Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: A6MwAI7Vq3CiaVh0r3FE9R+xB0O0ZWrpvUs4t9xJ6fQ=
Subject key identifier: DA:FD:73:00:EC:72:1C:4A:3E:C6:D6:84:91:AA:1B:A6:69:EA:1F:61
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019A71B77D267C9B47A6900D091D966555BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 06B0
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: PjPYUZ+XKYfRYdUEE65Kq4BJnpyS38rG1l6qxCFXIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7d:26:7c:9b:47:a6:90:0d:09:1d:96:65:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=dafd7300ec721c4a3ec6d68491aa1ba669ea1f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:f7:a1:2c:74:86:be:0e:2d:bb:c2:ad:98:
2d:93:6e:bf:3b:34:af:1c:ba:c5:28:31:1a:7b:b7:
36:08:a5:a8:c2:b6:ed:b3:a4:ef:bf:ae:73:13:f0:
06:a2:ae:6b:04:e0:4f:ca:28:5c:6f:42:ec:ab:bf:
9b:9e:ad:b8:44:c3:9c:d4:a8:0d:4b:88:e8:72:9b:
4a:c9:fd:0a:ff:77:38:94:e6:3e:45:d5:39:f7:92:
8e:37:83:45:8c:32:e0:d4:d4:de:5f:1d:5d:bd:a8:
f9:75:f2:98:1e:31:dd:32:36:f4:d1:c3:e0:d7:68:
d5:a5:f1:01:0f:10:3e:a7:e7:d4:e6:34:81:71:49:
c3:d6:e6:f9:e7:97:da:2d:02:a1:9c:f4:b8:c1:76:
95:27:7c:e2:87:72:d4:9a:97:38:5a:2b:ae:7a:50:
e1:92:9b:c3:d8:d5:fb:cd:f9:5f:6f:4a:2a:12:0f:
51:87:47:a5:6d:9f:23:b9:fb:69:22:9d:d8:9f:fe:
b0:69:75:90:9e:16:b8:e0:cf:97:53:e5:72:98:f2:
2b:61:1a:a2:d0:e1:bb:6c:9d:f5:97:fc:66:32:2d:
17:c1:41:21:fa:c2:88:7c:0d:28:2e:d1:c7:a4:89:
2f:7d:e1:da:1a:e8:f2:5d:27:93:99:ad:6a:2a:ac:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:73:00:EC:72:1C:4A:3E:C6:D6:84:91:AA:1B:A6:69:EA:1F:61
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:31:ec:10:18:bf:e3:0a:8c:c3:35:8c:67:c4:cf:d1:9c:20:
f2:58:ff:7c:37:e5:ac:10:ac:76:5f:49:dc:e5:a2:8a:c2:5e:
eb:14:20:4b:e8:20:e3:99:b7:4d:85:db:0b:1d:c1:71:0b:f5:
61:b5:34:c9:8b:2e:9e:bc:9e:de:ac:35:c4:78:97:1f:c3:b2:
4d:e0:96:9f:91:27:43:3a:65:a1:b0:5e:53:d7:66:88:6c:90:
28:76:52:8d:00:95:dc:80:58:7f:4c:b6:72:5f:0c:07:b4:0b:
ab:0a:ef:f3:8e:b8:e8:26:86:1c:7a:c8:d5:d6:07:1b:00:0b:
a7:08:bd:df:e9:14:df:c3:2f:be:8b:1b:cc:ab:f0:96:c0:cf:
e9:b6:05:ab:00:cb:bc:b0:81:13:a2:9f:ef:69:08:1c:88:31:
00:56:7a:60:b2:45:e0:d0:09:dc:e2:cf:85:27:7c:72:e5:8a:
85:2d:6c:a6:c2:59:a3:8c:38:c2:60:b5:35:4d:f4:44:fe:35:
4e:85:6a:0c:2e:c7:e7:59:56:a4:7e:54:66:65:3f:96:93:af:
e0:40:a0:c8:dd:0d:f3:1f:c1:52:be:98:d1:cd:79:2f:f3:3d:
4b:63:54:3e:12:07:81:fa:f8:25:61:df:79:93:c9:f1:1c:09:
3a:79:6d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:51 2025 by rpki-client