Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File: GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier: XaUj1cZWhqXLRQ1NVwPTPRsNiEJBZsm0wL3FOIvyT6w=
Subject key identifier: 8F:E4:E0:65:0F:81:63:AD:70:08:2B:FF:0A:19:25:41:34:56:FE:C5
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer: /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial: 0197B745ADE149F998861EE1C7C61589550F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number: 0A45
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: 5P9D1_sOY4955MR12YMuvtk1p2A.roa (hash: Kh8/PTBPB/+ZM2djl/y51v9q6Hia4qFb/I9mrYzMrjA=)
2: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: goGVwTFFfnHlIJ8vr+vXOYg2+bE73HG3080NMBSsdyE=)
3: zvde-1FktXCEIRB3FHyBiaah4JI.roa (hash: 6R+oudRdqFBVe7OQ/+aXtal9Y8TCWwoFCMfYuyQJNpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ad:e1:49:f9:98:86:1e:e1:c7:c6:15:89:55:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=8fe4e0650f8163ad70082bff0a1925413456fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:c3:d2:f0:9a:18:d2:84:5d:00:3a:68:39:
40:c0:58:2d:df:af:f9:6b:b9:2d:6d:6f:93:b2:02:
fb:2b:6a:3e:25:e2:c4:49:db:e7:e5:a6:7c:4f:44:
74:12:7b:2a:66:3b:ba:a7:51:9f:3a:5e:03:7f:d4:
ee:75:a6:e6:dd:b5:c0:57:2a:77:12:7f:0b:15:12:
18:46:02:e4:a0:7f:6f:4c:b7:36:95:43:51:02:8b:
95:c7:4f:1c:55:18:57:33:44:08:ef:db:de:b1:c1:
3c:6b:df:5e:cb:a6:00:c8:c8:cf:57:ff:b6:8e:6c:
12:b7:c5:06:73:3d:90:9f:f0:ea:c3:96:5b:2f:89:
39:97:79:51:4e:10:f7:d2:f2:16:93:91:30:50:f4:
b2:f1:68:a8:2d:7e:57:ce:5d:a0:13:ab:c8:d2:df:
38:42:31:20:e5:b9:b3:b8:97:93:20:89:e0:c0:b0:
65:5b:c3:43:12:78:a9:5e:e6:20:c0:f6:4d:d9:74:
84:23:d1:be:85:7e:ee:5f:51:9a:e7:35:37:d7:59:
70:89:a8:7b:90:ec:4f:17:f6:ec:00:aa:98:5c:f6:
7d:45:95:d6:41:15:db:76:26:a5:6b:2c:13:c5:7e:
3a:34:a6:29:11:78:0a:d4:56:98:84:62:fa:61:5f:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:E0:65:0F:81:63:AD:70:08:2B:FF:0A:19:25:41:34:56:FE:C5
X509v3 Authority Key Identifier:
keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:df:59:f6:39:e2:ef:56:4d:91:ea:6e:f9:03:d1:86:b5:
95:fe:78:89:46:1d:e5:03:18:c1:e4:1f:91:ca:0f:22:42:2e:
e8:38:a1:74:95:04:e7:36:dc:0f:14:25:25:f1:09:ac:12:1d:
cd:1e:e6:78:f3:42:3e:21:7a:21:f6:e9:62:f5:37:93:67:59:
a6:94:e8:be:3a:50:07:48:8c:f3:55:1b:34:ad:12:d9:92:8b:
79:26:4c:1b:a3:42:14:96:04:fd:7d:a6:67:f6:48:6e:7f:3b:
02:c7:0c:a9:ce:d2:20:81:70:9d:ba:87:d0:aa:69:32:d0:23:
a7:ff:3c:7d:57:a2:a9:ff:d2:38:2d:c9:82:11:85:5e:ec:3b:
49:b6:39:03:12:22:e8:08:04:ef:a6:58:88:e9:53:40:eb:31:
e1:cf:12:73:fe:7b:46:17:79:90:6e:93:cd:f8:af:a9:b9:c2:
4a:42:7a:22:78:9a:ce:0e:6f:e7:c2:bb:20:ff:b8:a1:5f:a4:
c2:30:ff:10:9e:21:a0:32:55:22:5b:d4:63:82:74:fa:c8:42:
25:1a:f6:56:eb:7c:ba:6c:a5:1d:1c:33:ff:fe:a0:43:08:7a:
50:98:c4:90:bc:32:e0:94:8f:f4:5d:b6:d2:ac:c4:8c:ed:82:
ab:ad:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:27 2025 by rpki-client