Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: VuasWd0hav/DyHh2oWMo4iY3Ki3iZjBFgoHsbkuyn0c=
Subject key identifier: B9:23:C2:51:B0:86:86:28:C5:B5:A6:4E:A1:A9:C7:EA:1D:12:2F:12
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019643D741EBAAAD96D8A4AD84843F42A706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 0486
Signing time: Thu 17 Apr 2025 13:01:42 +0000
Manifest this update: Thu 17 Apr 2025 13:01:42 +0000
Manifest next update: Fri 18 Apr 2025 13:01:42 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: 9v19p2+jvyx4vmP6TK3jUOEg1LIQn5u6Uz9trL3YlZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:41:eb:aa:ad:96:d8:a4:ad:84:84:3f:42:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Apr 17 13:01:42 2025 GMT
Not After : Apr 18 13:01:42 2025 GMT
Subject: CN=b923c251b0868628c5b5a64ea1a9c7ea1d122f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:5a:75:a4:a4:dd:54:63:18:08:3a:d6:e1:
41:1b:f7:82:74:18:74:b4:d6:29:74:0b:46:89:fb:
50:51:ce:a3:89:78:67:f6:c4:0c:75:89:87:dc:a5:
7d:dd:76:7d:ab:7d:7c:36:02:70:fe:b3:bc:c1:e5:
cc:3d:6e:a1:c4:33:73:9b:a0:28:b3:43:7e:1c:0c:
6b:24:e4:20:50:a7:d9:bc:4b:86:7a:82:61:02:9d:
b4:4d:20:7e:f7:0b:1b:4e:77:84:f0:d9:20:bf:83:
f4:09:0a:d4:5d:b7:99:2e:65:b2:7a:ee:5d:25:d6:
e2:eb:3d:78:1c:16:24:bc:c1:97:6e:f7:f7:ad:6b:
f9:73:91:e8:f6:85:95:88:fe:fb:33:3c:73:16:bd:
44:a4:13:12:7c:98:c3:a5:6d:77:3b:5b:a2:12:25:
dc:77:ea:24:fa:ca:d8:6a:b6:c3:6f:d6:3b:f7:fc:
14:ed:af:46:2f:35:02:a1:1d:d6:69:9c:af:8c:bc:
45:c4:fe:f9:7b:34:a5:06:7f:cc:2f:b2:de:00:2b:
43:b0:86:0c:4b:8d:1c:7b:b3:63:d4:d9:a5:00:48:
95:00:71:e9:15:b8:c1:e6:f1:49:7a:a3:40:8f:32:
c5:ee:07:ff:6b:b6:5b:e0:16:36:54:60:a9:f5:f1:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:C2:51:B0:86:86:28:C5:B5:A6:4E:A1:A9:C7:EA:1D:12:2F:12
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:89:d7:98:5d:b4:66:e4:0c:ef:0f:cc:e5:47:b4:f8:ef:20:
97:fa:63:19:dd:d9:a5:b0:f0:5d:27:d3:e2:c5:a6:7d:2b:ba:
bc:57:28:af:a0:92:db:a0:d2:70:b7:da:d2:d3:3e:32:4c:b3:
bb:96:73:37:d1:71:ca:63:b2:47:56:b8:df:2e:a1:d0:74:4b:
2d:e7:26:c6:a0:05:30:d1:0c:92:20:57:95:14:4f:e2:95:a5:
b2:84:06:b7:b6:d3:3c:23:9b:28:b2:4a:b3:3d:78:e0:e8:45:
a5:4c:05:8f:e3:8a:dd:7f:6e:ab:65:9e:1d:bb:ab:b6:37:34:
ac:15:2b:50:54:a2:69:21:81:d6:28:2b:09:ce:4b:38:e7:f3:
c8:c0:57:13:a4:fd:9a:80:f1:28:93:86:51:18:17:80:8a:4f:
aa:02:b6:f6:6a:d6:6f:ce:d5:71:6d:c8:d3:18:7c:89:1e:6b:
15:3d:3f:d8:b8:32:43:cf:84:4c:76:8c:bd:85:01:eb:dd:66:
1b:38:12:5e:52:58:32:01:13:cf:38:89:be:38:af:5b:f4:e9:
c3:95:f8:66:fe:a1:6a:c1:07:b7:61:6b:d4:1e:67:89:f7:57:
a2:59:fc:12:dc:fa:a6:fc:0a:c9:45:27:0b:05:fc:a8:35:d4:
99:2f:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:44 2025 by rpki-client