Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: bKujmLBjByiVBlwGcaVHlI72SrEVtcqIwihuCnqVA9M=
Subject key identifier: 80:FD:01:5B:CE:49:3E:B9:29:3C:52:B9:A6:F8:93:3F:E0:33:18:9E
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 0199FCC67DDA07155470007614ADA7A2BC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 0725
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: S2UsmZbPUqZYRWijL1jKCsHr22fX8IXpe+FEK9+IHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7d:da:07:15:54:70:00:76:14:ad:a7:a2:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=80fd015bce493eb9293c52b9a6f8933fe033189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:4f:52:4f:14:7e:ae:84:cd:d3:1f:8a:7e:
c8:e4:d2:16:db:5c:7f:b8:25:ab:d4:bd:ec:9e:3d:
59:a3:9e:c8:d4:83:9e:85:a1:b9:17:47:44:f9:4e:
7b:db:e6:9a:6a:88:65:66:f2:30:a1:e8:ad:8c:84:
f6:d6:03:e0:c0:55:52:00:fb:9c:66:c4:2f:f7:54:
f0:7a:99:0b:b7:d6:90:7a:6f:06:a0:12:a7:69:4f:
ba:6e:92:89:66:00:be:87:10:f3:ea:24:2b:69:09:
e9:58:9a:f7:28:4a:c5:99:17:d6:9e:5f:02:e7:ba:
7b:07:52:3a:96:6e:ef:8a:92:ed:cd:2a:2e:4b:89:
af:2f:70:f7:cf:02:0a:57:6d:19:9c:f6:d6:63:54:
4d:69:74:25:65:01:de:59:9b:1e:63:9e:bd:17:b3:
1a:1a:ec:2a:dd:0a:d6:77:d9:a7:c8:65:74:cd:6d:
21:d4:00:af:4a:bc:6b:d3:93:cd:3d:c8:34:e7:b8:
c6:ae:eb:a2:06:4c:7a:1b:f6:f2:56:ab:df:5a:b8:
5b:3e:cc:a8:d5:a5:cf:9a:a1:78:5b:b9:e9:fa:a8:
72:4f:33:a3:9c:c8:a7:51:06:b1:d2:ef:d5:53:5e:
9e:fc:52:a8:0c:e1:59:0e:c8:68:8a:4e:fb:4c:1a:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FD:01:5B:CE:49:3E:B9:29:3C:52:B9:A6:F8:93:3F:E0:33:18:9E
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:79:b0:e1:47:f0:a5:e8:c4:1f:cd:b5:9a:62:77:ec:0b:50:
05:78:8d:a5:5f:90:98:62:57:b9:12:f0:a5:48:41:46:8a:bc:
65:38:6c:f0:e1:3e:6c:3e:a6:00:ee:cb:51:51:73:83:6c:c6:
a7:07:2d:4a:17:1d:4d:ec:fd:d8:e2:11:ef:9f:55:a3:17:83:
61:d7:58:d3:cc:c2:1f:7f:f4:f5:be:f6:e8:50:06:fb:d1:f7:
88:ce:3f:22:1b:cb:26:9e:70:f9:79:cd:77:69:f1:cb:ec:e2:
cd:fc:fb:53:e4:a8:17:3a:b8:ae:f8:8c:6b:a8:a2:6c:9a:72:
26:b8:87:a2:04:f1:41:09:4b:6d:b2:bb:d0:45:46:0b:1e:49:
1a:92:33:e9:2f:78:bd:d4:b9:f9:20:42:7f:25:66:8c:2d:ca:
44:d4:2f:eb:83:b3:fb:12:3c:6e:bf:bd:ad:93:81:96:b6:5b:
5b:a0:b9:de:6c:9e:e5:15:0e:ca:09:b5:ab:e5:76:90:0d:8f:
8a:3e:f6:8c:70:03:26:b0:f5:ce:dd:13:76:00:ec:c4:25:5e:
eb:e6:4e:72:cc:e0:91:d6:cf:5c:f3:63:05:17:64:34:3a:fe:
73:64:4c:7f:a7:90:c6:eb:c5:57:20:56:b0:95:f1:ed:36:0a:
31:4c:cd:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xn3aBxVUcAB2FK2norx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz
YjMwZWUwHhcNMjUxMDE5MTQwMTMwWhcNMjUxMDIwMTQwMTMwWjAzMTEwLwYDVQQD
Eyg4MGZkMDE1YmNlNDkzZWI5MjkzYzUyYjlhNmY4OTMzZmUwMzMxODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zxPUk8Ufq6EzdMfin7I5NIW21x/
uCWr1L3snj1Zo57I1IOehaG5F0dE+U572+aaaohlZvIwoeitjIT21gPgwFVSAPuc
ZsQv91TwepkLt9aQem8GoBKnaU+6bpKJZgC+hxDz6iQraQnpWJr3KErFmRfWnl8C
57p7B1I6lm7vipLtzSouS4mvL3D3zwIKV20ZnPbWY1RNaXQlZQHeWZseY569F7Ma
Guwq3QrWd9mnyGV0zW0h1ACvSrxr05PNPcg057jGruuiBkx6G/byVqvfWrhbPsyo
1aXPmqF4W7np+qhyTzOjnMinUQax0u/VU16e/FKoDOFZDshoik77TBpjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID9AVvOST65KTxSuab4kz/gMxieMB8GA1UdIwQY
MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt
NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3
LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3mw4Ufw
pejEH821mmJ37AtQBXiNpV+QmGJXuRLwpUhBRoq8ZThs8OE+bD6mAO7LUVFzg2zG
pwctShcdTez92OIR759VoxeDYddY08zCH3/09b726FAG+9H3iM4/IhvLJp5w+XnN
d2nxy+zizfz7U+SoFzq4rviMa6iibJpyJriHogTxQQlLbbK70EVGCx5JGpIz6S94
vdS5+SBCfyVmjC3KRNQv64Oz+xI8br+9rZOBlrZbW6C53mye5RUOygm1q+V2kA2P
ij72jHADJrD1zt0TdgDsxCVe6+ZOcszgkdbPXPNjBRdkNDr+c2RMf6eQxuvFVyBW
sJXx7TYKMUzN5Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client