Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: izekf0RnDC/jcxJxI1S9bTDzd1429yv89tax7hznboY=
Subject key identifier: B5:A2:A1:13:78:E6:C5:25:45:88:71:F5:2B:98:D9:CA:14:10:C9:47
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0197B8C5C00B6C9296CA5841302BC51B843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1525
Signing time: Sat 28 Jun 2025 23:00:56 +0000
Manifest this update: Sat 28 Jun 2025 23:00:56 +0000
Manifest next update: Sun 29 Jun 2025 23:00:56 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: kRZovyILGDfX7NJS0HIIEjSb/lMTJkgbjRZwMWyqQSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c0:0b:6c:92:96:ca:58:41:30:2b:c5:1b:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jun 28 23:00:56 2025 GMT
Not After : Jun 29 23:00:56 2025 GMT
Subject: CN=b5a2a11378e6c525458871f52b98d9ca1410c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:8c:65:2e:be:d7:ad:59:b3:24:99:53:da:
16:9c:77:34:2c:0f:5b:7e:e9:2e:c4:fc:73:a2:cd:
ae:78:20:1e:03:2e:f2:3f:a0:4a:10:ad:e8:e2:5f:
0d:23:4a:13:8a:6b:65:52:f2:98:58:34:68:0a:14:
7e:80:02:44:6b:64:bd:1f:08:d0:c8:68:5c:e2:58:
47:e5:d3:21:15:6b:77:12:15:a6:ef:53:46:e7:ab:
b8:38:42:e8:ee:a6:99:77:48:d4:24:96:e4:43:c5:
10:54:0e:4d:ae:47:d1:c9:cb:30:f0:54:72:5d:9a:
8b:38:b0:6a:e7:39:00:19:bb:0f:33:62:d7:8e:8e:
ec:6d:f3:5a:82:8e:20:b1:4b:a6:55:0f:6d:cd:4c:
c1:4a:c1:53:2f:1f:f0:d3:38:70:77:55:69:a8:f5:
6d:27:a9:7c:b7:21:40:ba:8d:87:00:70:0d:a6:0e:
e0:83:3e:2f:82:82:0d:21:98:4c:57:c6:fb:29:75:
e2:ed:6f:f4:3e:5c:20:68:66:53:c3:76:b1:d4:88:
86:b0:6f:2d:f9:13:75:88:50:42:a7:bb:2b:18:3a:
26:60:ff:82:d7:dd:62:1c:13:70:b3:00:d9:bc:d1:
c4:28:11:67:cb:00:31:05:0b:33:85:3f:22:39:6b:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:A1:13:78:E6:C5:25:45:88:71:F5:2B:98:D9:CA:14:10:C9:47
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:41:a7:68:8e:4b:1a:ee:0b:73:4b:c3:d4:b7:ee:03:70:e8:
99:a5:93:86:5d:6b:d9:e2:f5:18:27:22:c3:41:07:2e:3f:ea:
57:4c:36:d5:bd:db:c5:c2:a6:eb:c6:4e:7b:09:e2:45:e6:62:
01:73:50:77:dc:ae:6f:e6:13:bb:03:f2:21:5a:96:49:b4:65:
0f:54:36:17:09:e5:cd:c6:c3:85:0f:c7:28:35:81:d2:ce:d8:
48:08:28:e1:da:ca:b4:5f:41:c8:51:9c:0f:36:d2:6c:ca:c4:
2b:0c:0a:73:cd:c1:50:b4:82:16:eb:35:cc:48:2f:ad:6f:0b:
11:51:bc:13:e8:31:55:88:34:db:58:b7:22:b9:4c:33:ad:45:
61:59:2a:3c:3c:48:dd:a7:7c:79:89:7e:15:c1:e2:92:01:62:
29:91:ce:97:a5:ef:dc:82:e4:c3:e0:22:a7:cd:44:41:b6:57:
ba:0d:35:40:2f:31:cc:61:04:28:7f:b6:6f:62:b4:ed:20:95:
f9:8b:2b:2a:d6:f6:db:a8:d6:93:6d:4c:df:32:68:cf:bf:5d:
c0:e3:bb:e2:44:23:65:9e:4d:e6:4d:ca:f4:bf:af:95:da:24:
c6:33:6a:8c:f0:f7:2a:20:45:9a:20:00:a6:f2:3a:c9:a7:d5:
b4:c0:18:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xcALbJKWylhBMCvFG4Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy
NDZiNGIwHhcNMjUwNjI4MjMwMDU2WhcNMjUwNjI5MjMwMDU2WjAzMTEwLwYDVQQD
EyhiNWEyYTExMzc4ZTZjNTI1NDU4ODcxZjUyYjk4ZDljYTE0MTBjOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZSMZS6+161ZsySZU9oWnHc0LA9b
fukuxPxzos2ueCAeAy7yP6BKEK3o4l8NI0oTimtlUvKYWDRoChR+gAJEa2S9HwjQ
yGhc4lhH5dMhFWt3EhWm71NG56u4OELo7qaZd0jUJJbkQ8UQVA5NrkfRycsw8FRy
XZqLOLBq5zkAGbsPM2LXjo7sbfNago4gsUumVQ9tzUzBSsFTLx/w0zhwd1VpqPVt
J6l8tyFAuo2HAHANpg7ggz4vgoINIZhMV8b7KXXi7W/0PlwgaGZTw3ax1IiGsG8t
+RN1iFBCp7srGDomYP+C191iHBNwswDZvNHEKBFnywAxBQszhT8iOWuO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWioRN45sUlRYhx9SuY2coUEMlHMB8GA1UdIwQY
MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt
MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5
LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkGnaI5L
Gu4Lc0vD1LfuA3DomaWThl1r2eL1GCciw0EHLj/qV0w21b3bxcKm68ZOewniReZi
AXNQd9yub+YTuwPyIVqWSbRlD1Q2FwnlzcbDhQ/HKDWB0s7YSAgo4drKtF9ByFGc
DzbSbMrEKwwKc83BULSCFus1zEgvrW8LEVG8E+gxVYg021i3IrlMM61FYVkqPDxI
3ad8eYl+FcHikgFiKZHOl6Xv3ILkw+Aip81EQbZXug01QC8xzGEEKH+2b2K07SCV
+YsrKtb226jWk21M3zJoz79dwOO74kQjZZ5N5k3K9L+vldokxjNqjPD3KiBFmiAA
pvI6yafVtMAYGA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:19 2025 by rpki-client