Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: fnrxkDKWrDrSMzlI7dMljj3Nwi/ucrMasBsaXm0A/fA=
Subject key identifier: 99:F7:C2:15:FB:16:05:E3:8D:F0:88:39:EE:93:9E:36:0A:32:E1:CF
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 0197B6A22922C6CBADD5B980D511D3430A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0A2D
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: 0BqNbg48lLXLOY98enFsl6fwnqFGhHeKiiTYnGtMB3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:29:22:c6:cb:ad:d5:b9:80:d5:11:d3:43:0a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=99f7c215fb1605e38df08839ee939e360a32e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:41:f4:f4:da:dc:25:6c:e5:7b:8b:df:62:
1b:94:0c:ed:32:aa:c6:9b:90:b4:3e:f9:76:51:01:
50:94:53:7b:43:30:fe:5a:74:39:c1:73:fe:5f:30:
2b:47:c0:29:74:05:15:e3:c0:ad:7c:ec:5c:d6:35:
d4:a7:57:eb:07:73:3f:c3:6d:89:12:d7:a8:90:16:
dd:f5:b3:3e:8f:6a:9f:0b:96:fe:80:25:e6:f2:4c:
f1:1f:74:69:c6:52:b8:ae:b1:a5:f4:e5:fb:c4:62:
93:35:1b:32:47:ba:27:bf:17:54:d7:38:8c:92:a9:
e3:ab:78:83:ef:7e:c4:08:0a:fb:4e:95:bf:08:54:
54:37:ae:cb:91:ef:05:ad:68:4c:22:1f:2f:0d:82:
9a:f9:0b:1d:f4:78:cc:0f:ec:a4:bb:d5:de:a5:12:
05:0b:d1:f1:e6:e8:ab:b3:ea:77:e8:44:ea:89:a5:
9e:8f:7e:c0:b4:9a:75:46:0a:8b:cd:89:d5:62:11:
ed:45:7d:b8:61:aa:af:b3:b9:46:a2:09:a2:68:1d:
af:0d:69:31:27:fa:a5:35:77:d6:95:a8:76:25:31:
40:87:53:51:b5:b2:92:c3:b1:e0:69:cb:4e:7f:00:
99:25:34:e7:1a:78:d5:39:53:46:3e:b9:ef:9b:15:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:C2:15:FB:16:05:E3:8D:F0:88:39:EE:93:9E:36:0A:32:E1:CF
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3f:bc:a0:06:33:15:4d:12:0f:76:ca:7f:7d:ed:b5:9c:af:
70:12:81:9d:e5:87:79:e1:7c:35:96:4b:08:b2:2b:3a:53:ff:
8b:8e:75:39:92:32:1e:7d:3c:90:e8:87:0f:2b:87:75:10:c1:
e9:5d:73:64:89:58:c6:4b:55:31:ca:af:99:b4:66:8b:26:01:
80:38:b4:70:78:ad:87:66:a0:8c:11:df:79:cc:96:27:88:ea:
2d:2c:50:71:22:59:c8:2d:8f:19:eb:41:b0:39:cb:0a:43:d9:
89:cc:e2:21:db:55:da:58:57:89:d0:cd:23:ff:41:ba:d0:e1:
8c:11:e3:1c:56:1b:6a:85:7f:cb:44:4d:08:33:6a:10:42:53:
35:df:7c:8d:db:34:2b:4d:b8:01:b7:d2:9f:36:42:81:dc:07:
60:b7:da:f8:18:fd:d4:e6:82:97:1f:65:0e:78:da:8d:62:4a:
ce:f4:0b:ec:bd:d1:61:c4:29:9c:dd:09:53:3b:d3:9e:84:b7:
5a:8a:a3:b5:88:09:22:cb:9f:f3:9d:02:ef:23:d2:11:00:cf:
c9:f1:ca:3c:c6:22:a9:d3:f1:bc:4d:59:4f:0b:7a:8c:f8:cc:
4e:db:f4:e2:e9:74:6e:4a:3e:36:66:04:87:e0:84:b8:33:8c:
67:05:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:00 2025 by rpki-client