Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File: GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier: wMtszv/8mAByAY91ZT/Vq8G1xvLMXPhsy6i3oCAdKSI=
Subject key identifier: A8:D9:84:92:0A:5A:0A:73:E1:3D:91:1C:56:2A:47:34:9D:52:A3:F1
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 0199FBEC65E5A2D5D204614678F1AC410A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number: 15F8
Signing time: Sun 19 Oct 2025 10:03:17 +0000
Manifest this update: Sun 19 Oct 2025 10:03:17 +0000
Manifest next update: Mon 20 Oct 2025 10:03:17 +0000
Files and hashes: 1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: +oFmY9EoX99GQGbUHL6haLtjVrkKLvcOxcJLqe9v5Nw=)
2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:65:e5:a2:d5:d2:04:61:46:78:f1:ac:41:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Oct 19 10:03:17 2025 GMT
Not After : Oct 20 10:03:17 2025 GMT
Subject: CN=a8d984920a5a0a73e13d911c562a47349d52a3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:41:8d:b3:92:76:ba:ad:ee:bf:19:10:f5:
5b:55:e7:3e:e6:28:65:df:c2:ee:77:72:c3:21:af:
95:c6:60:c2:34:dc:b6:a0:a5:27:c8:d7:19:ec:22:
d5:c4:7c:23:c1:e3:72:c4:ef:90:91:b4:d1:c6:3f:
1d:9c:5b:be:89:82:59:eb:5c:8a:68:46:c0:08:a0:
bd:8a:25:2b:06:a7:7f:93:a4:a7:10:4e:bf:87:aa:
d1:e8:a9:a0:81:91:47:ac:07:e2:2d:59:99:ab:cf:
e4:5f:33:72:e0:12:b7:03:67:b4:4e:04:3c:dd:64:
71:d4:72:c6:3e:cd:9b:61:a0:51:71:c6:e3:39:47:
bb:a9:c3:89:77:4f:ee:af:ef:7e:b1:f9:a8:b4:08:
51:4f:f0:b8:00:60:d5:a8:3b:8d:7e:f1:16:2b:b8:
46:ae:d6:33:ad:57:46:9a:c4:09:a9:27:37:bd:b6:
03:92:5d:57:44:f7:eb:31:db:ca:cb:d4:ec:f9:db:
44:38:ad:d8:3c:24:cc:9e:90:b7:a6:3a:26:37:a3:
60:c1:f0:f0:c6:b5:d7:a2:1b:5f:62:2a:50:84:53:
e8:89:f6:a8:a1:4a:3b:45:1f:2d:70:95:a1:98:40:
b4:1a:8e:53:ab:38:ff:11:be:00:b8:1c:9d:7c:5c:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:84:92:0A:5A:0A:73:E1:3D:91:1C:56:2A:47:34:9D:52:A3:F1
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fb:ee:17:5b:ba:7a:e5:5c:27:01:6b:9b:6e:99:47:5f:63:
8f:72:76:e5:f1:c8:ec:a0:f0:29:ef:35:fe:ec:a9:2a:55:24:
0c:a9:97:ba:b7:43:93:07:60:41:43:90:dc:71:b0:1a:6e:06:
91:51:89:11:94:c2:3d:22:2a:d9:49:0a:ca:3a:0e:a6:27:fd:
eb:f0:e5:fe:d7:16:af:9d:27:26:82:f4:3a:75:01:67:46:03:
1b:71:da:ef:cb:cd:c6:cf:08:08:83:e3:3c:e5:de:6b:e0:4f:
84:38:af:d7:08:da:09:08:e7:8a:e7:19:7f:da:d0:fe:10:37:
78:4f:47:27:2f:8b:10:74:da:da:89:c5:42:0d:be:a6:ba:31:
b0:f4:67:bb:89:b3:66:22:be:97:01:64:3c:64:cd:73:7c:86:
7f:76:63:17:29:7f:40:53:72:ee:0e:28:1e:ac:0d:b1:c7:07:
58:f0:b3:4d:bf:7e:cb:4a:77:68:c0:8d:35:33:e2:19:f6:17:
48:75:2f:51:8a:76:5e:97:5d:47:6d:d1:b0:31:e4:0d:df:73:
81:5d:7a:c0:5a:a0:2f:58:ed:b9:fa:40:d1:4c:19:43:ad:ab:
e8:40:45:2d:94:29:bb:e3:db:d8:3b:27:ae:ea:d8:f1:3d:4a:
ad:bc:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:28 2025 by rpki-client