Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: up8tQs8I1CKe+koA7DcRLCBEDK95xC2clzBfg9Iblio=
Subject key identifier: 6A:F8:CE:AE:16:B8:F7:A0:B2:A7:FA:80:BD:D7:7E:C6:66:5D:D8:09
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019A4EF424F3FF23147B190099EF389C7B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 069E
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: ovieq0tTTSrsLt6TJI6EFFtXfE/sgw4wWnyCy9pDn9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:24:f3:ff:23:14:7b:19:00:99:ef:38:9c:7b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=6af8ceae16b8f7a0b2a7fa80bdd77ec6665dd809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:11:ff:e3:54:50:9f:8b:5d:5a:5f:62:3e:
61:d7:5d:a0:ad:d2:d8:1f:07:4f:79:d4:eb:a8:fd:
52:2d:b6:5f:9b:83:cd:e5:82:80:93:76:82:dc:14:
e3:33:a9:81:e7:df:de:b3:af:48:3e:aa:2e:6d:b2:
54:4b:62:30:ff:8f:1b:7f:3c:a6:b8:55:35:5d:23:
13:ae:7f:3d:dd:c7:c1:53:26:2f:89:dd:61:2d:6c:
11:7c:5e:3d:b6:98:83:fd:7a:60:92:24:f7:de:f5:
23:77:d5:ff:b6:80:d4:97:ab:9d:aa:9e:4f:37:cd:
62:ef:cf:00:ff:18:09:9d:ac:18:22:f8:ef:e4:f1:
4e:8d:fb:5e:04:ca:58:90:2c:f8:37:44:e9:30:20:
04:56:04:88:04:35:5b:3f:6f:3b:0d:1c:ae:6a:42:
40:e8:3d:54:43:fb:46:11:62:3a:a0:03:75:8c:3e:
8e:63:0a:44:f0:c2:50:95:95:9c:3b:ed:ec:85:c5:
98:59:db:80:99:9a:bf:1a:c9:25:c6:57:bd:b3:d5:
c5:80:7b:ee:b5:e3:05:2a:4a:0f:25:07:38:64:9b:
fe:8e:68:60:2a:c1:7c:08:43:6d:26:88:d9:9b:71:
de:03:4e:f8:fa:35:86:6d:ab:fb:ab:07:c1:bc:d0:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:CE:AE:16:B8:F7:A0:B2:A7:FA:80:BD:D7:7E:C6:66:5D:D8:09
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:a0:90:65:f0:2a:db:4b:3c:c1:76:cd:83:b3:bf:7b:6e:
f3:67:e4:08:09:69:af:1e:6c:7f:b1:7a:18:f0:38:d0:b5:72:
23:ea:1a:5f:16:93:85:08:38:30:ba:19:67:4d:e6:38:28:ea:
b3:50:d8:ec:31:9b:69:7e:a3:59:55:86:ea:ac:f8:15:cf:b6:
27:3f:7b:57:59:a4:7c:bc:78:e9:23:fb:f1:01:fb:42:3e:d3:
5b:cc:2c:f9:fe:1f:42:d0:08:71:34:bb:22:69:aa:43:4d:2c:
dc:f4:8f:e3:8c:12:f1:89:27:cb:2f:15:05:80:35:69:1f:70:
de:cf:3b:69:ad:f4:58:fc:db:51:53:1e:2e:ad:9d:c8:cb:af:
17:7a:5f:3f:7d:7e:19:80:d4:6f:07:37:9e:24:2f:08:42:c8:
28:24:c1:ca:fc:96:40:8a:d4:86:0d:72:1a:e0:a3:b8:cf:e5:
ad:0e:74:56:2f:ac:d1:43:f5:2a:ac:ec:de:c1:17:95:44:d9:
13:39:f4:1f:44:dd:bc:a5:83:30:d8:a2:1f:69:7a:fd:6d:0a:
8b:98:fb:9d:23:67:eb:4d:7b:9d:7c:68:ee:01:c3:d3:b0:ee:
35:94:77:7b:f0:a8:80:91:39:64:d9:bb:62:e5:ca:82:19:66:
c7:9a:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:49:11 2025 by rpki-client