Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: tfQNBgYgLML3t+uwH3NByGEWEvcKbLbO30Rgx+SXlQY=
Subject key identifier: 41:64:76:EB:92:57:58:4B:5B:A5:3D:FC:FE:CB:8E:FE:B4:F7:90:F2
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 01976D3DBD82A4672F93B6E39DB69AEDA389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 0520
Signing time: Sat 14 Jun 2025 07:00:52 +0000
Manifest this update: Sat 14 Jun 2025 07:00:52 +0000
Manifest next update: Sun 15 Jun 2025 07:00:52 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: W05OHzceheyDkLGT7J6DURDmkW4lvVhyEmGWwEXPkUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:bd:82:a4:67:2f:93:b6:e3:9d:b6:9a:ed:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Jun 14 07:00:52 2025 GMT
Not After : Jun 15 07:00:52 2025 GMT
Subject: CN=416476eb9257584b5ba53dfcfecb8efeb4f790f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:c7:51:12:b6:03:e1:a6:eb:68:0a:06:63:
53:85:59:d2:fe:09:55:6d:83:6b:0d:48:45:8b:14:
ac:e1:a8:d2:3e:8c:86:8d:58:9e:83:cd:f4:ce:5a:
bd:20:46:7f:d7:78:fe:e7:10:cf:53:93:b2:e8:30:
5f:7d:76:ea:49:35:a7:a3:0b:c6:1f:34:11:2f:54:
61:d1:d1:27:0e:45:b6:fb:07:34:3a:c0:3c:ee:85:
58:5a:bc:3e:1f:9e:40:92:dd:7a:4a:43:23:00:1e:
85:1b:c1:79:f9:80:aa:7d:16:91:8a:77:86:7f:00:
b2:2f:89:a0:9f:32:c4:aa:26:fb:c3:dc:76:c0:5f:
79:9a:27:29:71:af:fd:68:17:eb:a4:6b:12:34:21:
32:2d:a3:51:43:44:ca:13:65:6d:6b:1c:33:26:51:
62:16:8a:5b:95:b1:53:b7:82:c7:25:42:a2:3b:30:
e5:3e:c5:cd:68:4d:83:c1:f8:da:c0:ea:94:ee:4c:
c3:5d:e3:4b:37:e9:7d:a8:fc:41:cf:bb:47:a3:8e:
1c:8f:4d:5c:b5:a2:f0:d4:04:4e:03:f6:b1:6d:28:
81:31:4c:a3:01:f3:1a:87:9a:c2:f8:83:66:70:2c:
b0:d8:d5:77:d0:47:92:a6:f9:19:c1:ce:56:92:fe:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:76:EB:92:57:58:4B:5B:A5:3D:FC:FE:CB:8E:FE:B4:F7:90:F2
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:76:bf:a9:62:81:1b:93:b8:77:a0:a6:e4:93:ff:06:6d:fb:
16:f0:03:70:a2:b3:02:c1:ba:f6:d2:5c:a1:b2:2a:35:87:1d:
e5:01:2e:94:3e:65:81:b5:46:73:1e:11:81:63:1b:a6:cd:f8:
4c:1d:7a:18:a5:e6:af:ba:38:a0:83:28:f8:85:c0:a4:c6:b4:
0e:1c:ec:d0:8b:21:42:e5:ec:79:a9:b5:7d:93:90:c1:16:07:
5b:ae:5f:f5:97:c2:c3:00:4c:dd:da:c7:f1:e8:01:57:34:1d:
63:ad:70:12:55:07:00:ec:80:a8:11:98:f7:3b:8b:f3:fc:c4:
5e:d8:e9:25:dc:89:91:36:ed:3f:b1:84:d8:a7:9d:aa:8b:d9:
5e:56:e7:07:27:b8:7e:98:20:24:78:28:c4:46:97:83:db:71:
db:12:fc:0b:c5:4c:02:30:5d:8b:2e:fb:4a:a0:4e:30:89:9c:
40:b1:a5:e1:45:c9:9a:89:f3:6b:16:78:f8:cc:48:32:26:5d:
bf:9e:7a:dc:02:b4:ba:25:c7:1e:79:fc:ee:58:48:ee:de:49:
78:b1:f8:72:4f:2e:b3:ac:f8:b5:ef:fe:2d:5a:d3:5e:77:fc:
9c:1b:43:ef:13:1a:0f:a2:80:4a:b7:58:85:76:cc:dc:13:b1:
1d:53:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:02 2025 by rpki-client