Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: B+zjnCDmXxD/4zf6kpwhOhsMAdzMaR5+iJ4Y3rb3DdM=
Subject key identifier: C8:68:B1:94:61:7E:4E:37:24:FB:73:10:E8:C9:02:2C:E8:45:B8:27
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 0198D54DF30C828637B2CA4C0CDD9A200390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: msMHaZrZU67iUhZ8ImrbBrVs+K5x6mNyBJ62+XOys3o=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f3:0c:82:86:37:b2:ca:4c:0c:dd:9a:20:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=c868b194617e4e3724fb7310e8c9022ce845b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:52:aa:7c:fb:f3:f7:34:b5:e5:12:2f:e6:
76:9d:92:52:a6:b2:a7:c3:cb:53:4d:66:b4:74:8b:
7e:31:fd:46:cd:5a:ca:f5:e8:c4:1a:94:24:90:01:
1c:97:f1:e6:b0:9e:1f:ef:12:e5:91:02:ba:ca:81:
38:54:eb:b8:c7:ab:e3:40:68:21:f3:82:02:9a:67:
7d:09:88:10:3c:f5:e6:b2:09:18:31:90:17:8c:56:
d9:bc:8d:ac:ae:ae:e5:74:56:42:71:15:0f:b0:01:
be:a1:e7:b0:3f:df:f7:b7:f1:0f:f3:95:3d:f0:90:
25:fd:65:3c:d7:6d:7b:d9:55:51:82:57:7d:1d:14:
a3:c0:c0:7b:73:9f:e0:dd:ac:6b:87:6e:39:51:ff:
f5:d8:de:84:6f:b3:60:d8:06:9c:f0:15:88:2a:45:
dc:4c:85:4b:7f:65:f7:5c:4a:90:92:ab:fa:e2:c4:
2e:37:59:63:d3:4f:9e:c0:26:ac:1c:d8:ac:ba:a7:
fa:09:14:d0:f5:bb:cd:28:32:43:5f:95:ab:3d:e6:
bb:3b:35:e5:30:04:2e:74:31:9c:40:e1:f6:55:42:
c8:d9:92:f5:a3:4e:cc:1b:cd:73:b7:58:e1:b6:45:
2a:96:11:dc:16:a3:84:b4:3b:90:92:1c:c4:bb:f5:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:B1:94:61:7E:4E:37:24:FB:73:10:E8:C9:02:2C:E8:45:B8:27
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:06:b5:b4:a0:27:ea:b5:ea:5f:93:2a:ed:c6:25:15:36:
1b:0b:c3:4c:9f:30:7f:49:8d:10:27:fb:97:3b:a0:4d:79:86:
65:38:1e:37:2a:40:99:e7:e0:c9:7f:81:c8:3a:6b:54:1e:a7:
16:3e:86:79:17:71:44:fc:28:45:ad:aa:ec:21:12:65:d9:0d:
23:94:26:b9:2a:19:c0:d0:f2:bb:03:55:f7:12:13:21:3c:19:
1c:62:d8:7c:0c:d2:9d:cc:b9:2a:65:9a:ca:9f:e4:07:6b:48:
58:94:c8:10:3e:36:e8:7a:e3:3e:b7:01:36:57:c6:c8:43:04:
57:5e:b8:8d:b5:44:1e:8b:61:25:42:b6:31:e5:59:37:69:b9:
ab:00:63:f4:d1:14:d8:64:03:e4:5f:a6:18:a4:61:fa:04:96:
ef:cc:9a:2c:d7:0a:15:bf:6f:fd:e9:97:92:83:c7:08:55:36:
f0:4c:c5:5f:ea:58:3f:af:da:4a:0f:d7:77:09:6c:01:73:7b:
4f:10:93:54:d6:95:b7:b2:a7:3a:75:80:1b:bb:1a:ed:cd:34:
85:45:0e:2d:1d:87:10:32:3a:01:3a:98:43:59:33:27:04:39:
e4:14:8f:17:79:81:92:9e:df:84:ae:71:19:fb:fd:9a:0a:e7:
ae:45:7e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfMMgoY3sspMDN2aIAOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjUwODIzMDUwMTUyWhcNMjUwODI0MDUwMTUyWjAzMTEwLwYDVQQD
EyhjODY4YjE5NDYxN2U0ZTM3MjRmYjczMTBlOGM5MDIyY2U4NDViODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34xSqnz78/c0teUSL+Z2nZJSprKn
w8tTTWa0dIt+Mf1GzVrK9ejEGpQkkAEcl/HmsJ4f7xLlkQK6yoE4VOu4x6vjQGgh
84ICmmd9CYgQPPXmsgkYMZAXjFbZvI2srq7ldFZCcRUPsAG+oeewP9/3t/EP85U9
8JAl/WU812172VVRgld9HRSjwMB7c5/g3axrh245Uf/12N6Eb7Ng2Aac8BWIKkXc
TIVLf2X3XEqQkqv64sQuN1lj00+ewCasHNisuqf6CRTQ9bvNKDJDX5WrPea7OzXl
MAQudDGcQOH2VULI2ZL1o07MG81zt1jhtkUqlhHcFqOEtDuQkhzEu/VV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhosZRhfk43JPtzEOjJAizoRbgnMB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNgGtbSg
J+q16l+TKu3GJRU2GwvDTJ8wf0mNECf7lzugTXmGZTgeNypAmefgyX+ByDprVB6n
Fj6GeRdxRPwoRa2q7CESZdkNI5QmuSoZwNDyuwNV9xITITwZHGLYfAzSncy5KmWa
yp/kB2tIWJTIED426HrjPrcBNlfGyEMEV164jbVEHothJUK2MeVZN2m5qwBj9NEU
2GQD5F+mGKRh+gSW78yaLNcKFb9v/emXkoPHCFU28EzFX+pYP6/aSg/XdwlsAXN7
TxCTVNaVt7KnOnWAG7sa7c00hUUOLR2HEDI6ATqYQ1kzJwQ55BSPF3mBkp7fhK5x
Gfv9mgrnrkV+ow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:39:57 2025 by rpki-client