Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: jGxPBlh6kTGJwmnrsWq1SiLpsBkIiVwK8+7k/MFDf6Q=
Subject key identifier: 11:BC:AB:10:EF:93:03:35:68:DC:2B:55:59:0C:28:54:A7:63:72:F4
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 0197B77C1B6328F90D76B890C57A41A1AEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: VAGFlcNU4N9z4UScu/qC9V1EJUwlr9UUFqf7oII8x3k=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1b:63:28:f9:0d:76:b8:90:c5:7a:41:a1:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=11bcab10ef93033568dc2b55590c2854a76372f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:08:9d:c7:48:66:69:80:9c:df:99:fd:1b:
07:ac:3e:71:e5:b9:31:7b:30:fd:a6:41:53:0b:b2:
dd:af:43:84:d1:3a:0d:29:9d:0a:03:7d:16:1c:dd:
9c:b8:8d:fd:f1:3d:3f:c6:2a:2f:02:53:65:b3:6f:
2b:dc:b2:67:55:44:01:91:f7:2d:01:6f:b4:f1:ac:
88:ea:31:55:fe:41:09:e1:b5:31:ed:32:a0:6d:b0:
63:d8:7b:99:35:48:e7:af:cd:3c:01:11:a7:df:82:
31:68:81:1f:d9:d7:8d:1b:51:c7:aa:db:18:9b:74:
7f:9a:30:68:67:d1:c2:d7:13:4c:32:5a:0e:b2:e2:
0f:98:99:16:4e:21:dd:fa:c2:93:d6:2a:a5:84:17:
20:48:89:f2:a1:64:85:23:10:6d:0c:72:18:e2:72:
2b:51:39:f7:e2:1f:ef:a7:1a:03:ca:25:47:98:67:
f4:62:5a:f0:df:be:8e:9b:a6:18:6f:2d:ae:f2:b4:
51:15:30:da:26:18:ed:19:86:0a:a5:fd:13:b1:a0:
ed:ce:02:81:96:f8:c6:35:14:f4:77:46:6e:77:21:
24:a1:d1:a6:33:15:b1:9a:4b:0e:06:60:4f:99:9b:
a3:14:9f:2f:b8:db:34:3d:f1:e4:65:98:03:da:92:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BC:AB:10:EF:93:03:35:68:DC:2B:55:59:0C:28:54:A7:63:72:F4
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:a0:48:d8:2b:01:6c:83:61:64:a3:01:5c:20:ff:b9:1f:
33:18:29:f6:e9:27:6a:c1:f1:4a:53:ee:b3:42:d9:12:c3:25:
43:db:4a:67:2f:37:f9:82:60:97:1f:59:df:58:16:c7:14:35:
5e:10:1b:e0:79:14:e2:a3:3c:db:d0:d8:96:57:fe:6c:90:b5:
6d:9d:0a:dd:5c:b1:f3:b6:c8:48:59:d7:f4:dd:16:8a:7b:d9:
d4:ea:74:ba:e5:f0:22:1b:c3:78:c0:a5:2a:80:f2:3b:e8:bc:
12:32:88:8a:b3:b8:4f:14:90:77:0d:80:72:bc:f7:de:17:88:
2d:7a:3c:57:36:b2:a7:7f:0f:7a:be:33:8c:32:d4:e8:28:db:
60:4c:af:79:9b:f2:ed:68:2c:b8:60:0c:7d:f0:26:f5:78:83:
26:a8:c1:ee:49:31:3c:0a:26:30:a2:56:8b:5d:25:ef:dc:2f:
9b:e4:0d:b2:37:a1:9c:37:61:87:fd:38:e7:de:2c:e2:74:e3:
1b:ff:00:ab:45:00:ff:e8:a7:50:3b:a1:86:2e:bc:2c:32:be:
06:db:33:a2:1d:11:56:d4:97:66:a1:f2:d6:27:97:be:35:05:
a7:07:70:9b:30:07:9e:e3:56:f6:ed:61:8c:11:04:52:d2:27:
f2:3c:4b:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fBtjKPkNdriQxXpBoa66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjUwNjI4MTcwMDUzWhcNMjUwNjI5MTcwMDUzWjAzMTEwLwYDVQQD
EygxMWJjYWIxMGVmOTMwMzM1NjhkYzJiNTU1OTBjMjg1NGE3NjM3MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2IIncdIZmmAnN+Z/RsHrD5x5bkx
ezD9pkFTC7Ldr0OE0ToNKZ0KA30WHN2cuI398T0/xiovAlNls28r3LJnVUQBkfct
AW+08ayI6jFV/kEJ4bUx7TKgbbBj2HuZNUjnr808ARGn34IxaIEf2deNG1HHqtsY
m3R/mjBoZ9HC1xNMMloOsuIPmJkWTiHd+sKT1iqlhBcgSInyoWSFIxBtDHIY4nIr
UTn34h/vpxoDyiVHmGf0Ylrw376Om6YYby2u8rRRFTDaJhjtGYYKpf0TsaDtzgKB
lvjGNRT0d0ZudyEkodGmMxWxmksOBmBPmZujFJ8vuNs0PfHkZZgD2pLwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG8qxDvkwM1aNwrVVkMKFSnY3L0MB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC2gSNgr
AWyDYWSjAVwg/7kfMxgp9uknasHxSlPus0LZEsMlQ9tKZy83+YJglx9Z31gWxxQ1
XhAb4HkU4qM829DYllf+bJC1bZ0K3Vyx87bISFnX9N0WinvZ1Op0uuXwIhvDeMCl
KoDyO+i8EjKIirO4TxSQdw2Acrz33heILXo8Vzayp38Per4zjDLU6CjbYEyveZvy
7WgsuGAMffAm9XiDJqjB7kkxPAomMKJWi10l79wvm+QNsjehnDdhh/04594s4nTj
G/8Aq0UA/+inUDuhhi68LDK+Btszoh0RVtSXZqHy1ieXvjUFpwdwmzAHnuNW9u1h
jBEEUtIn8jxLBg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:58 2025 by rpki-client