Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: SlVj0ujCwUJtDga+53MrPpSu03ZUTG3iomBYq/EKYzA=
Subject key identifier: F5:EB:AD:4A:1A:DC:0D:20:B7:63:3B:3E:CA:56:5D:20:32:93:D2:05
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 0197C8DE5D89E1329BF7EA36CDE735C0F416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 0601
Signing time: Wed 02 Jul 2025 02:01:45 +0000
Manifest this update: Wed 02 Jul 2025 02:01:45 +0000
Manifest next update: Thu 03 Jul 2025 02:01:45 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: /s2/RVKXfmw19bTIDuAO6MFNM8zRtxywU7aEXhFuWmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:de:5d:89:e1:32:9b:f7:ea:36:cd:e7:35:c0:f4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Jul 2 02:01:45 2025 GMT
Not After : Jul 3 02:01:45 2025 GMT
Subject: CN=f5ebad4a1adc0d20b7633b3eca565d203293d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:25:98:ad:27:29:17:38:29:85:71:3e:94:
91:01:73:99:6c:46:fb:45:0f:bc:72:00:6e:a7:4a:
a6:0c:36:3e:3c:a0:2a:57:7e:f6:7b:24:4e:d4:6d:
de:5a:a6:fb:c9:18:a0:5a:0f:2c:f3:e1:34:5d:9e:
ad:33:0f:9e:2e:59:99:70:ee:88:db:50:f7:db:14:
89:41:60:9b:4f:b1:3f:aa:05:16:c0:e1:de:76:16:
d1:b0:0b:f7:3e:f2:ae:97:99:c7:6d:c2:e8:14:5e:
a9:ee:39:7a:4f:a5:a8:40:ed:13:40:d2:47:b8:28:
b3:1f:6d:7a:fd:9f:26:7b:20:91:7f:5d:ef:bd:80:
c7:96:28:2e:ca:b6:6b:d6:f4:8b:84:32:7a:b0:5e:
03:36:50:c9:a4:fc:d6:2c:e1:13:e7:d4:c9:8b:d0:
40:75:2b:0b:df:3e:02:31:56:a2:e5:29:a0:e3:70:
55:ca:db:f7:80:e5:c5:b0:92:bc:66:31:46:b8:09:
c6:d0:4b:91:9d:b2:ca:f1:39:b0:55:8d:d8:08:42:
d0:64:e3:49:18:e2:82:8a:4e:00:49:10:bd:3d:c9:
9a:4e:64:44:19:a6:62:11:dc:62:81:cf:e5:fd:f1:
35:3d:81:61:d9:e4:eb:06:ae:ed:42:ba:db:53:2f:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EB:AD:4A:1A:DC:0D:20:B7:63:3B:3E:CA:56:5D:20:32:93:D2:05
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b2:33:80:52:6e:f3:5b:f7:20:d1:fc:72:d1:99:df:9b:3d:
be:e9:46:45:34:de:de:4c:fe:f2:b6:fb:b2:6b:2d:6d:b1:95:
cb:c8:bc:87:19:6d:30:8b:1a:ab:7e:cf:ed:1e:0a:ca:fe:3b:
f0:4d:4c:e4:52:73:0f:17:eb:19:2f:72:26:12:a3:ad:2c:24:
68:df:e0:49:2e:00:8a:db:e8:f6:7f:89:bd:7d:dc:77:40:ad:
29:94:5e:c3:4d:8c:79:ec:38:1e:ba:98:ef:7f:87:f5:c7:d8:
44:1e:14:08:d8:df:8c:f1:19:30:ce:31:36:ff:17:8e:cb:0b:
dc:3d:dc:16:71:29:ab:f7:5f:d3:0d:0b:83:28:7b:d1:56:a5:
45:35:30:cf:b2:0d:48:72:51:c3:1c:87:ac:d5:56:bd:86:2b:
c9:d2:14:0e:04:a8:be:13:37:5f:c0:9b:94:c4:7f:bd:c4:12:
76:9f:b3:23:4d:78:eb:c3:93:49:8c:b2:65:29:b7:dd:1c:c6:
23:e6:7f:3f:10:7a:4b:e9:d9:40:7d:86:b5:77:9b:31:88:52:
8f:1d:9c:b1:0f:10:68:1d:fe:98:53:68:86:6e:4a:44:7a:ae:
f9:36:5d:c9:37:8f:58:2b:b4:76:07:e8:3a:a3:a4:9b:7c:b7:
e6:61:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:33:47 2025 by rpki-client