Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: VGAzbYlYfokjsnb8YjFz8SK91RAWyYiJKsHeCkeBU+0=
Subject key identifier: 0C:BA:EC:64:A4:03:9F:D8:B4:FA:D1:C0:B6:FD:8F:B5:79:7D:65:65
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0199FC216FF9AD7D761B25387C94388906BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1651
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: ucy9qlQ97XxEZu2dTSPJGZTHnsNKeZOEFyB8D8Vws7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:f9:ad:7d:76:1b:25:38:7c:94:38:89:06:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=0cbaec64a4039fd8b4fad1c0b6fd8fb5797d6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:df:f9:4c:6b:77:13:c5:b2:df:32:1f:4b:
0f:ad:d5:d1:26:34:47:14:b8:91:fd:e4:36:5f:b5:
8f:5e:13:53:83:b1:bf:b1:ed:10:c9:c8:34:13:3c:
9a:d4:32:f8:15:b9:e9:80:e3:3c:15:75:1e:db:20:
8a:b9:59:8e:41:7b:d4:7f:16:67:63:21:55:5c:ff:
7b:1d:47:61:f2:d2:eb:c7:b9:51:20:8c:a0:2d:ed:
8b:27:56:13:0d:5f:80:44:63:59:cb:a7:ad:65:9e:
5c:b5:16:aa:a0:8b:e9:7a:fb:51:38:fc:2f:1b:0b:
d6:fb:45:8f:d1:52:21:16:33:ca:63:a9:cf:67:b1:
9b:38:f4:06:0b:e7:64:34:2a:ea:12:25:30:37:04:
dd:66:0a:ee:25:ae:07:4e:b7:55:2c:44:4f:8b:3e:
99:d6:b1:9d:9a:ee:c8:0e:a7:01:57:6c:cb:d6:45:
d1:87:f8:4e:0f:3e:ad:77:53:62:eb:7e:e4:77:d6:
73:e8:eb:ca:e3:69:c1:06:e7:9d:09:e6:c4:99:41:
a1:aa:aa:3f:20:4c:2c:fe:e6:6a:ac:f3:65:6f:a5:
9e:6f:19:c3:2e:f9:32:a6:ef:ed:a6:33:e4:8d:b1:
af:a3:80:fe:87:b5:fd:b5:f4:78:40:1a:b7:ff:4c:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:EC:64:A4:03:9F:D8:B4:FA:D1:C0:B6:FD:8F:B5:79:7D:65:65
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6b:eb:d4:f7:00:8e:a0:2d:f1:82:de:23:8d:fd:1c:62:e3:
ac:87:f8:a0:c2:0f:29:c3:5a:e7:eb:64:02:36:40:fd:c2:c6:
0c:11:bc:27:54:cf:26:56:c3:60:64:e1:0a:c4:45:4e:eb:62:
04:c2:96:c2:62:90:b7:da:67:32:aa:12:62:a9:e7:11:fa:9f:
45:31:98:8e:5a:65:57:b3:45:8f:1f:68:1c:88:fe:35:50:8d:
7c:24:8d:fd:3b:31:6e:d4:cd:a2:92:8a:f8:f8:08:7a:d2:7b:
27:74:72:d2:2e:42:b8:01:28:43:3f:a0:0b:80:3f:75:05:28:
48:a5:ce:d6:a1:48:6c:4e:6f:1b:e8:49:75:5f:f2:f3:61:7a:
ba:02:db:05:e8:d9:11:56:cf:7e:68:8d:37:d7:6c:72:51:01:
af:37:94:a3:8f:d4:c6:90:b4:c7:46:3d:f0:22:f9:fe:d3:fd:
ed:c1:a9:70:ab:21:26:77:4b:6c:f2:dd:44:8d:93:d0:25:95:
12:4a:6a:56:56:9e:f0:b8:11:a5:55:9a:25:c7:10:50:d7:86:
01:17:7c:88:4d:cf:6b:1e:4d:86:36:33:c7:79:a7:f8:53:1e:
1b:88:d9:bd:c1:be:47:2a:e7:21:78:95:a9:2b:bd:09:38:f0:
15:13:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:39 2025 by rpki-client