
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: tdb7X94idfgqolGesBMaCt8SYu2JccY/DgI+m2tBMLA=
Subject key identifier: F6:24:CD:F9:30:09:02:50:F0:56:6F:93:4E:47:BD:C6:94:9D:14:76
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 01974E5785BCEAB95C427F6ACB236185C5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 0510
Signing time: Sun 08 Jun 2025 07:00:48 +0000
Manifest this update: Sun 08 Jun 2025 07:00:48 +0000
Manifest next update: Mon 09 Jun 2025 07:00:48 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: Npc+o0KWxOUeVN06uVDC5DL0guK7pGlg2A+ujnwF0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:85:bc:ea:b9:5c:42:7f:6a:cb:23:61:85:c5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Jun 8 07:00:48 2025 GMT
Not After : Jun 9 07:00:48 2025 GMT
Subject: CN=f624cdf930090250f0566f934e47bdc6949d1476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:22:a2:2a:4e:44:02:b1:00:e7:67:99:a0:
8f:58:c1:a6:47:4e:94:ae:d2:a4:c4:cf:a2:b0:2c:
bc:28:cb:3c:fb:d0:f3:12:3b:90:25:f6:49:56:b5:
3d:5d:2b:e2:ff:e1:03:36:63:ad:48:a2:a3:5a:53:
18:76:f2:58:1d:57:b9:07:bd:ff:7f:89:01:ef:24:
c6:fa:9a:37:a9:ff:d9:1b:81:ea:3a:39:2e:ce:5e:
02:a3:f2:1b:48:d1:de:73:1f:6e:08:a6:e3:ee:71:
a6:63:6d:5b:f2:8c:a1:58:ad:cb:bf:3d:8f:90:93:
c7:3c:58:4c:fa:c2:d4:30:0e:1b:11:eb:32:e9:1d:
ed:d3:dc:d5:d8:10:6f:87:be:fc:c3:f1:5a:7b:b4:
26:5f:4e:ae:38:5e:cd:04:38:41:7a:86:37:ff:7d:
83:f3:40:79:41:42:00:e4:4d:25:90:16:9d:bc:e1:
9c:65:49:9f:54:f9:1e:ef:0a:12:9b:9a:18:15:ed:
7b:b6:6c:be:a0:66:9f:e8:74:09:57:06:be:9f:e7:
f9:f1:1c:9a:d9:2a:43:89:3d:7c:69:13:1a:02:c0:
11:2b:25:7c:e9:be:e4:75:c8:c3:94:7e:9e:d4:91:
5d:6e:b9:52:12:59:05:f2:2c:98:90:64:5a:7d:28:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:CD:F9:30:09:02:50:F0:56:6F:93:4E:47:BD:C6:94:9D:14:76
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:40:0f:4e:5e:a3:c3:bb:02:30:6d:7c:b8:1f:e8:f0:5f:
20:3e:01:1b:53:8b:a1:31:d7:73:d7:18:7f:34:95:3b:f1:48:
6a:bb:18:fe:06:86:a9:6f:c9:7a:a0:85:56:45:b5:18:54:24:
44:8a:b9:c6:be:dc:62:5b:10:98:fd:7c:8a:85:f7:b4:6a:b1:
5f:f0:f6:d1:d3:54:fd:a3:f0:1d:c0:d0:c4:64:98:d3:56:ef:
01:b6:48:dc:15:9c:6b:83:b6:06:e8:f5:3f:88:86:de:de:49:
dc:1f:be:34:2a:53:70:47:0c:2b:68:36:79:dc:97:c6:fd:52:
b8:39:e1:f8:ec:0d:5d:8a:f7:d1:ea:71:57:cf:d9:42:ab:67:
d4:13:ca:2e:b6:1a:b2:3a:a3:10:48:d5:d8:70:fa:1c:1b:cb:
e3:3e:3b:f5:5b:53:00:ca:84:4e:d0:2b:6f:2e:39:01:78:68:
14:df:a9:f5:14:4a:0c:78:2e:c5:57:5f:aa:39:aa:0d:1e:af:
59:00:9e:1d:5b:62:0a:08:ce:03:35:43:7c:0b:68:03:3f:60:
b2:b2:86:04:13:17:07:82:02:a1:41:e5:72:0f:51:91:fc:0f:
9b:86:0d:db:66:34:90:46:b3:b5:58:88:ec:6f:28:5d:e7:9f:
e1:f2:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:09 2025 by rpki-client