Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: V6vK4QMpHD6eotBnKlu6XVo5oag69nnuCCZgndr6Xso=
Subject key identifier: 58:21:74:84:03:A0:B7:39:1D:26:33:FC:D2:B6:DE:11:2F:D6:46:77
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 0198D69864FFDEA7BB06A8B3D36468EB41E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 11:02:48 +0000
Manifest this update: Sat 23 Aug 2025 11:02:48 +0000
Manifest next update: Sun 24 Aug 2025 11:02:48 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: 9KLNomblUCWHQCUInEj4266Hr9fdciJwqW2OXBfy0wk=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:64:ff:de:a7:bb:06:a8:b3:d3:64:68:eb:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Aug 23 11:02:48 2025 GMT
Not After : Aug 24 11:02:48 2025 GMT
Subject: CN=5821748403a0b7391d2633fcd2b6de112fd64677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:25:ef:29:fe:29:44:ef:d5:b6:52:d9:d0:
1e:6f:d9:6e:12:8f:ef:52:71:d1:28:e0:51:6b:94:
79:0f:94:dc:b6:da:8f:24:54:20:da:8b:af:4c:c6:
b4:c3:9d:4f:65:96:dc:e3:74:94:3d:21:6c:1d:a4:
78:d7:95:4a:9f:a0:be:3b:fd:f4:84:26:08:33:1d:
d9:cc:d5:e9:cc:bd:47:db:2e:51:9b:b9:1a:0b:e3:
f5:2c:62:76:e1:cd:c4:d4:73:db:bd:72:8d:f3:06:
54:46:3a:8b:47:0a:dd:e5:f8:86:6a:58:84:06:92:
ef:79:bb:a4:43:49:68:20:7d:db:57:2c:54:fa:49:
f4:f1:ef:91:6d:a6:de:3e:66:0b:26:28:d5:4a:0a:
9b:62:b0:db:fd:9c:73:88:7a:e3:11:1b:5a:dc:5e:
95:d8:85:0d:65:2c:2d:44:70:73:49:61:85:9d:69:
1f:73:c8:a5:4c:80:3f:b6:25:11:48:3c:78:83:1e:
e9:6d:ee:7a:d1:99:49:9a:24:0b:ec:3c:25:a3:b7:
e3:df:5c:d9:c0:32:ba:d0:45:ff:7e:ac:99:04:d1:
c4:16:69:2e:15:fc:7b:30:70:fe:11:22:6a:67:27:
b4:3c:a3:96:43:9f:ee:10:eb:fb:e3:0a:76:a4:f2:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:74:84:03:A0:B7:39:1D:26:33:FC:D2:B6:DE:11:2F:D6:46:77
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2c:18:51:14:ea:b3:1e:42:b7:d6:8d:67:0f:e0:7c:bc:5c:
1b:e5:e2:5c:aa:30:5c:39:56:0c:1f:65:b9:ff:ca:e3:76:47:
25:ca:ca:18:ca:ce:b3:eb:aa:00:62:29:6c:76:89:76:0d:5c:
b4:fe:75:30:dd:e8:75:40:a5:b3:46:da:92:cd:4c:92:d8:43:
17:cc:2a:e9:99:df:c0:08:fe:39:4d:ca:c4:4e:0c:83:ab:4f:
62:fb:20:9c:ff:8b:c9:49:cd:33:0e:0a:97:18:f4:5d:16:6e:
ac:7f:89:18:c0:7d:60:92:bb:7e:38:a1:b2:70:37:fe:e9:97:
c3:e9:8d:a3:c0:21:72:44:d9:35:98:ce:1a:df:15:6e:6a:a0:
50:b9:0c:ef:a3:53:5e:fa:52:09:27:95:17:ba:61:c9:a3:cc:
c1:9c:28:67:32:e7:95:86:43:b5:5b:1e:8f:c4:56:3f:e6:4d:
14:6b:8e:25:0a:8c:fa:d3:10:2b:39:19:f7:f5:65:91:d5:14:
3f:fa:f2:54:2c:1d:33:78:9e:73:4d:e4:e0:b2:a2:ab:52:f7:
85:a8:a3:9f:f3:f8:2b:44:d4:98:d7:25:e6:e5:31:7f:df:09:
38:5c:c3:67:49:d4:f0:75:5f:eb:6f:c0:65:c0:4b:1c:57:56:
b3:44:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:11 2025 by rpki-client