Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: 7HVQEkTlB1FKN2aUFZzrQ3LQobEZsiUQebOIrm/bPaY=
Subject key identifier: 53:8D:08:6D:09:03:E0:05:5A:34:A0:4E:72:1D:D4:AC:0C:F9:1E:E0
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 01984588ACD0BF91FC68478E3E51C8B8EB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 0590
Signing time: Sat 26 Jul 2025 07:00:41 +0000
Manifest this update: Sat 26 Jul 2025 07:00:41 +0000
Manifest next update: Sun 27 Jul 2025 07:00:41 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: 3p0J7+4s4OE+ozNufkUDesnpZICBXK/Groz0V3VZ3zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:ac:d0:bf:91:fc:68:47:8e:3e:51:c8:b8:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Jul 26 07:00:41 2025 GMT
Not After : Jul 27 07:00:41 2025 GMT
Subject: CN=538d086d0903e0055a34a04e721dd4ac0cf91ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:21:a6:11:00:4b:a5:72:f9:fe:d5:6e:74:
c9:bb:d9:9f:14:da:1e:30:82:b3:bb:37:dc:14:30:
28:0b:36:4d:1d:6e:e7:12:8c:a8:30:aa:22:fd:c6:
41:a7:32:63:01:14:5f:10:da:9a:0b:cd:67:ff:7f:
a5:3e:6f:d3:a5:a2:35:e0:84:5f:75:e9:75:ad:10:
3a:19:be:8b:af:38:18:e5:f5:57:c6:0f:58:56:86:
92:45:cc:1e:d8:bc:39:cb:33:df:cc:5f:81:51:56:
5b:06:c6:b2:33:bd:ef:88:79:74:0b:70:6b:ea:73:
bb:9a:56:26:2c:04:ba:a3:4e:13:23:b0:16:d0:2c:
97:17:b8:73:0f:6a:37:df:e8:03:21:eb:dd:9c:68:
36:03:a2:4e:05:24:df:07:fd:bf:3d:a4:8e:d4:1e:
c8:5f:13:0d:1f:9c:d6:26:b4:8f:b1:c1:ac:95:9a:
14:5d:40:83:b8:ef:eb:90:78:8a:65:76:a0:e7:7b:
3d:ef:6a:d3:0e:60:ec:63:28:c3:46:04:c1:49:7e:
17:e9:74:8d:da:82:15:cd:d9:24:80:68:5c:50:8e:
19:19:a5:fc:7b:00:cf:4b:ff:56:45:64:87:6c:15:
9e:65:9f:20:da:68:1d:47:d2:b0:99:c0:89:37:aa:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:08:6D:09:03:E0:05:5A:34:A0:4E:72:1D:D4:AC:0C:F9:1E:E0
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0e:3a:4d:f0:b4:aa:58:3f:18:f3:31:32:18:34:67:c3:46:
fd:a9:92:86:e8:03:9f:6b:32:d8:c5:bd:0c:4b:cb:d5:c6:02:
69:29:07:fa:57:ec:59:42:22:44:15:83:0e:02:09:02:77:b5:
81:65:af:db:bc:e8:23:62:7d:6f:9d:b4:c6:d1:8d:c7:43:62:
5c:6d:c2:10:e7:45:ca:ed:53:fb:d6:7d:19:ef:b1:dc:96:8f:
d5:d2:48:f2:ff:aa:9a:4f:36:4e:3b:4a:4e:4b:8d:be:1a:1c:
de:46:26:09:1d:13:1a:24:06:c4:ef:63:ca:ee:01:33:ee:15:
a5:4a:44:d7:f0:42:a4:ac:ff:2b:33:b2:45:ed:19:64:1a:b6:
51:ed:88:ff:9b:0a:28:60:b8:5d:c9:eb:1d:67:0e:70:9c:70:
e4:a7:6a:0c:88:6c:a5:88:98:d5:05:da:7d:81:69:f3:9c:c6:
ed:a5:17:ad:4a:fc:4b:00:be:7e:24:0e:1e:e4:b8:1e:f9:69:
f7:d1:cf:83:33:c2:89:95:a3:88:e8:77:b5:cc:06:ee:2b:48:
88:fe:f7:ff:69:79:d8:51:89:7b:8b:cb:ce:91:ab:cb:51:f7:
70:75:e4:dc:98:7f:7a:41:38:12:c2:0b:36:06:b2:08:a2:c7:
fc:fd:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:44:23 2025 by rpki-client