Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: kznkq+Fr4/mbIWU3HFSQYgly6XlAQzwsCLHiyZNUtgY=
Subject key identifier: 51:41:8E:9B:FE:00:6A:14:AE:35:86:CB:1F:7E:E9:F8:11:09:DB:6F
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 0199FDD947B9DC8294CC810C787D87C86E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0B5B
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: cdSrBQFus2guPSvyU5eBozgrtmXQdQDeCXchtROPvXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:47:b9:dc:82:94:cc:81:0c:78:7d:87:c8:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=51418e9bfe006a14ae3586cb1f7ee9f81109db6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:02:1f:9c:78:a0:31:5c:74:13:e9:5b:1e:
b1:af:8f:0d:3b:c2:66:81:82:9c:2c:c3:a2:91:c1:
12:41:bc:28:51:5b:b2:97:f1:b1:9f:9e:70:7d:55:
05:47:11:85:32:7c:f4:69:72:6c:53:26:e5:e2:b4:
40:9c:ca:9c:54:b4:56:4c:73:90:02:8a:c9:40:0b:
46:df:9e:1b:8e:59:fa:ce:01:e7:f2:b1:2c:61:8d:
d7:be:8f:e2:76:f9:6c:9a:39:ca:76:0b:6e:84:70:
e3:37:1c:83:d6:eb:31:c9:e2:b4:e8:46:fd:b2:21:
86:5b:62:b2:de:e6:28:21:ee:e1:ed:9b:d3:ab:a2:
ff:8b:78:b0:c5:8f:84:3d:e8:ee:42:f3:12:34:7c:
a5:9d:a8:36:e5:d4:45:ba:7e:b2:ef:a7:4d:56:38:
11:50:58:53:5c:a6:a7:04:11:c3:c6:b3:3d:6b:74:
39:95:58:d0:c7:f1:b0:1b:8e:9a:a6:c1:1f:58:c0:
0e:a0:8c:87:38:26:bd:04:97:9d:16:0a:2c:9f:89:
33:7a:e7:fa:a5:b6:a2:5f:65:9f:72:af:d8:35:4a:
9e:3f:69:3b:d5:84:4c:ec:dc:cf:0d:b4:c5:ea:21:
a5:db:23:74:a6:37:fd:a2:20:11:aa:92:eb:ab:c5:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:41:8E:9B:FE:00:6A:14:AE:35:86:CB:1F:7E:E9:F8:11:09:DB:6F
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f1:9e:51:45:8f:ca:68:64:4d:bb:13:de:43:a3:bb:17:46:
d6:24:e4:36:25:6e:9e:03:59:55:c2:3c:d0:fb:cb:52:ea:7b:
33:68:bb:e3:bf:b5:fa:92:0d:ca:30:6c:f2:6c:ab:df:42:1c:
2b:51:2d:b8:39:5d:4b:b1:c1:f7:7c:f7:7e:aa:b8:98:8c:d2:
8a:84:df:2c:06:cb:3c:35:f2:98:9b:00:18:6f:eb:28:4d:98:
ba:e0:f1:8f:5d:68:f3:2d:b8:8c:0a:da:de:ad:5c:a2:0c:5c:
99:41:15:47:5c:a0:37:31:45:bd:84:95:e1:b6:70:ad:e4:fc:
e2:dc:fd:dc:b2:c5:5a:f7:0e:27:e5:3f:58:47:8a:3a:20:1d:
0c:79:19:3c:62:18:1b:08:1e:bb:7e:88:c6:c0:64:93:c9:fa:
34:b2:48:76:48:d2:c7:1a:94:06:cc:e1:bf:20:b2:92:ab:68:
92:66:84:f3:7b:3f:ed:1b:18:32:a4:0a:90:6e:b5:15:64:24:
e8:9a:2d:26:e6:34:cb:9a:01:dc:47:39:28:eb:0d:91:63:36:
fc:06:8a:50:a8:57:bd:d6:11:59:3d:94:c8:91:8f:dc:55:03:
51:3f:8b:c4:7c:b2:57:23:04:42:2f:3f:0b:3d:ff:2e:b2:15:
f2:27:5e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Ue53IKUzIEMeH2HyG5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTM5NTc1YzQwMTI4M2ZmZjUzNjEzN2IwZTgzZTU0MTVm
ZTE4ZDAwHhcNMjUxMDE5MTkwMTM5WhcNMjUxMDIwMTkwMTM5WjAzMTEwLwYDVQQD
Eyg1MTQxOGU5YmZlMDA2YTE0YWUzNTg2Y2IxZjdlZTlmODExMDlkYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TECH5x4oDFcdBPpWx6xr48NO8Jm
gYKcLMOikcESQbwoUVuyl/Gxn55wfVUFRxGFMnz0aXJsUybl4rRAnMqcVLRWTHOQ
AorJQAtG354bjln6zgHn8rEsYY3Xvo/idvlsmjnKdgtuhHDjNxyD1usxyeK06Eb9
siGGW2Ky3uYoIe7h7ZvTq6L/i3iwxY+EPejuQvMSNHylnag25dRFun6y76dNVjgR
UFhTXKanBBHDxrM9a3Q5lVjQx/GwG46apsEfWMAOoIyHOCa9BJedFgosn4kzeuf6
pbaiX2Wfcq/YNUqeP2k71YRM7NzPDbTF6iGl2yN0pjf9oiARqpLrq8VZWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFBjpv+AGoUrjWGyx9+6fgRCdtvMB8GA1UdIwQY
MBaAFBkTlXXEASg//1NhN7DoPlQV/hjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAt
OTRjNzYwMWFlZmRhLzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAtOTRjNzYwMWFlZmRh
LzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivGeUUWP
ymhkTbsT3kOjuxdG1iTkNiVungNZVcI80PvLUup7M2i747+1+pINyjBs8myr30Ic
K1EtuDldS7HB93z3fqq4mIzSioTfLAbLPDXymJsAGG/rKE2YuuDxj11o8y24jAra
3q1cogxcmUEVR1ygNzFFvYSV4bZwreT84tz93LLFWvcOJ+U/WEeKOiAdDHkZPGIY
Gwgeu36IxsBkk8n6NLJIdkjSxxqUBszhvyCykqtokmaE83s/7RsYMqQKkG61FWQk
6JotJuY0y5oB3Ec5KOsNkWM2/AaKUKhXvdYRWT2UyJGP3FUDUT+LxHyyVyMEQi8/
Cz3/LrIV8idePQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:50 2025 by rpki-client