Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
File: grQaKruE3kSzFPizq8zqGKSIFyc.mft (raw, json)
Hash identifier: 2oylvE2RkJnj/KRMfRhan882P7k/s21Mv0HE/39UpxM=
Subject key identifier: C6:6C:46:AC:04:D2:39:FB:AE:43:D8:33:0F:89:E3:6E:90:2B:73:BA
Authority key identifier: 82:B4:1A:2A:BB:84:DE:44:B3:14:F8:B3:AB:CC:EA:18:A4:88:17:27
Certificate issuer: /CN=82b41a2abb84de44b314f8b3abccea18a4881727
Certificate serial: 0199FBB373DA89A407FD1D9BD362DD48A6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
Manifest number: 78
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: grQaKruE3kSzFPizq8zqGKSIFyc.crl (hash: 0NUjaE9TjkJmBK/CRXvfypivW2lROalD4+r/+hKj+jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:73:da:89:a4:07:fd:1d:9b:d3:62:dd:48:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b41a2abb84de44b314f8b3abccea18a4881727
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=c66c46ac04d239fbae43d8330f89e36e902b73ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:fd:53:71:17:7a:41:06:b2:f2:9e:c4:3c:
1a:d9:fb:95:9c:95:a6:c4:f3:f5:64:0f:86:07:85:
ee:ea:08:1e:68:1d:cb:46:2f:1e:01:0d:be:fc:cb:
8c:3d:92:a3:af:da:26:53:e4:ab:36:f4:08:f3:af:
07:a8:42:70:f8:a5:98:5d:06:20:0a:92:8a:df:4e:
31:48:db:25:9a:22:03:69:04:32:37:ac:a6:ee:a8:
e9:0a:68:4c:f6:f8:65:03:f8:b5:c1:e9:7c:46:65:
09:f0:69:a8:4f:1c:14:7e:f6:b4:cb:e7:c7:f5:5b:
66:b5:42:96:db:05:77:5f:a0:ac:fa:42:41:df:13:
bb:a0:00:0c:9f:f2:8d:7d:2a:3a:e3:51:4e:f5:d8:
fa:fa:03:47:60:c5:29:92:7c:56:82:cb:b6:79:75:
cf:3c:ed:df:ec:c7:01:ff:91:c5:47:9e:ce:ba:76:
44:84:b5:19:f2:a1:e2:5b:60:49:a4:1c:a7:14:b0:
1c:db:39:9b:cb:ff:9b:96:84:89:ec:49:9c:79:3d:
3e:5d:0a:b0:51:71:72:38:8b:f6:41:3c:af:9d:fe:
6e:6a:28:11:fd:59:75:4d:7d:13:93:1a:ee:67:bf:
87:c2:c3:ac:c8:25:6a:1f:90:c2:29:0e:53:3b:ed:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:46:AC:04:D2:39:FB:AE:43:D8:33:0F:89:E3:6E:90:2B:73:BA
X509v3 Authority Key Identifier:
keyid:82:B4:1A:2A:BB:84:DE:44:B3:14:F8:B3:AB:CC:EA:18:A4:88:17:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b9:7a:5c:e1:47:a7:da:36:a2:58:b4:68:ae:70:a9:a1:76:
2e:86:d5:7f:57:0a:ec:f4:c1:f9:43:24:f6:b5:42:ef:2c:47:
c6:38:5a:d5:67:f4:ef:52:4a:32:ca:4a:10:bf:fc:e1:f7:e5:
b9:61:90:11:d9:4a:86:3f:b3:19:9d:73:c4:6f:c6:cf:4c:e8:
06:0b:1a:e6:01:20:2d:df:0c:02:60:eb:80:1f:d0:e8:9a:45:
92:50:85:b8:80:b4:72:54:37:ad:78:e3:11:ef:f4:2c:a1:40:
bd:a2:01:d6:e7:24:b2:3f:cb:ed:71:9f:77:8b:43:cd:31:79:
93:0e:a6:43:d3:19:c9:4f:78:f3:67:9a:af:f5:33:52:a5:4e:
12:95:30:38:c4:03:94:3c:f3:da:f2:b7:e8:12:15:fe:23:0d:
82:51:c9:5a:78:0f:53:62:5e:a3:b3:6f:e3:07:95:b4:a4:ab:
a0:85:3e:a2:9d:f1:ba:86:65:b2:44:c1:32:51:f4:38:e3:5d:
59:c6:6f:e4:bb:55:a0:92:9d:30:5d:7b:06:f7:f3:32:9e:6d:
6c:d2:5a:40:7e:f6:d5:45:b5:77:09:92:4d:7c:2a:b9:2b:53:
86:35:c5:2e:35:7a:c2:17:3a:e9:15:8c:06:3a:36:1c:d4:e5:
f6:3c:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:50 2025 by rpki-client