Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier: QgrysDyfKgRA+3t+80GVD0YlmUFljr/5vfOI1i28LNA=
Subject key identifier: AD:00:F2:84:96:96:98:79:76:D2:F0:10:79:38:41:E9:AB:3F:77:C9
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial: 0197B70EECD3B3C42CB396A4A4833940EB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number: 0532
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: J+tde3BSGthKqTtmYr0FfWQs+BFmdoguex1Y96UoJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ec:d3:b3:c4:2c:b3:96:a4:a4:83:39:40:eb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=ad00f2849696987976d2f010793841e9ab3f77c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:56:9b:1a:ef:4f:75:35:48:7c:09:c2:6f:
e3:38:ac:1d:a3:e2:10:94:6c:80:58:d1:d2:28:be:
18:e9:bb:c0:13:76:02:c2:38:ef:b4:76:b4:a5:45:
36:2c:23:a9:7a:8b:da:51:fe:0f:b3:f7:cd:3d:27:
98:b5:ef:ec:59:48:6b:c9:8a:54:02:73:d3:63:0f:
bc:ad:64:17:2e:dd:b4:56:ac:c1:dc:94:d9:4f:45:
10:79:83:21:be:0e:49:66:15:7e:e8:34:41:d4:95:
e8:88:12:13:0c:64:69:a8:27:18:06:47:3c:a2:3b:
11:37:13:a2:e6:cf:2f:0b:2d:8d:06:28:08:80:58:
df:c3:94:f1:13:61:c2:3c:8c:29:ea:49:c2:9c:cc:
11:e3:66:4b:0a:8e:56:91:63:70:f0:31:e8:31:20:
07:e3:0d:a6:b6:9e:4c:96:17:2a:f3:60:49:79:34:
d5:af:2c:74:06:2c:4f:3b:3d:80:84:9f:40:fc:8c:
65:a1:f7:14:32:90:f8:1b:33:b7:e4:5c:30:f8:4f:
a5:00:e8:b3:92:9b:af:01:eb:0a:e3:99:2b:b7:56:
76:37:cf:45:3f:3d:89:8f:4c:43:74:4b:a0:ea:a3:
40:ea:78:32:00:39:95:78:f4:b4:3d:0f:e2:5c:4d:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:F2:84:96:96:98:79:76:D2:F0:10:79:38:41:E9:AB:3F:77:C9
X509v3 Authority Key Identifier:
keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:3f:ff:60:82:f9:88:63:26:fc:1a:ea:97:e0:b3:c9:81:
75:56:28:48:b1:b9:02:e5:bd:ef:89:3e:cf:88:13:f4:4d:57:
49:b2:59:54:d9:aa:0d:37:e3:83:1e:b3:58:6e:12:da:ad:b3:
7f:37:e3:62:75:00:69:50:79:12:41:41:86:51:0a:c6:75:73:
0f:17:8c:5e:22:3e:18:50:ab:a4:22:0b:30:41:22:79:b2:cc:
cd:6c:7e:66:1f:1e:70:c2:e5:33:32:7e:f9:3b:dc:1e:ef:5c:
6b:4a:58:22:15:b1:51:85:b5:f9:19:64:02:c5:44:5f:6b:5b:
33:6b:28:12:bf:58:ca:47:9b:ae:02:24:7f:b2:7e:56:4e:3c:
30:4c:8d:5d:f7:67:47:22:59:a3:7b:b4:7c:83:50:01:46:e1:
8e:2c:46:18:1b:d5:86:30:19:44:b5:ff:6f:31:c2:fe:47:2c:
62:02:1a:6f:f6:ac:fd:ba:27:8d:56:92:89:87:3b:b3:28:84:
0f:d5:ae:19:24:bf:a2:bc:91:3a:1d:fe:1f:3f:0a:85:7f:38:
25:d8:e0:5b:da:f6:89:2c:cf:2e:8b:65:65:2e:5c:b7:eb:fc:
50:fd:b5:29:8f:c1:46:c6:7b:e9:94:6f:75:2a:ed:22:4f:45:
03:73:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:32 2025 by rpki-client