Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: +7w2gFbfyzdIy9XRyj1YMeX5XPBYUPKqP+3yVHEPKjs=
Subject key identifier: F2:E6:11:FF:A7:6B:8A:A9:9F:30:87:02:4E:7C:7D:16:88:19:49:11
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 0198D7060E685735FEDDF68DCF0A0199FED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0935
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: lHCPmSLYc1OTzKW3L0gJLce4r38rvp3iVTfRgK8lO+s=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0e:68:57:35:fe:dd:f6:8d:cf:0a:01:99:fe:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=f2e611ffa76b8aa99f3087024e7c7d1688194911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:ea:e8:31:af:43:f9:dc:1c:4d:df:3d:7a:
c0:b2:81:92:bd:9b:03:cc:ae:9e:8d:e5:9a:d9:09:
c5:34:f0:0b:a4:8b:bc:da:3f:ba:74:f1:aa:62:fa:
dd:80:8f:ab:fe:2f:6b:7f:4e:d9:97:3b:48:24:41:
84:fe:cb:c7:5d:70:3a:50:4b:02:aa:8c:2a:5c:9d:
5a:11:28:00:bc:27:49:86:cd:e8:34:a8:d1:b5:ee:
87:c0:88:c7:4e:87:4d:d5:dc:ce:61:cc:51:ef:09:
ad:e4:ca:18:a1:57:5a:8e:ee:c3:cb:6c:fc:b9:67:
b2:b3:b4:63:99:b8:66:15:31:ae:22:df:9b:24:76:
4c:ff:15:6f:25:a7:b4:8e:7e:e9:20:2c:82:cc:58:
1a:96:c1:4f:4e:21:98:24:58:55:b7:cf:b3:a1:80:
9c:7b:f6:3e:5f:06:15:03:dc:37:fc:a9:3d:9a:4b:
5a:3f:a5:31:45:9f:5c:1a:1c:78:7a:f7:02:b6:cc:
60:94:60:93:ed:8c:42:b7:16:99:14:32:0e:f0:07:
54:51:8e:ac:d9:25:dd:77:c8:6c:bd:a0:67:63:fa:
26:a3:1b:a4:ef:f7:d5:96:e1:65:ff:52:cd:ce:4c:
8f:ee:26:b4:16:76:f0:78:38:74:1e:0e:e3:b8:4e:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:11:FF:A7:6B:8A:A9:9F:30:87:02:4E:7C:7D:16:88:19:49:11
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:24:a9:49:b1:30:62:f6:0e:06:c0:81:ec:da:89:bb:07:
b6:f6:88:57:c1:16:5e:5a:b7:a0:50:8b:44:c8:b7:bb:ca:b7:
ad:47:cf:bd:f5:90:6a:17:85:9d:7b:3a:70:98:d9:4f:56:fd:
d5:7f:51:37:41:65:f0:d7:5c:7a:44:af:3e:15:6c:3f:98:f8:
a7:37:f3:aa:c6:85:23:c2:2b:a5:58:2d:5f:b1:1f:98:71:1b:
45:b0:14:70:71:aa:c1:7d:40:ae:58:4d:cc:d4:97:3f:b9:c0:
43:d0:b2:9f:3e:e5:80:58:48:40:20:85:e3:1e:73:f9:f3:87:
75:f5:53:b4:c5:3f:12:b9:87:a8:58:4d:aa:59:d7:d4:0e:be:
01:9f:be:ad:f7:a8:50:4f:f9:6c:65:05:1d:49:f7:a6:a8:f4:
b0:a9:6a:1c:2f:20:6f:0c:09:d5:0a:08:44:ed:2d:ab:73:23:
d8:4f:fb:0b:58:43:41:97:ce:1b:fc:59:ae:a3:c5:81:fe:0a:
19:fe:52:8d:85:d7:f4:a1:1d:60:19:1d:3a:2f:0e:7a:8b:56:
04:18:33:10:3e:01:48:57:43:2c:35:98:cf:1f:cd:46:ba:3b:
99:be:e0:fd:67:fd:d6:09:bf:58:ae:75:c7:a6:62:89:bc:0f:
15:ce:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:55 2025 by rpki-client