Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: oQC7ePfN48FrBY/NdtzcSChEFDvgSkcqa4EncTst/VE=
Subject key identifier: 29:95:D3:ED:A5:1A:0E:68:63:0B:12:09:0D:30:20:BE:FA:77:BA:65
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 0198D6603A1051391CEF59F19BA6FC19FF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: RL7U43flltvnFZQi67dILuKZpDMZ4tNOVnW+mZPW+LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3a:10:51:39:1c:ef:59:f1:9b:a6:fc:19:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=2995d3eda51a0e68630b12090d3020befa77ba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:73:56:c1:b5:40:42:54:b9:4c:1e:fe:31:
6a:03:6e:45:49:26:0b:af:8f:02:fe:1b:a6:2c:97:
cb:e0:45:07:79:22:c2:e1:55:9f:57:e3:3b:51:11:
19:ae:6b:3f:1c:a3:41:54:7d:78:41:3f:f0:4a:50:
6b:14:7a:2e:57:1b:d2:7f:18:3c:77:14:e4:8f:47:
44:ca:90:32:69:c6:e2:5b:5b:cc:02:66:93:75:76:
11:45:9a:be:bf:28:e8:a6:53:26:d0:45:35:e5:7d:
30:6d:2d:56:43:ba:47:c4:4f:00:2d:54:71:95:a3:
83:59:be:80:3e:45:1c:5c:2b:b1:91:08:2d:02:a0:
06:c8:88:48:05:3f:25:ae:f1:0a:e4:d1:ae:ca:e1:
32:ad:ad:70:f5:99:5e:73:63:94:f8:08:86:5b:14:
b6:2d:4c:52:58:e3:51:28:d0:ec:66:7a:c6:29:53:
ce:23:8d:f6:28:20:cd:45:1f:91:72:00:1e:58:76:
e3:2f:a9:cc:78:63:94:3f:f5:6c:6b:30:09:ed:53:
2a:5b:38:b3:40:d8:00:62:26:9a:19:ee:fd:ee:79:
4e:ca:74:16:fc:a2:50:61:ca:d4:8c:d5:1b:04:3e:
d9:95:4c:75:2a:49:87:1a:57:cb:30:95:5c:a0:47:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:D3:ED:A5:1A:0E:68:63:0B:12:09:0D:30:20:BE:FA:77:BA:65
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cf:b1:a3:15:d5:04:70:8d:f2:bf:d2:f7:5a:41:9b:0c:a5:
d7:6a:6f:13:6d:a9:e6:f9:b6:93:c5:0e:03:37:b0:b9:44:2d:
64:9e:2d:8e:0d:2c:02:9b:e7:70:80:d4:ae:5b:15:e2:3e:c6:
08:83:28:94:8d:3f:57:b3:52:51:18:07:9b:92:28:ef:d4:c8:
cf:d0:39:0f:de:58:66:f1:4f:ce:cb:38:68:86:71:bd:fa:c1:
20:e5:9f:c5:ef:84:61:c8:7e:78:ef:75:34:1c:6a:c5:77:ff:
50:6d:30:8a:71:fd:e5:a2:9f:74:a0:84:d2:b5:30:18:0c:37:
6f:0c:a7:bc:06:30:09:c3:e5:55:ed:a4:20:a0:72:6b:36:c9:
bb:1c:c0:77:e7:58:89:46:19:fb:28:6e:9a:52:6e:22:ab:df:
da:66:26:8c:8d:28:09:71:29:ec:f7:b1:8f:77:7c:cc:e5:1c:
4f:40:b4:61:35:c6:de:0b:67:15:63:d0:e4:93:15:70:7d:65:
70:aa:b5:12:91:30:0d:e7:10:14:f7:49:ab:e8:13:d2:09:2d:
29:bd:30:ae:45:48:c2:56:0d:3c:21:df:f0:2f:23:c9:fd:11:
1b:97:7d:75:67:e9:fe:5b:b2:95:4f:86:a0:10:22:43:da:5b:
27:be:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:08 2025 by rpki-client