:bd:b5:a0:a2:d1:
d9:a1:d8:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsU8yt0giC/Ymac6pmuRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1
MjQxNDkwHhcNMjUwODA3MTgwMDQ2WhcNMjUwODA4MTgwMDQ2WjAzMTEwLwYDVQQD
EyhhZjJmYWVkZDI1MGUzNjhlMzI2MWMxMTdmMDRlOTVjMzc1ZjA3YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzznznAhqwYfnkKsNivATUFr6UHkN
YSHemd3qg5WRjBbeeGXyyYR35QlKlMZvIofmjXM1BmSfW+mD5eKjsFaN4jAXfOkK
4FnHvQJBbEzM1mxRZ8VwGzVex2oEqlQigSl0cc3ShDQfkXWDKg/oPAVqKZEoI1ND
jFH0c7UpPuDx3p1Gmsm2p09IZHJlu+FuD7rVGX5tTcaPkkMGQsfP9EK6ssDIEMLT
r8D+ewdBjdJWOnJP4qrqV5b0VB4F29gRXfWhUAd/1RrOAgDd1IWGgxGBj0FDEBK2
joooN/xenlKTQ+0nt3kxABqcLnLavy/6KpUuy5lmmKwKkWqv6OhApDNvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8vrt0lDjaOMmHBF/BOlcN18HqMMB8GA1UdIwQY
MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt
YTNkZjNiNjljZTVhLzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh
LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMwMZmdn
svRLfYWoMI7iWsbOsbEZtsYdwdZ1ZpTYA4qXnadyDzwJBIkghWw6ikVyRW2f6DMz
yuKBbY3qf4lWTZT9aijiil2B0FDkpwUOeYyix5C3eprMtwjF5VXVgm68x9cI1M0p
6j8RsfuhNKCstYxvtS2tvbF/1X6tX/lPVyFs2AMmduRtzcFvnN/c3kkJ8X1oQZfv
KUamm6EumqEl1IRBigGsujOQbb946Itn5PG8ytcOQSe7o4td2L0SGUBLZkYD1Nnx
q/+elhUooyS++lKfjJHrouikpurcQSnuqd/KCy63WR37KVGwuvQrLsEWQgf24DSk
rL21oKLR2aHYxg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:27 2025 by rpki-client