Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: IKfeA6S01A1abIlleZhE5xPambapLQsSphdCf7T9Ido=
Subject key identifier: 86:BB:5C:CA:F5:68:0C:A7:D2:EF:DD:9C:21:C7:2E:AB:CD:30:46:5E
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 0196BB92460DCD108898ECF78A2C9AA9F8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 09AB
Signing time: Sat 10 May 2025 19:00:47 +0000
Manifest this update: Sat 10 May 2025 19:00:47 +0000
Manifest next update: Sun 11 May 2025 19:00:47 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: ZRG5RONsxS9rWXiOVa7BP7zcKs/wfVEGu2jO5Rfs1d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:46:0d:cd:10:88:98:ec:f7:8a:2c:9a:a9:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: May 10 19:00:47 2025 GMT
Not After : May 11 19:00:47 2025 GMT
Subject: CN=86bb5ccaf5680ca7d2efdd9c21c72eabcd30465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:4c:1b:9b:6b:d6:4e:67:c1:4b:49:2f:bc:
4f:72:cd:9f:5f:ec:06:27:db:16:8c:1e:40:58:db:
24:18:64:41:c2:9a:58:e2:32:a5:38:ee:37:b4:0b:
c7:55:c6:77:59:70:cd:d3:eb:b1:e3:71:e4:38:8a:
a4:4e:c8:e3:5f:d8:69:d3:4e:42:db:15:f6:05:c1:
be:0c:0d:11:48:46:7e:49:6e:a6:10:84:04:cc:21:
53:af:60:7c:96:98:66:83:08:a9:ff:85:bf:49:1d:
57:08:47:7e:99:4c:9b:1b:78:fb:3f:3f:00:60:c0:
57:0f:33:cf:37:61:2d:4b:a4:e6:fc:03:3f:be:b5:
3a:0b:2c:22:63:7c:d8:10:d6:4e:af:1e:2d:36:9b:
2c:c7:e3:e3:3b:9c:b5:42:93:5f:c8:54:c9:5e:fe:
9e:8f:0d:69:e9:c4:65:52:e8:90:52:31:d1:0d:dd:
67:f6:d5:ec:12:e4:5e:76:d1:7d:d0:e4:8f:2a:67:
fe:09:02:2e:df:cb:18:26:15:a2:4c:4e:48:dc:3b:
7f:cb:ec:93:16:eb:96:83:79:99:2a:7b:c8:05:4d:
24:8c:04:c4:72:e4:a5:c8:4f:49:bc:29:f1:74:6b:
ec:85:ba:30:7b:32:88:5f:2b:73:bb:b6:a7:7d:a2:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:5C:CA:F5:68:0C:A7:D2:EF:DD:9C:21:C7:2E:AB:CD:30:46:5E
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:d1:03:a4:db:cd:ea:41:d0:e5:01:8e:c6:1a:7a:1a:cc:
f0:21:c6:1d:9f:18:f8:65:f4:fc:97:3c:ab:75:4b:d0:15:46:
4b:2a:65:a6:10:bf:2e:57:12:5a:72:cc:0b:2a:1b:38:ba:11:
e2:7a:f6:ec:35:fe:66:9f:60:75:b6:81:9b:d9:58:61:b5:50:
b3:75:96:35:86:27:f2:9c:60:53:a0:23:04:07:d0:40:d0:cb:
ab:a9:9f:95:11:69:30:62:f8:41:ab:fb:d4:57:69:78:40:44:
2f:43:0a:9c:39:30:3c:ec:86:b7:fd:d7:86:af:e3:02:a4:cd:
3c:c9:f3:ad:d4:7b:46:0e:fb:99:56:d5:de:c1:0e:df:6b:53:
37:64:54:e7:c1:72:6b:d8:d0:da:b4:1e:ce:79:30:e8:40:d2:
af:e8:3e:e9:1d:ff:2c:5e:4d:72:6f:a2:02:5a:dd:25:35:49:
c0:fa:8f:e0:03:66:1c:ac:93:71:c5:6c:9c:ab:3f:1b:f8:da:
fd:f3:e4:c5:ff:ff:2d:b4:43:20:fe:f0:a2:9e:7e:61:82:c5:
0c:26:8e:e0:5f:e2:38:09:24:80:3e:37:ff:c9:fb:bb:57:c6:
2e:96:6f:00:99:1e:66:dd:b7:ac:27:72:85:d5:8a:05:ce:a3:
85:0c:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:02:33 2025 by rpki-client