Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: C+x2Mv9Akbyr+J9xME+5XPgCMgtAJ+OjJ3S3qvYhQlc=
Subject key identifier: C9:82:6B:7E:8F:CA:9E:47:49:ED:96:D1:49:D5:09:92:42:AD:71:F3
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 0199FAD808A65F32087D83C11B81932E74ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 05:01:25 +0000
Manifest this update: Sun 19 Oct 2025 05:01:25 +0000
Manifest next update: Mon 20 Oct 2025 05:01:25 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: LBNrBIs+DBdiohIINMN1mn7FtfFHOQXT+m47Dy3hkeE=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:08:a6:5f:32:08:7d:83:c1:1b:81:93:2e:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Oct 19 05:01:25 2025 GMT
Not After : Oct 20 05:01:25 2025 GMT
Subject: CN=c9826b7e8fca9e4749ed96d149d5099242ad71f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:9d:2e:24:05:1b:4e:d7:90:c4:62:8f:04:
a1:5e:95:f2:f0:2e:70:62:f1:a1:e0:f7:0e:0c:b3:
96:50:ae:01:6a:c0:4e:04:b1:c3:13:29:29:2d:b3:
93:1d:9a:ca:2f:e8:43:99:d4:88:6d:99:4a:63:51:
41:82:d9:a0:b1:f2:13:c0:ed:d0:63:0f:11:30:ac:
42:33:58:8c:8e:87:fd:71:fd:9f:cf:31:73:2b:2d:
a5:62:62:fd:65:66:dc:cc:43:b3:73:01:fc:34:b8:
6d:d3:f5:c7:6b:d7:a3:61:a9:fc:b7:ca:17:08:b2:
69:a0:9f:36:ed:f3:67:39:3a:a7:e0:f7:ec:3c:3e:
22:9d:32:d6:0a:ec:11:8a:ef:7f:7a:9a:de:76:c9:
09:8f:7b:6c:05:ad:d6:c9:f2:f9:0a:e6:b7:d6:61:
eb:43:dc:3a:59:3a:5f:61:2f:e7:9e:27:f1:ab:10:
c6:b4:e0:58:3a:26:8b:10:c9:a4:fd:e1:19:64:f4:
95:d0:dc:e0:d7:1a:99:78:56:57:2a:5f:e4:c8:9a:
04:1f:6b:ec:80:f1:3e:0d:ab:23:bf:07:aa:63:f7:
8f:58:cc:ac:7a:cb:ed:51:8b:1b:cd:c0:15:fc:2f:
66:8c:61:14:c2:59:76:fc:80:b7:c5:96:b5:67:1e:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:82:6B:7E:8F:CA:9E:47:49:ED:96:D1:49:D5:09:92:42:AD:71:F3
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ce:fd:00:93:aa:74:e7:57:d7:e1:88:68:b7:9d:35:4c:87:
69:5d:62:c7:e0:83:85:4d:7b:85:15:34:8b:cb:31:0b:96:b7:
f7:8d:fa:85:a6:3c:8d:b8:0c:9f:bf:05:11:ba:f0:13:31:06:
59:c0:33:c8:08:05:e4:4c:4a:82:35:0c:ce:79:18:51:b4:e2:
59:99:c2:85:e2:57:df:35:a1:63:d8:4b:7b:87:64:02:7d:3f:
b3:97:1e:cb:88:94:ac:88:13:57:95:ab:62:7c:4c:3d:14:e1:
c4:5e:21:5f:a9:b6:c7:60:5b:dc:89:29:94:c0:51:e7:c5:45:
de:2f:b9:34:6f:f6:91:1f:af:ce:6f:24:70:70:32:28:e3:d5:
2b:cb:99:7f:bc:80:de:c6:50:33:ac:a0:ef:25:d5:5e:f6:54:
2a:dc:63:88:a0:4b:68:a7:77:b3:db:76:fc:3d:7a:be:41:2c:
44:45:a9:85:74:46:21:d0:a2:bb:ec:37:9d:bc:b1:d5:f8:89:
e2:16:a6:aa:6a:b8:cc:f9:68:ed:23:29:03:08:5f:60:b8:51:
e3:8c:42:fd:92:ad:d1:69:3f:20:6f:c7:ec:ae:e3:6b:97:14:
88:e4:0b:8b:38:86:d2:f2:a0:37:be:ec:51:ba:0d:ba:a8:62:
4b:0f:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:49 2025 by rpki-client