Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: lyv9s/IV0kF18PNMwkEuWAplRn1KWiZnTEGTM6qps3Q=
Subject key identifier: CE:CD:BE:AB:BD:75:C4:BB:35:55:D4:CE:FA:A9:60:86:AD:90:18:CC
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 0198D54E864728595C91D85170DE1E6AE2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: BN+Tt6qDABByzRQQ75vhw8ee5Y5THk71n7Jnlf5PVkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:86:47:28:59:5c:91:d8:51:70:de:1e:6a:e2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=cecdbeabbd75c4bb3555d4cefaa96086ad9018cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:31:da:ba:d6:22:54:0e:30:54:25:ed:87:
35:2d:bd:a8:4c:9c:5e:7d:25:53:c8:c1:0a:1f:75:
27:22:09:3c:54:83:91:f0:cd:a8:bd:6f:8a:b4:19:
f8:fa:71:3f:40:79:7f:d3:a1:79:28:ef:45:2b:1e:
8e:22:bd:71:63:52:67:36:57:64:f0:f3:ee:ab:97:
01:d6:af:e2:2e:22:03:db:38:95:9b:36:ae:67:f6:
ff:44:ee:d3:d3:8c:10:f2:49:62:08:dd:b4:37:cf:
f8:d1:b6:ec:45:98:6d:fb:4e:2e:e1:64:85:8b:f4:
ee:8b:50:b4:65:5f:4a:14:c3:c7:bd:e7:c0:76:9c:
a1:1a:54:f3:1b:12:67:5f:fe:45:60:31:cc:41:70:
5d:0d:8b:ad:ff:2c:97:e0:6f:a8:f1:70:16:13:7e:
d5:c6:05:ff:1e:9f:80:fc:a4:1c:d7:fe:5a:17:f0:
d2:42:f3:ad:fc:18:ee:88:24:f2:42:56:9f:56:fd:
b4:49:03:ba:d3:e5:fe:25:a2:83:4b:f4:71:86:84:
f4:fa:e3:14:23:11:2a:aa:7c:49:e3:2c:5a:7c:6b:
a9:ff:14:a0:ba:e1:ad:ca:9e:05:37:54:05:b8:92:
d4:49:05:de:1e:21:3a:fd:36:7e:c9:e7:63:90:00:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:BE:AB:BD:75:C4:BB:35:55:D4:CE:FA:A9:60:86:AD:90:18:CC
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c3:39:7f:8a:1b:e4:f8:83:f0:8e:a9:a9:c5:02:25:a7:9b:
24:7d:7f:e9:c4:d4:ae:a4:01:b6:0b:1c:00:2a:d1:6c:c0:05:
17:53:95:a6:b8:30:6f:ce:71:37:27:d0:9b:fb:40:f6:42:3f:
71:6e:d4:a7:3d:20:f9:fd:d7:f9:d5:7f:5c:fa:59:2f:f2:d7:
48:01:c8:2e:a3:c3:fb:fd:7a:93:a7:2b:63:c5:66:1c:26:c0:
c5:39:46:68:49:ef:d4:77:9e:0c:27:46:c6:0e:d5:4f:e5:2e:
85:69:25:59:78:89:16:c9:83:ec:15:1c:16:d1:ba:2e:1e:5f:
e0:a7:d2:25:60:67:f3:ff:69:2b:82:1e:a8:e0:58:9d:2b:7a:
aa:7f:6e:d1:bc:ba:5c:41:6f:00:8e:dd:d8:d8:02:e8:04:90:
25:a5:08:6e:b9:ea:12:46:86:22:63:f0:cc:8a:15:19:9a:fa:
19:43:f3:f7:de:63:ef:c4:1f:3c:c6:02:0d:dc:da:d2:7a:db:
66:04:86:0a:df:8b:8f:4f:5a:32:42:46:06:41:03:4f:d5:16:
03:90:ea:b7:e3:d9:3b:a8:29:67:c4:65:ea:45:88:4c:b8:85:
80:d3:bc:e0:b2:73:c0:96:81:ad:7a:28:59:d1:f4:ae:f0:dc:
e3:5c:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:01 2025 by rpki-client