Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier: szq5F69wOOiZDD9yCCNTqQKENuQH9KttVkkUir+wJzo=
Subject key identifier: 42:7C:2C:8B:6F:C7:AE:84:8D:42:78:AC:AA:99:BD:74:B3:DA:B6:C9
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 019A4D73C576AE36DC5EBAD026CEA15F0F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:24 +0000
Manifest this update: Tue 04 Nov 2025 06:00:24 +0000
Manifest next update: Wed 05 Nov 2025 06:00:24 +0000
Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: P6vizNvsiLRw7h9Uw+Ps2nmxoQv250/GsBmL00nvDbc=)
2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c5:76:ae:36:dc:5e:ba:d0:26:ce:a1:5f:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Nov 4 06:00:24 2025 GMT
Not After : Nov 5 06:00:24 2025 GMT
Subject: CN=427c2c8b6fc7ae848d4278acaa99bd74b3dab6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:46:0b:ab:58:36:31:53:f4:56:3e:ed:6d:
cb:4b:56:58:eb:03:03:b3:6f:41:e2:d0:ec:82:39:
65:83:ae:75:8c:16:d7:f8:14:a5:59:2a:5d:4a:14:
57:13:c7:40:d6:6e:46:b9:6a:15:2e:5f:f6:93:f5:
60:c5:f6:7f:ea:8f:3c:10:3a:6d:a9:cc:88:58:65:
3e:c0:ed:aa:dd:87:66:35:e6:31:98:07:41:60:06:
77:29:51:b7:88:a3:64:b3:d7:f2:22:ca:ba:a2:ab:
89:5f:ad:04:f2:43:86:dd:db:88:be:7b:c0:3e:fa:
0c:be:05:b4:9c:75:d2:17:d4:3f:d3:42:c7:7d:72:
2e:42:7f:11:30:d9:a7:48:32:3d:3b:02:80:38:06:
25:af:47:21:ec:fe:0a:39:5b:07:d8:27:eb:32:45:
48:88:1c:e1:69:4f:cc:a0:84:fe:4b:ef:0d:c3:80:
0e:19:e4:1d:e2:da:8f:d3:b7:e3:e1:f6:b0:3d:47:
f8:76:a4:c8:a4:3f:0f:e8:62:e7:4e:14:ee:0f:81:
37:50:1c:f8:1b:9d:de:2c:97:3b:78:26:ab:6b:42:
79:b6:de:94:ec:e5:a3:19:80:40:07:d7:7d:74:ed:
19:ca:57:11:fa:99:e0:3e:03:44:d2:83:e1:d7:21:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7C:2C:8B:6F:C7:AE:84:8D:42:78:AC:AA:99:BD:74:B3:DA:B6:C9
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:fc:15:64:e2:45:9f:b3:18:28:5f:df:14:23:06:4d:0d:
37:30:01:31:a3:32:73:3e:e4:3b:53:bb:b4:0c:bc:d5:4c:9b:
ef:47:5e:28:f7:3c:5c:ec:35:2b:59:89:7f:83:d0:e1:30:cb:
63:f1:16:14:88:6f:e6:9f:4a:37:ec:a7:1a:bb:db:9b:95:08:
f0:27:99:86:ac:4d:b3:12:1d:24:e6:01:4c:fd:07:08:ec:3d:
41:84:30:ea:80:27:86:6a:96:59:b0:8f:84:75:44:75:81:1f:
48:39:14:57:b6:23:cb:4b:02:48:dd:85:8e:f9:7b:5c:64:df:
fa:98:48:2d:1e:14:eb:9c:31:e6:20:3a:5c:3c:98:93:fa:4e:
7c:04:a1:1e:7e:b1:bc:40:1c:11:9d:51:67:d2:1b:2a:36:6a:
e6:c7:2d:bd:17:dd:dc:22:85:72:77:d6:25:4c:01:48:3b:55:
40:94:48:a8:54:f0:13:04:e2:c1:31:79:5d:4d:d8:0b:99:4c:
87:72:95:c7:5c:6b:2e:91:4e:e2:1d:c2:1d:7d:99:4e:1c:55:
0a:59:31:5d:e0:05:75:14:61:b2:7c:3b:85:1f:00:7d:17:6d:
fc:4e:21:5d:a7:34:18:c5:fd:1f:51:b0:d9:8d:d0:94:e6:5f:
00:a1:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:39 2025 by rpki-client