Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: GS0x49Vr+ETOFmDjnLHLlfG6Yy0hxYk8s1a8YGJxDq4=
Subject key identifier: 64:45:5A:C2:EB:20:2C:C5:44:69:6C:FE:CF:4E:8C:6B:21:EC:12:76
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 0199FB45EF3D90A382E64EBFA4B03E499786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1411
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: rbiIXiRGPINpoyMuBh/Mvfh3KHi7i9NeR8Ws2MoTWUI=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ef:3d:90:a3:82:e6:4e:bf:a4:b0:3e:49:97:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=64455ac2eb202cc544696cfecf4e8c6b21ec1276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:f7:99:39:d5:46:e4:12:7c:6b:ec:23:e0:
91:b1:cb:58:c4:04:c1:dd:f0:4b:9a:3c:0e:e3:be:
cf:81:fb:41:cb:1f:d1:9a:34:8c:1e:d3:50:62:92:
97:c7:bf:f9:88:e6:f2:ab:0a:5e:c5:73:03:cd:d4:
d1:16:e5:dd:a1:cf:1b:56:d2:e8:42:9c:06:13:ad:
a2:0d:ae:e2:16:9d:c7:e0:e5:b8:0a:63:ea:1a:21:
18:29:01:64:c2:42:16:b9:9f:ef:4e:30:1e:9f:1b:
49:58:6d:f0:b2:56:a5:20:3d:4c:5c:ff:bb:9b:42:
20:54:28:d0:89:59:f6:27:6d:5c:93:a6:81:ec:0c:
62:56:4c:0b:d7:e7:42:fa:c6:22:d5:01:f5:9c:31:
b1:2f:29:90:0b:07:c6:8d:fb:9b:8a:af:00:4a:de:
9e:b4:ec:41:cc:86:5b:23:c2:6c:5c:8b:56:af:db:
dd:f9:d8:e0:c6:ea:6b:c0:6e:43:79:5d:3a:62:74:
06:9c:8a:7d:7f:53:3a:68:9a:58:97:16:71:cb:82:
10:f9:b1:e1:bf:82:65:f0:c8:8b:f5:4c:bb:7b:b6:
92:ff:bf:30:e1:05:2c:65:78:37:6d:1d:e9:ed:8e:
29:64:fe:be:87:82:b4:25:41:84:74:6a:d1:77:90:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:45:5A:C2:EB:20:2C:C5:44:69:6C:FE:CF:4E:8C:6B:21:EC:12:76
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:85:d4:6a:21:c7:82:3f:24:e2:f7:d9:19:36:92:93:15:72:
6e:91:62:ae:2f:83:8c:6d:6b:cc:18:06:1b:24:09:67:a6:a8:
55:c4:75:e1:3d:95:aa:a0:07:d9:78:8d:9e:3f:e2:15:aa:89:
0e:14:0e:a3:00:3a:38:c7:d2:82:a9:27:87:74:19:ca:6f:1c:
2d:a1:76:6b:76:14:c3:f9:92:ba:23:dd:a9:0e:17:ee:62:ce:
14:57:3c:22:2d:ac:2e:c5:91:2d:03:0e:91:11:c1:d6:5d:ea:
0d:e1:48:b5:b6:93:67:28:cd:5c:ce:0a:0d:8b:cb:68:a7:5f:
97:8a:54:ad:85:14:3d:35:63:ee:74:a2:46:d3:b2:9e:41:86:
bd:0d:05:b9:ee:f5:67:dc:bb:c3:a2:ed:e1:ca:97:29:26:64:
e0:e7:f2:4e:73:03:fd:e7:cc:8b:2e:e4:0f:42:da:58:d4:54:
4f:b1:3a:3d:7b:46:67:34:b0:c2:94:9a:8d:04:80:c9:8c:0b:
0e:e9:6d:4c:23:77:28:32:40:3b:99:3d:45:81:63:e6:2a:1b:
61:6e:37:46:57:4a:2a:d3:e9:09:86:2a:6c:3f:10:38:3f:9c:
eb:18:61:5f:5a:fe:4b:f8:3d:fe:e2:ac:66:e8:13:f7:85:cd:
71:43:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:39 2025 by rpki-client