Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: JKgZsaP/DwPAkM2vWMGBXYNBQc9HPP/3Gnbn6z2E41c=
Subject key identifier: 0C:AD:A5:FB:C9:D3:15:BA:59:21:71:7D:D7:55:D8:EF:7C:E8:44:40
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0198D4A84B663935F24F947538441F750D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 15B8
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: beoCis2/LCTUCWDJRvElexdTLbkTcdfOEa96lZ0tDD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4b:66:39:35:f2:4f:94:75:38:44:1f:75:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=0cada5fbc9d315ba5921717dd755d8ef7ce84440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:87:b9:c2:9f:f5:b5:72:be:ae:9f:4a:49:
20:ba:f5:a0:fd:49:48:54:3b:88:e6:1a:26:1c:54:
9f:d6:50:07:b4:8a:ec:ef:6b:24:ae:91:82:c6:13:
2b:f0:c5:68:37:bf:f0:01:17:1b:ae:a2:d2:ce:73:
8a:34:b7:da:b0:4e:18:3c:b5:06:17:50:4b:36:36:
ab:6c:6a:34:fd:b3:bf:ff:fb:08:99:d4:87:3a:54:
84:ea:df:cf:ad:58:4e:6d:89:d4:44:1c:32:0b:ce:
34:da:37:fc:57:6b:54:86:03:39:28:b6:f2:24:0a:
fe:ad:fe:a2:c3:fd:60:05:d8:a6:27:18:e6:62:65:
4a:19:1e:45:83:18:ce:53:7a:94:4f:c0:d8:b0:90:
45:96:ce:2e:5d:1a:8f:d6:1d:14:f3:3f:1d:23:f7:
6a:38:cd:86:2d:7c:f4:06:80:74:1b:ad:89:cf:cb:
bd:1f:5f:4e:40:cd:45:dc:0b:0f:db:1c:2f:bd:a1:
cf:37:f7:23:8d:30:2e:18:19:31:f3:6f:44:2d:01:
06:77:7f:93:2f:70:8d:48:a4:db:8a:4a:c5:1b:54:
0b:4e:02:64:13:c2:c5:98:49:20:b6:dd:e3:20:10:
91:1f:71:8a:aa:85:d2:16:ce:02:31:a8:ef:f0:15:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:A5:FB:C9:D3:15:BA:59:21:71:7D:D7:55:D8:EF:7C:E8:44:40
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:22:d5:3e:6a:a1:72:39:c8:dd:55:03:0e:f5:1c:82:f8:
25:66:ce:90:33:4f:ca:bd:dc:0c:7c:a9:b5:4e:31:9e:9d:cb:
84:5e:8e:78:7b:b3:51:5c:a8:c6:02:a5:ed:dd:a4:f8:6b:e0:
0c:5a:61:fd:ed:7b:6f:c7:18:9a:0c:2b:c2:3f:35:f1:36:5f:
ee:bf:52:e3:b9:ae:81:8b:56:52:c0:55:f5:17:b4:2b:da:63:
d4:81:a5:f7:f1:21:f2:2d:b6:21:e0:69:f1:c6:2f:62:a7:a5:
06:9c:a3:8f:bc:ca:f7:81:d1:1c:a3:42:e4:b6:3e:e5:b3:f9:
c0:5b:c7:16:b4:5d:60:10:61:c2:17:da:42:2b:4c:21:2f:f6:
9e:d4:5b:77:4d:c9:fe:94:1c:57:ef:6d:65:3b:b4:81:09:b4:
51:31:87:31:b9:45:c2:a9:d3:e7:72:39:b5:44:1c:e0:96:87:
68:17:c9:c0:73:ff:c6:ab:41:e6:fb:95:c5:32:b4:64:da:f1:
db:5c:cf:0a:98:dc:c8:6f:63:37:2b:65:2d:df:de:6c:31:a7:
70:12:dc:d2:db:a4:1a:af:66:30:5f:a8:e2:94:14:a6:30:f6:
4d:f6:bf:ab:c2:02:a1:a1:ba:86:5f:66:d8:1b:29:d0:10:ca:
f4:c1:1a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEtmOTXyT5R1OEQfdQ1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy
NDZiNGIwHhcNMjUwODIzMDIwMDU1WhcNMjUwODI0MDIwMDU1WjAzMTEwLwYDVQQD
EygwY2FkYTVmYmM5ZDMxNWJhNTkyMTcxN2RkNzU1ZDhlZjdjZTg0NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFOHucKf9bVyvq6fSkkguvWg/UlI
VDuI5homHFSf1lAHtIrs72skrpGCxhMr8MVoN7/wARcbrqLSznOKNLfasE4YPLUG
F1BLNjarbGo0/bO///sImdSHOlSE6t/PrVhObYnURBwyC8402jf8V2tUhgM5KLby
JAr+rf6iw/1gBdimJxjmYmVKGR5FgxjOU3qUT8DYsJBFls4uXRqP1h0U8z8dI/dq
OM2GLXz0BoB0G62Jz8u9H19OQM1F3AsP2xwvvaHPN/cjjTAuGBkx829ELQEGd3+T
L3CNSKTbikrFG1QLTgJkE8LFmEkgtt3jIBCRH3GKqoXSFs4CMajv8BWY7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAytpfvJ0xW6WSFxfddV2O986ERAMB8GA1UdIwQY
MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt
MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5
LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrEi1T5q
oXI5yN1VAw71HIL4JWbOkDNPyr3cDHyptU4xnp3LhF6OeHuzUVyoxgKl7d2k+Gvg
DFph/e17b8cYmgwrwj818TZf7r9S47mugYtWUsBV9Re0K9pj1IGl9/Eh8i22IeBp
8cYvYqelBpyjj7zK94HRHKNC5LY+5bP5wFvHFrRdYBBhwhfaQitMIS/2ntRbd03J
/pQcV+9tZTu0gQm0UTGHMblFwqnT53I5tUQc4JaHaBfJwHP/xqtB5vuVxTK0ZNrx
21zPCpjcyG9jNytlLd/ebDGncBLc0tukGq9mMF+o4pQUpjD2Tfa/q8ICoaG6hl9m
2Bsp0BDK9MEanw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:43 2025 by rpki-client