Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: mEZGINnHayG3bGHGlc6T/ABtmiPsOp6I5xJGI34NUtI=
Subject key identifier: 43:BB:0E:07:00:70:C0:A5:87:26:C7:BD:A8:92:12:55:60:C4:BA:F4
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019896A4C8999929E9F5F2BC6851B220FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 05BA
Signing time: Mon 11 Aug 2025 01:00:38 +0000
Manifest this update: Mon 11 Aug 2025 01:00:38 +0000
Manifest next update: Tue 12 Aug 2025 01:00:38 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: 8kgKyJ3srYaer0tgfLdoPj+H7enbcSnaO5T0F2fPBy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:c8:99:99:29:e9:f5:f2:bc:68:51:b2:20:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Aug 11 01:00:38 2025 GMT
Not After : Aug 12 01:00:38 2025 GMT
Subject: CN=43bb0e070070c0a58726c7bda892125560c4baf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:2d:9d:02:5c:a4:ce:82:8f:2e:be:91:12:
8d:b5:d5:b4:74:7f:43:ce:56:7e:fb:1e:3c:95:aa:
01:29:32:7f:51:bb:07:67:ff:89:aa:67:ca:2a:80:
4b:0b:a3:50:9a:eb:9d:aa:21:9a:a6:dd:ac:1d:10:
89:18:f7:f1:c9:79:86:36:2d:a2:5a:9a:b6:6d:25:
af:64:36:db:49:85:3d:51:7f:a7:64:79:85:33:96:
73:b2:7e:f6:97:08:c8:67:09:2b:7b:e0:cd:7a:00:
11:16:15:ff:b6:3a:10:d3:e0:e3:01:d4:74:9f:01:
00:c4:dd:57:fb:91:82:52:94:51:35:7a:40:8d:fb:
f3:aa:25:ca:ec:8f:14:09:68:cd:59:8c:5c:e8:11:
6b:bd:38:82:bb:94:d6:2b:62:fa:00:a9:8e:6d:ad:
db:33:d4:ca:b4:0f:d7:a6:38:bf:55:2a:bc:72:ce:
ef:87:ab:5e:93:ac:11:2e:96:83:56:23:f6:96:37:
a8:17:2c:6d:fb:85:aa:bf:5e:03:6a:e0:66:93:69:
82:d4:f4:ba:ae:21:85:e8:93:a5:7a:5e:cf:2a:4c:
55:2a:ac:5f:72:b4:79:d8:a0:8b:bb:3d:7a:e8:42:
7d:f0:bb:ad:05:92:d8:10:a2:d0:d9:11:99:0a:52:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:0E:07:00:70:C0:A5:87:26:C7:BD:A8:92:12:55:60:C4:BA:F4
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:c3:fc:c6:ae:c5:11:bc:51:2f:4f:c4:ec:94:dd:dc:da:
ca:f1:c0:e7:54:19:16:88:93:95:b6:7a:a4:0e:47:68:88:f4:
21:ad:0e:d8:5e:6f:30:03:1f:f7:be:b6:40:5c:2a:d6:64:0a:
4b:d9:63:69:0a:ae:b7:3e:20:fa:6e:f7:58:a4:16:b0:96:d9:
f3:c5:89:02:e1:fa:5b:2d:0b:08:a9:4d:90:d5:cb:75:1b:48:
f3:d7:f2:d1:86:c6:0d:c3:c5:a6:b4:35:fe:33:bc:e9:42:dc:
27:9f:46:9e:f8:62:e4:7b:af:95:45:e5:2d:d7:48:14:e7:d2:
8f:98:36:7e:d6:d8:d3:5c:7c:2c:f1:a3:1b:b7:4b:d6:79:12:
c3:c3:63:8a:40:2c:79:dc:d4:1f:aa:5a:02:03:f5:a3:96:0f:
cb:cb:75:88:43:34:b1:19:fa:2a:93:3d:4e:8c:86:66:34:61:
f4:67:a7:19:4d:04:f7:79:bb:c2:f6:7f:70:0f:84:17:c1:82:
b5:d4:e7:f7:35:b9:b9:72:c6:5a:dd:31:8a:c4:ef:73:cc:e7:
62:49:a8:39:0d:33:56:82:26:a3:4f:dd:f1:1f:09:c1:bb:95:
7f:9b:bf:58:1a:86:ac:dd:7d:d2:f8:d1:90:f1:10:8d:f4:9e:
e4:a7:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:46 2025 by rpki-client