Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: js9rNofaYgcxgPMLT2J5ARgsBuqvTRoxihal8b/LVCo=
Subject key identifier: D8:A9:78:B8:F5:26:E3:79:E9:F4:6F:F1:39:95:ED:AD:E8:02:11:B9
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 0197B5FC1D8A37943056D8B212B0DF1ACF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 12E4
Signing time: Sat 28 Jun 2025 10:01:28 +0000
Manifest this update: Sat 28 Jun 2025 10:01:28 +0000
Manifest next update: Sun 29 Jun 2025 10:01:28 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: zF5Jz1R6MvMVza58k0hG0UynBK/45zK0djiPQxFn7nQ=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:1d:8a:37:94:30:56:d8:b2:12:b0:df:1a:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jun 28 10:01:28 2025 GMT
Not After : Jun 29 10:01:28 2025 GMT
Subject: CN=d8a978b8f526e379e9f46ff13995edade80211b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:04:69:4b:21:1f:f1:3c:e6:33:ce:98:c8:
df:a3:19:52:00:c0:c3:53:04:4e:e4:92:7a:f6:93:
4b:95:d9:61:b2:b3:87:aa:5a:e9:f5:bf:7a:8a:0a:
5c:6f:c8:ab:78:87:5b:93:c5:72:2b:de:c7:c3:6c:
75:2c:7c:bc:72:f5:80:29:6c:3f:3e:c9:a4:c6:78:
39:c2:b8:52:c0:71:bf:74:9d:d0:e9:90:ef:bc:e6:
b0:ba:d9:9a:c8:a1:28:69:c2:be:07:49:dc:d7:81:
79:6f:8f:2c:8b:13:5c:ad:b1:95:0f:5a:21:17:08:
ea:46:89:15:ee:90:ab:e1:f4:f3:54:c2:71:3d:56:
d0:22:28:55:5e:b5:34:71:23:04:9c:38:4e:9c:ab:
03:84:76:59:06:d5:a2:51:c7:aa:0a:fc:76:e8:b5:
38:49:df:ad:74:14:c5:6a:58:7b:10:11:5a:60:c5:
f9:c1:bb:4f:9f:f5:39:f6:3d:c1:da:8c:fa:57:ae:
dd:5b:35:6b:d4:fd:ad:8d:60:d8:c1:29:d9:f7:64:
ef:34:51:4a:74:6f:b4:35:81:4e:82:1d:d7:f5:dc:
b7:61:5f:9e:5b:3f:8d:58:88:ea:87:41:62:8a:f4:
8c:4a:45:3e:43:5e:e8:38:98:f8:ee:54:88:39:c3:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:78:B8:F5:26:E3:79:E9:F4:6F:F1:39:95:ED:AD:E8:02:11:B9
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:4a:22:f7:ed:40:cb:ff:be:4b:f4:3b:23:eb:b5:df:e7:
b3:8f:11:ee:03:51:85:35:20:d0:a0:e2:86:b3:75:94:71:74:
ab:af:3d:2d:cc:46:17:67:14:79:b7:b7:d3:53:da:35:ef:4b:
6f:01:7d:1d:ee:0b:95:70:3c:1f:b8:12:e5:82:b8:cc:db:c1:
f8:90:74:c7:d4:83:33:b3:a1:5f:aa:ed:ee:53:aa:81:9f:27:
1d:b3:5a:04:2a:31:fc:72:0d:8f:ce:3c:25:2e:a6:37:cd:2d:
9b:d8:dc:cb:68:9f:ab:81:7c:9a:37:07:f3:be:02:fd:e5:81:
40:5e:31:5e:28:69:3a:53:d2:ff:2b:8b:64:92:d2:c9:a0:ac:
2b:52:4b:74:70:00:d1:cb:56:33:ba:a1:fe:67:ca:88:a8:a5:
b6:ee:36:16:cd:2c:0b:15:b1:1f:7a:a4:36:92:88:3a:e3:9a:
3c:e0:bd:44:17:21:e3:db:b2:0d:ee:ce:e8:98:c4:51:fc:78:
e7:5a:7c:24:8d:6c:f4:10:14:20:57:af:1e:f5:0a:da:db:58:
76:3b:50:08:dd:fa:b3:73:c2:e8:4f:fc:38:f5:9c:aa:b5:28:
68:14:c0:1d:84:31:82:e9:2e:9a:69:9e:28:dd:c3:85:a6:9c:
5e:3d:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:11 2025 by rpki-client