Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: pF4b98drgHRbc4UTVYx35RllrVDhtKmJdJxufzxUoYM=
Subject key identifier: 33:79:52:66:D2:8B:CA:7C:61:78:3C:54:B7:D4:50:8A:5D:1C:E8:2E
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 0199FCC6241376A701B95CC732C5085994C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:07 +0000
Manifest this update: Sun 19 Oct 2025 14:01:07 +0000
Manifest next update: Mon 20 Oct 2025 14:01:07 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: WKtH2Lc0HNdzczT28ZvkzIdA8u50N6b6HPnivpQ5cPM=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:24:13:76:a7:01:b9:5c:c7:32:c5:08:59:94:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Oct 19 14:01:07 2025 GMT
Not After : Oct 20 14:01:07 2025 GMT
Subject: CN=33795266d28bca7c61783c54b7d4508a5d1ce82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:26:6d:f7:f9:e1:81:f3:7e:44:10:1a:25:
eb:9a:89:4d:2c:ed:0b:73:e2:df:f0:03:f8:ed:b2:
54:90:84:3a:98:72:94:73:7e:ae:1b:8d:ce:c2:41:
ca:5d:81:fd:13:30:5d:e1:c5:85:7e:12:b6:92:63:
14:0a:9d:2a:a2:46:b0:25:51:a1:7b:e1:78:e8:08:
58:e0:89:6a:ec:5a:9a:fb:2e:b3:7d:bb:dc:13:17:
a4:fb:53:90:09:70:2b:6a:73:e1:8b:4f:b3:fc:83:
da:85:37:39:e3:40:4d:75:58:ed:f3:a5:b9:15:55:
6e:34:b4:a6:8a:44:fa:19:9e:b3:a4:7a:a8:6e:db:
e0:54:a2:bf:eb:68:ba:12:e7:49:c9:29:a6:3b:cd:
47:50:aa:de:d1:f6:96:8f:f3:17:dc:6a:f6:d4:56:
05:06:47:e6:47:d0:80:0d:f9:e5:e5:c3:e4:6b:e3:
6f:84:a6:a3:c7:53:7a:44:ec:4d:aa:d0:6d:91:b5:
f2:ac:88:a1:42:32:94:c1:bb:96:9d:95:58:4f:ae:
b3:aa:31:2d:d5:ab:d0:f9:c9:01:16:e9:3b:f1:ec:
e3:d0:7f:a7:53:b5:7e:0b:93:42:0c:15:78:fc:0e:
64:8b:89:34:72:08:8f:39:02:e6:b4:94:cd:ac:55:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:52:66:D2:8B:CA:7C:61:78:3C:54:B7:D4:50:8A:5D:1C:E8:2E
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e1:f3:d2:22:97:83:fc:82:ff:13:67:bb:39:4b:93:40:82:
97:e7:40:8b:bb:ec:f4:db:b7:f5:33:9c:03:af:6a:ad:73:b8:
79:9f:d2:e7:32:59:3c:1b:bf:40:ac:c9:d7:00:5a:92:cb:20:
fe:93:73:c5:29:02:0a:50:7d:82:68:47:d9:72:71:d0:10:39:
fa:88:f3:36:91:ad:24:f6:79:fb:11:ab:1c:cc:5c:c7:c9:ae:
fd:1c:fb:1a:e6:6e:5a:64:a5:26:70:f4:ba:6f:8d:11:17:c5:
18:51:8d:bb:b2:66:42:86:8a:ea:a5:7c:3b:de:73:c7:67:95:
a3:f7:f4:d2:a5:09:d9:5b:51:48:5a:6f:c0:78:e9:24:cd:cc:
fa:5a:68:6f:fc:86:dd:57:f6:ee:2a:17:a6:7b:d1:6d:71:ed:
b9:0b:73:3d:cb:9a:85:9e:6a:f0:d1:83:1c:c9:f2:98:d6:63:
e3:28:b6:2d:32:62:e1:53:2a:a5:27:ee:ae:90:af:58:71:7f:
15:38:bc:2a:28:ce:af:2f:07:8f:eb:49:19:03:b0:9a:e4:7d:
70:cc:86:f9:bc:99:e1:b3:04:24:b2:a4:3a:e3:b8:b9:33:33:
a6:7e:7f:6d:09:ff:78:71:ea:43:a5:c1:e7:8a:6c:2e:e2:0d:
1f:c6:d2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:45 2025 by rpki-client