Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: Vx9C4Pk2b0gnZF59wQn8RKBcRcwSxBoDybhFjQpYDm8=
Subject key identifier: B8:40:9C:69:1E:00:E8:B9:1F:09:02:63:FF:16:E5:AD:8C:DF:5F:81
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 0197B6A0C4ACF724B8A76AF3B1C094D30194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0E28
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: 5B5k/YmzFb+zja1vp3MdxmDViWs0DgFfjgKvmumaGWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c4:ac:f7:24:b8:a7:6a:f3:b1:c0:94:d3:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=b8409c691e00e8b91f090263ff16e5ad8cdf5f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:86:33:9c:de:37:53:6f:b4:64:9f:bc:af:
04:d6:e6:18:87:9e:39:e4:a3:e9:99:60:50:44:49:
cc:3a:43:42:8f:28:d5:36:b8:e8:08:1f:10:98:62:
5a:29:e7:2a:10:a3:b1:fc:f4:92:37:c1:32:5a:56:
c2:a3:1e:cf:a4:64:79:37:3b:f2:f6:47:07:6d:f6:
ee:39:34:c7:ca:1f:d0:f9:b9:14:86:2c:83:cc:a6:
ce:ae:65:3d:de:de:25:4f:88:f0:39:98:a8:3d:9c:
82:81:60:ad:81:9f:12:e1:5a:03:31:be:c3:2f:77:
9f:57:38:6e:a7:65:d5:b6:1f:93:41:f1:a9:00:c6:
a1:3c:90:d1:8b:7f:9f:60:2d:44:2a:59:ff:9a:cf:
df:67:b0:2c:90:7b:fb:75:76:c0:91:bd:d7:f5:cf:
f1:ba:c8:2f:a0:7b:da:2e:38:17:2c:53:62:e3:f4:
2d:97:f4:14:fa:22:f4:c9:b9:2a:5f:ca:b1:0f:19:
df:cb:af:fb:99:2f:11:f6:c6:8a:03:7b:85:e2:d1:
92:4a:ec:99:6b:d8:66:44:05:e5:04:54:fb:8b:42:
0e:4a:a1:d2:f7:b9:e6:61:d1:9e:fd:6d:c8:58:34:
01:95:36:d4:f7:c4:c8:5b:7e:2b:f4:53:ad:58:9b:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:9C:69:1E:00:E8:B9:1F:09:02:63:FF:16:E5:AD:8C:DF:5F:81
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8f:f0:6d:b1:ea:52:5b:34:97:26:cd:84:a1:b5:eb:c2:b7:
cc:6b:3c:77:22:ff:f1:2f:db:13:37:61:ab:e2:9d:ae:e4:a0:
42:7f:84:6d:05:0b:d2:60:ab:9b:07:3a:98:4b:7b:b0:f3:04:
c2:81:60:34:d8:5c:bf:71:2d:f6:c3:fe:4e:82:5a:ee:67:12:
b7:65:d8:b5:a8:a8:6d:8f:e2:59:98:c2:67:8d:b5:f9:88:1f:
ec:a5:88:04:ea:9d:26:75:25:05:b3:9d:34:6c:39:7d:d3:0d:
82:e6:16:a4:47:e5:71:9f:e9:ff:0c:bc:cf:d8:64:95:59:12:
e7:40:2c:25:3b:be:17:2f:67:97:e0:8c:6b:40:33:d3:35:29:
be:c2:e4:71:8d:f5:9b:13:e7:46:f5:09:f6:86:4b:4b:92:6f:
4f:e9:7a:10:9a:b9:9d:dd:53:79:b5:49:33:54:4e:43:e0:20:
f8:47:9e:b1:b7:ca:bc:d1:31:73:d4:a7:2f:7e:0e:dc:ff:fc:
b7:a9:36:e8:98:a0:9a:4c:8f:47:b0:44:61:fc:d8:ca:8a:b2:
43:9f:23:b4:cf:34:d8:f1:cb:f0:c3:06:20:bd:a9:d4:3a:01:
a1:34:14:f3:f7:bb:8c:1a:b9:91:c0:b2:9f:12:65:4a:6e:67:
f6:44:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:57 2025 by rpki-client