Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: 9NpljJZUSxJso46euf86Mi7y21D67HS7bWJpt+Iv8ew=
Subject key identifier: B6:3F:38:BA:5A:B4:52:B3:79:43:9D:55:1D:D2:45:02:BD:FF:D0:92
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0199FE0FDB0E7F499BEE40E096DACEFF84B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0C5F
Signing time: Sun 19 Oct 2025 20:01:15 +0000
Manifest this update: Sun 19 Oct 2025 20:01:15 +0000
Manifest next update: Mon 20 Oct 2025 20:01:15 +0000
Files and hashes: 1: 5GAvl6a2LhO40IHXb3FEQRL43dI.roa (hash: /6XSNGfrUMapG8xHohOBC097pXOO/8yE7oieep3PnkA=)
2: UEpNb3wmOOdCK7UvN3lXTC2DcUk.roa (hash: pmS4hRe0q9ReL0MLHSlxbOJsASxbtpyjkGhM1kcVhvc=)
3: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: kwzvW7blhFHDJIsk55w4Ao5lbTAaNM5ljr4I0FSwx1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:db:0e:7f:49:9b:ee:40:e0:96:da:ce:ff:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Oct 19 20:01:15 2025 GMT
Not After : Oct 20 20:01:15 2025 GMT
Subject: CN=b63f38ba5ab452b379439d551dd24502bdffd092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:bf:57:d4:07:4c:b3:5c:00:e4:e3:78:64:
75:9e:3e:50:9c:c5:34:20:9f:ca:72:bb:d7:0a:f2:
f5:15:bb:af:ca:5a:f4:a6:a5:18:85:2f:d0:a6:8b:
c9:13:40:96:46:b7:ab:29:4e:04:c4:09:12:a8:15:
16:f7:a2:38:69:19:d2:fe:1c:af:d7:c7:ef:6a:9b:
1b:fa:38:f4:61:7b:40:ff:07:22:0a:94:d5:60:9a:
b9:a4:df:f9:0e:e0:63:cf:8b:8b:68:57:76:97:aa:
e5:64:6a:ae:5b:41:08:0f:cb:ae:d2:d5:3a:b3:7b:
f1:a1:99:90:21:78:e5:8c:62:4d:37:74:a9:54:b0:
44:dc:4d:6c:b2:0c:17:c7:cd:0a:50:a3:e6:38:57:
5a:b5:c5:7f:38:50:30:59:82:75:84:6e:48:6e:93:
c8:03:62:b9:aa:91:79:82:85:3e:5d:25:e9:ad:e4:
95:5c:7b:fa:20:db:d3:df:c8:15:f8:ee:05:b4:c7:
63:99:14:4f:a5:78:17:f4:8c:3b:4d:92:45:39:6d:
db:62:72:61:f8:d8:4c:97:a5:8e:34:d2:3d:9a:92:
3e:55:fe:c3:05:87:02:49:39:16:98:85:2c:3e:2b:
b5:c4:9f:42:d0:41:30:54:db:be:97:e8:5a:c9:c0:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:38:BA:5A:B4:52:B3:79:43:9D:55:1D:D2:45:02:BD:FF:D0:92
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6c:af:47:d0:3b:27:4c:50:69:67:bc:57:34:a3:cc:5e:ae:
44:c2:72:16:91:b3:d3:45:85:63:08:92:47:92:07:e0:27:ae:
7c:88:44:93:bb:d6:51:37:14:74:b0:42:79:a5:9f:0e:30:7c:
53:5a:d6:7c:05:2c:6c:e7:5e:59:83:39:8e:4a:58:c8:55:c1:
fd:87:6e:c2:32:01:4a:e4:c4:f7:bf:8b:f1:b7:f0:f1:62:fe:
3d:12:df:3b:d3:22:20:e0:e1:68:da:54:40:be:cf:5a:d1:c1:
9c:a6:5c:eb:c4:fb:63:31:8f:d5:d1:18:97:16:cd:f4:4b:ea:
4b:8e:1c:25:e6:d0:fe:a4:67:5c:84:65:6c:c1:07:b0:39:da:
3c:d4:27:d1:71:12:ea:61:3e:bd:a9:e4:1c:2a:a5:d3:35:b9:
cb:52:34:cf:a6:91:15:24:16:ac:d9:20:ee:91:73:0d:37:30:
b2:6a:44:30:ae:97:c1:aa:de:15:ab:6c:35:1b:c2:6f:b4:0f:
62:1c:09:e0:26:26:de:7a:1e:0c:66:64:44:24:3f:66:94:e8:
d8:16:9b:72:a6:9b:3c:b6:5f:7b:57:11:64:4e:b7:c2:6a:58:
72:e3:6d:f3:18:86:d6:63:61:1a:a8:c6:26:88:36:56:8e:be:
3c:03:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:10 2025 by rpki-client