Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: ++cBj7Yaot0Xmp+6z3GA5Ag/xHg0py5lBSdF+17RSaA=
Subject key identifier: E6:6B:C4:C7:A3:4E:74:40:59:FA:12:F5:F9:ED:A2:5F:94:CA:61:90
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 0199FCC610F7C9812B94EAD7BEAE222E8133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: E+FXTFx9eL7ShNmlc5JUHiWh5w/vyZpfATxmoNcmPR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:10:f7:c9:81:2b:94:ea:d7:be:ae:22:2e:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=e66bc4c7a34e744059fa12f5f9eda25f94ca6190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:d3:08:98:83:d0:c3:b1:ba:e5:e2:c1:f7:
d9:46:ca:1d:2f:38:a1:37:d9:bf:c7:9e:8f:f2:c9:
f9:8f:88:4e:14:a8:ac:9e:d4:7d:4c:50:2b:59:13:
a8:14:f6:34:ef:8d:66:34:48:49:f6:44:bd:bc:12:
d4:75:ba:d7:a0:c5:c6:58:9b:6c:9e:c1:e1:d9:e3:
09:4c:b9:c9:42:28:55:b1:5f:d5:29:b5:d1:2e:3e:
ab:00:17:c1:4b:7d:00:18:20:50:62:d5:94:a0:bd:
09:3b:7f:93:97:4a:23:a8:dd:c8:7b:25:34:92:20:
c4:6e:75:d3:0f:91:a8:f2:d2:bb:97:45:2c:9c:e3:
3a:d1:48:15:ad:58:58:8e:0f:8e:6e:05:55:d8:45:
c3:6a:01:56:e3:df:3f:73:85:bc:38:84:99:76:e6:
1d:7c:ff:86:e7:8f:3e:d3:8c:b4:5b:d6:f9:6c:68:
2b:7d:85:fc:95:3a:a4:b7:e1:5b:f9:46:c1:7a:9d:
78:d4:15:18:85:fa:6b:70:6c:fa:d0:e4:8c:bf:d6:
76:c6:f9:3f:d5:f7:c3:4c:83:79:5c:62:18:e9:4b:
1f:c0:c5:de:dc:01:b2:70:24:28:0e:31:c7:c9:89:
f8:66:1d:45:21:b3:2d:b1:05:28:63:86:9e:7d:28:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:C4:C7:A3:4E:74:40:59:FA:12:F5:F9:ED:A2:5F:94:CA:61:90
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:52:65:fa:7f:55:6f:1a:cc:c7:24:78:99:c9:9b:24:d7:
72:db:f4:85:a9:6b:b0:ae:0d:62:a0:5d:05:5b:f2:aa:d3:e8:
cc:f7:cc:c4:42:d9:f7:f7:b9:95:9a:58:e4:44:e2:d4:57:85:
19:32:90:2b:0d:eb:f2:39:f3:88:e1:54:f8:72:ea:59:69:18:
9d:92:22:33:93:39:ca:be:0a:6a:4e:76:f1:b0:1f:8d:9b:a6:
1a:79:34:5a:49:59:0a:19:31:c9:0c:c4:4f:e3:08:9e:77:87:
45:bc:b2:7b:ac:49:a7:1e:09:9b:22:3d:1b:9d:b2:fa:22:78:
87:12:e5:d9:00:38:6a:85:ff:a2:ab:13:fd:dd:31:e5:6b:6f:
a2:8e:73:62:a8:00:c4:4e:fd:d4:c7:a3:ed:ee:9a:ca:99:fe:
41:9e:64:77:01:62:6f:63:54:dc:e7:36:ee:77:1e:06:29:e1:
ae:ed:7c:20:35:6d:c5:0c:6a:f4:19:95:e2:81:6b:d7:33:52:
ee:46:b4:41:f6:d4:1e:79:99:c8:97:4d:0b:bc:9d:bb:c0:fc:
c6:51:79:00:0f:51:ac:cb:77:d2:fa:b7:8b:4a:05:24:0b:78:
60:5e:8c:e4:5a:f7:93:ea:9a:fa:88:27:2f:45:9b:30:df:64:
e2:5d:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:16 2025 by rpki-client