Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier: +ZCYkPqFRy8vIKbgCW0JBuOwyPYV5os2QbZDK1YZeOg=
Subject key identifier: F7:71:19:DA:BE:C0:87:FB:91:92:E8:63:5F:55:D8:C9:9E:20:3A:0A
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial: 0198D4E05FBA261BA65D7C287E382CD2BB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number: 05C6
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: AA7crUB7j9buDzA3DBCbgf/rCJIZ3JcKx/maTO+rc+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5f:ba:26:1b:a6:5d:7c:28:7e:38:2c:d2:bb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=f77119dabec087fb9192e8635f55d8c99e203a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:5c:ca:60:86:ae:90:54:29:e2:d0:4d:07:
ab:db:e5:bf:46:6a:b2:6b:a4:7c:eb:a4:6a:c5:35:
f5:30:bb:ec:32:85:98:3e:97:8b:3f:d0:a8:e9:eb:
13:9e:17:9d:44:4d:e9:28:8b:9e:a8:67:9b:8c:95:
37:d1:b3:37:72:44:3d:e5:b3:9c:61:7e:16:80:09:
eb:91:7c:a2:a7:72:a3:4a:01:14:b9:99:ad:b7:0e:
1d:2e:4c:55:d3:83:3a:fe:4f:81:19:ae:9a:5d:b1:
6a:b9:0e:fd:9f:e0:ab:e7:43:ac:fa:58:65:78:bb:
dd:ef:fa:7d:97:af:df:c2:51:f9:78:7b:02:b0:eb:
f4:4f:be:3a:33:16:55:90:e2:bc:42:94:cc:b0:36:
0e:ed:37:76:64:05:ec:e8:54:11:1b:3c:89:6c:70:
5d:47:7b:ed:ea:de:6e:e9:35:9e:84:5a:94:9e:10:
57:b6:0f:15:ee:0c:a4:b0:33:85:35:f1:c6:8e:4c:
83:7d:7c:ed:46:05:e3:4e:3a:46:52:81:da:80:d6:
2f:ae:8a:0d:5c:04:a1:d9:da:eb:16:42:f2:b2:d5:
f8:99:b7:e3:f5:94:d4:f6:dd:2e:b0:0a:b6:63:d6:
fa:ae:75:83:ab:2f:23:71:2c:e3:54:c3:f7:77:84:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:19:DA:BE:C0:87:FB:91:92:E8:63:5F:55:D8:C9:9E:20:3A:0A
X509v3 Authority Key Identifier:
keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a2:78:ea:25:27:1a:7d:ea:70:eb:06:40:ec:85:e7:8b:b5:
96:9f:6c:83:3a:09:4b:dc:a2:69:50:32:78:52:3d:40:2b:cc:
7e:d4:c5:9b:a6:4c:ca:11:4f:a2:1e:15:94:78:c2:52:79:2c:
10:20:8d:be:61:37:4d:e3:d1:4c:61:63:25:30:7e:d3:42:66:
a8:88:6a:79:93:1d:34:aa:f0:dd:c9:01:9c:61:09:53:dd:e3:
57:cb:eb:62:e5:6b:fb:f8:07:e5:a0:14:67:ab:f1:d5:3c:88:
c3:54:8b:45:fd:6f:2e:fc:87:cd:69:33:60:c5:5a:2a:ae:89:
60:03:75:fa:5c:85:35:06:ad:63:4c:3a:80:ad:d0:04:36:7d:
de:4b:52:3c:fc:48:9c:36:03:c9:2a:c2:82:60:0f:5b:7b:f2:
9b:c4:99:e9:2d:c9:50:a4:7f:b2:c3:31:62:c8:cb:bf:17:2c:
07:db:f2:d1:b9:1c:49:f4:d7:62:1c:4d:8f:bc:37:fe:03:e6:
01:59:c8:51:cd:c2:a2:12:b7:d4:80:3c:05:9a:e4:e6:3b:4e:
81:d9:f0:7f:e0:89:f3:50:15:7f:86:8c:8e:82:ab:13:cd:76:
af:04:88:d4:03:af:5a:8e:8b:1f:af:b7:7f:46:38:da:ed:f0:
79:07:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:47 2025 by rpki-client