Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: W+CqUlThMD2XIqGT1/I2wc1du7OpufRivqu0ZQZk15g=
Subject key identifier: 9C:C7:0A:84:2B:5D:43:DF:4E:A8:D2:52:E3:7D:80:DC:5B:57:95:3C
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0197B820C244D29F9432E7375B984C4E75B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: 5q1q_7I1sJ_7Vs4jC33pCd9fPIM.roa (hash: lVtGayB3fsKRi7Py8r7nobPgDnQD+3/eLgW8yclmCys=)
2: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: JbdkP2PmDXYzMgqVUtVSn/4dXbg+lYXYoBqpvA5R2e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c2:44:d2:9f:94:32:e7:37:5b:98:4c:4e:75:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=9cc70a842b5d43df4ea8d252e37d80dc5b57953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:9d:b2:f2:a9:03:de:61:ab:8f:23:3d:01:
6d:18:ee:0e:9e:b8:51:36:7d:d4:01:48:db:bf:d2:
e3:1c:55:e3:16:eb:6f:3d:69:25:be:a6:d6:a2:9d:
fb:10:18:9b:fe:76:6d:ee:5e:57:34:25:ef:fc:7a:
ab:af:32:25:b7:c1:7f:87:3f:28:79:71:65:a9:e1:
48:9b:63:6a:0b:d8:fb:13:6e:ed:9e:d0:ba:60:4e:
fa:28:03:af:59:48:9c:d1:7c:66:91:a1:67:bf:cc:
57:28:34:c7:62:a8:42:e7:17:3d:d1:3f:4c:93:26:
6b:3b:db:88:a5:29:81:a0:ac:ee:49:7d:6e:58:c1:
54:44:40:25:2b:24:14:e5:79:e5:18:f2:dc:4e:23:
ee:25:d5:5b:9a:3f:81:4d:aa:5a:6f:da:d9:e8:0c:
cb:94:6e:2d:63:d6:6b:61:29:b1:65:9b:bf:9b:8a:
c0:d6:91:0f:1e:9f:8a:8b:a5:b2:dc:ab:87:36:72:
2d:68:16:fd:a3:74:f7:6d:4f:55:cf:7d:f4:b9:6f:
8b:ed:aa:20:89:9f:55:02:4c:da:75:73:4e:57:2e:
24:3e:88:e9:27:5a:91:da:56:c6:1a:26:fd:23:76:
16:55:49:cd:e6:f0:b3:c3:7f:c3:81:4f:49:ad:63:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:0A:84:2B:5D:43:DF:4E:A8:D2:52:E3:7D:80:DC:5B:57:95:3C
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cf:bd:fc:e9:61:55:83:21:74:0a:39:3a:f8:da:76:e5:03:
1b:0d:9f:01:67:b8:2e:c8:61:b7:3d:7b:0f:be:26:e4:49:8e:
c7:be:b2:db:98:f2:55:bc:fb:b5:be:cb:6e:02:57:e3:80:da:
38:02:b5:e1:7e:60:17:11:53:2c:f0:e3:59:44:29:9b:88:9d:
57:86:df:c5:26:e6:c6:6e:91:53:f5:c1:fc:de:86:7a:73:38:
f5:de:40:ea:30:1d:88:71:8e:f9:ec:57:1c:8b:34:ee:90:d2:
76:53:69:1e:51:0d:42:51:2f:8f:db:57:29:b7:fe:82:dd:22:
78:b3:0f:50:ac:13:7e:19:3d:30:26:fb:13:87:d5:ee:00:ac:
25:43:4e:ef:9c:fd:a5:e0:41:69:f2:fb:11:65:30:47:4f:24:
e1:65:cf:2d:3f:0c:9a:cb:d4:c6:b7:2c:5d:eb:da:78:56:94:
41:7e:c4:c0:bb:be:cf:00:0d:ce:98:45:e4:f2:d0:8b:b6:5d:
94:b3:3b:ab:ed:87:d1:a5:77:e8:7c:45:a3:f3:6f:cd:47:ad:
ad:a6:82:33:b5:a5:e2:9d:9b:f7:7c:1c:1e:a4:03:ca:c9:19:
cf:c1:cd:ce:ef:f2:45:24:04:c7:ac:e1:d4:cb:a3:23:81:1c:
59:82:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:14 2025 by rpki-client