Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: HX7DqRQVI7tlMzdkg9a4PIBA4I+uCRRcEJ7bTxw9Dn0=
Subject key identifier: 2D:CA:BE:6E:BA:9A:D8:38:B9:40:5E:EB:63:82:7C:5C:FF:6C:39:0F
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 0199FCC6B2A3EA816722AB0CFFC2A6C33AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1289
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: D2U1f06a1R1VAEbzzRYLCEwIwSDbCvzZXb4TTEV0aWU=)
3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b2:a3:ea:81:67:22:ab:0c:ff:c2:a6:c3:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=2dcabe6eba9ad838b9405eeb63827c5cff6c390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:e0:4d:03:09:e5:0f:80:bc:d1:38:9c:08:
d1:32:43:c7:57:90:02:ed:97:58:5a:c0:13:c8:c5:
4a:cb:87:e2:4e:db:e7:40:16:b0:20:f7:62:e3:91:
3f:59:0c:74:ad:53:9b:8a:31:94:0d:47:df:6d:66:
61:f3:c1:d9:ff:6c:22:2b:f9:ef:ed:09:07:02:a3:
e7:b6:74:8f:c9:fa:72:ef:f0:b0:ee:7c:bd:50:05:
7d:65:8e:c0:2b:a1:ea:f3:b1:f1:a6:72:46:68:d8:
5d:ba:10:6f:bf:07:3c:7b:8d:bd:69:93:53:a2:ce:
38:5e:39:ef:ac:c7:80:11:c6:36:8d:44:d2:fb:e4:
0d:9a:05:ca:cd:3b:71:43:34:b9:95:67:fe:4b:29:
c5:ff:70:a4:82:25:da:4e:e0:7e:35:d6:46:52:ff:
bf:aa:c0:fe:63:94:a4:8e:8d:e6:95:20:30:c8:d3:
a2:be:fe:04:b1:d4:3a:b0:02:67:c1:ef:3a:30:99:
06:a6:ba:fb:11:68:20:4d:e5:1c:07:0e:80:ac:45:
2f:7b:46:66:38:a5:d3:54:6b:5a:c6:f7:c8:89:d4:
9b:e1:71:7e:2e:19:b9:14:4c:47:dd:4c:e0:48:f5:
9d:d2:10:47:3b:af:83:14:0b:7d:ca:87:f7:8d:95:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:BE:6E:BA:9A:D8:38:B9:40:5E:EB:63:82:7C:5C:FF:6C:39:0F
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:02:d1:4a:49:cb:04:6d:09:81:e9:62:fb:5a:47:d6:e1:0a:
49:3b:31:ab:7d:1f:38:e0:75:31:36:81:bc:30:6b:8f:84:d8:
bf:39:c8:4d:9e:21:75:1a:fb:16:ee:09:0f:25:30:ef:0d:d2:
1b:04:4a:58:9d:e8:d1:f4:d0:a5:11:8e:ad:eb:76:bb:a3:c3:
2e:28:49:dd:36:90:4b:73:10:6f:36:ad:6a:64:e6:a3:5d:b4:
62:ab:a5:74:42:48:59:1e:70:fd:a6:46:6f:f8:3d:7c:e1:1d:
68:a8:df:cd:2c:f4:bb:c7:6f:d6:5d:6f:12:9c:5b:2f:57:c4:
f3:16:58:d7:09:36:e8:bb:c0:bc:6f:b7:07:fd:8d:c7:29:b1:
35:a0:4e:ae:fd:c6:ce:a6:a7:d7:25:86:56:5b:bc:b1:40:8d:
17:b8:85:41:e8:e2:a0:f2:a7:3c:7d:2d:44:61:23:eb:5d:58:
89:d5:06:2b:86:dc:69:60:60:da:01:48:85:4a:bc:c4:7d:50:
38:ab:b9:ca:7f:73:62:9c:54:4c:f6:ce:bd:f3:0d:94:84:a6:
64:bd:54:5a:73:70:f4:81:f1:78:5d:f6:eb:e5:58:5e:c7:a6:
b1:20:0e:d8:7b:c8:a5:97:fc:04:8b:c1:29:01:a5:92:42:42:
33:7d:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:24 2025 by rpki-client