Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: 6lfxMnALsM+mHM1AhnqcbPjBmNMmviADPTXkp1ltxm8=
Subject key identifier: 2C:9F:FE:11:10:34:BD:7D:5F:7D:4B:3E:83:8C:9C:21:D4:56:70:35
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 0198D54DC8B580A2D6BCE7EAF964F9B72866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 11F0
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: UAJll1s41TiWP1vxGdTNTH4VLxLg47S/FzhsJd0CKys=)
3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c8:b5:80:a2:d6:bc:e7:ea:f9:64:f9:b7:28:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=2c9ffe111034bd7d5f7d4b3e838c9c21d4567035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:95:32:ba:f0:7d:4e:31:75:72:46:bf:cc:
c4:0b:5d:11:dc:d6:60:9d:f8:dd:98:a0:fe:9b:38:
9b:3f:ec:ec:dd:ad:c8:0d:d3:f7:e1:c6:9e:41:e0:
7a:c0:bd:a6:a3:77:bd:02:f8:3f:84:11:4e:a2:58:
1b:56:79:2f:bf:1c:93:11:06:12:6c:d2:ad:25:bf:
c1:85:c3:15:0f:ee:33:42:31:21:43:06:38:09:15:
db:e1:3c:4b:aa:77:11:af:32:b1:53:0f:24:4c:a1:
f3:85:35:07:9a:30:28:3a:8a:0c:dc:2f:ba:59:9b:
5a:c0:46:13:0e:3d:85:62:75:ea:03:fb:85:bb:a0:
e9:a1:b9:d7:8e:f3:d9:80:da:22:19:f8:ea:43:0c:
48:ca:5d:b5:26:42:c7:56:e0:f5:6d:2b:13:bc:20:
2f:c4:fd:1d:ae:7f:d0:db:63:e2:0b:6f:59:e8:aa:
76:ac:8c:7b:e2:aa:ac:34:07:d1:84:12:a4:d4:e6:
1f:19:3b:23:57:7a:d1:15:66:58:a3:30:ca:dd:09:
2c:ca:e9:55:fc:11:3f:03:99:f1:60:2b:cd:b9:01:
9f:00:2a:62:fe:03:b7:01:c1:c0:e4:33:81:83:4b:
50:1a:2b:99:64:80:c9:98:f8:4c:ad:57:a1:f7:14:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:FE:11:10:34:BD:7D:5F:7D:4B:3E:83:8C:9C:21:D4:56:70:35
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:71:fa:80:97:5f:67:75:b3:3d:c2:d2:b3:7f:a7:0a:43:59:
e3:4f:1e:60:65:72:48:9b:87:58:fa:e7:98:32:3e:30:2d:a8:
e8:71:a4:1a:a2:e1:09:d3:68:22:ba:11:ae:cb:44:f8:d7:44:
d7:81:86:a9:f7:59:9b:2f:a1:e1:f9:5f:bf:72:1e:f9:8c:9d:
5d:6b:7d:1f:17:b2:ee:71:0a:cc:fe:97:e4:e4:e5:05:f7:a0:
06:e5:1e:88:45:44:12:62:a5:aa:45:2d:3a:4d:e0:fb:47:75:
e0:bf:af:49:12:dc:09:26:41:b3:f7:57:b1:0e:6b:d1:42:96:
fb:ea:90:f7:31:21:5b:90:c6:36:f4:4f:9f:bb:4f:4a:55:aa:
d7:e7:b6:f8:85:89:72:6b:4e:86:f5:4d:54:09:bf:7d:ca:69:
3c:a2:76:57:c9:e9:cd:f7:16:4e:b6:07:4b:77:0a:3e:f8:c0:
a4:93:0b:1c:3a:39:14:f3:4b:00:d6:2b:28:a3:a4:08:e9:f3:
d2:8b:f1:68:c7:88:62:92:d9:3f:89:3c:7e:ff:f6:4d:40:2f:
2e:64:12:c6:8d:b4:a5:29:b6:29:48:fd:a0:37:67:73:4a:ec:
d0:f2:39:f3:47:14:ff:3e:13:0a:04:fb:dd:37:ee:83:41:07:
62:dd:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:01 2025 by rpki-client