Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File: GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier: BL3QC+c/UWp8g06Hiw389qFKcr+34r8mix5BzUsJkbo=
Subject key identifier: 90:1B:1A:50:9A:A3:4A:E6:3D:89:54:D7:B2:51:F2:19:BE:54:BF:35
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial: 0197B632C7E65F7C96A1CED03BE76752AE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number: 1172
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: +uEE6RTrzrqmA7ptf35aCiBsybRMO1mtbjLwHikQf4o=)
2: PfFy3e8LNIXwxdL8OuYhM9z12Ws.roa (hash: 8+uM2+g15li/FppVigQneM82V/zGTOIgt52B/js9MAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c7:e6:5f:7c:96:a1:ce:d0:3b:e7:67:52:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=901b1a509aa34ae63d8954d7b251f219be54bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:8e:b5:dc:2e:dc:55:87:69:f9:db:9c:5d:
4c:1d:8c:2e:fa:bc:b5:7e:9f:d7:af:22:e1:d0:a9:
1c:55:9f:8b:8f:76:f4:ed:5a:b1:eb:de:4e:6d:8d:
20:f2:92:44:ee:f8:4c:7c:6e:44:c8:59:53:a2:af:
df:ce:74:ee:d3:78:f4:08:f9:84:ec:74:82:46:ea:
bb:16:38:42:06:2e:ca:00:11:d8:c1:ea:03:3a:bb:
0b:e0:b5:18:59:b8:23:28:3a:3e:e6:06:cf:11:91:
69:a1:0a:6c:13:ea:b7:9c:bd:65:fa:cb:4b:a4:d0:
9f:b6:d5:b8:30:7d:d1:a2:59:74:43:9b:c8:58:39:
b2:dd:cc:ee:46:d6:4a:84:57:50:36:ed:6b:73:52:
b9:51:cc:45:93:16:f6:92:c7:30:43:f9:1a:ca:13:
09:0c:d9:f8:b5:86:61:8c:9f:88:92:e6:26:7b:83:
6e:b6:3a:74:98:8e:f2:f7:a7:88:26:0b:cc:a0:3d:
c8:a6:22:8e:cd:0c:c9:ab:f9:21:f5:4f:7c:44:38:
28:24:6f:af:ce:98:65:50:f2:88:49:f3:59:bd:a8:
a1:ed:67:4c:07:94:35:3e:b3:9a:49:3b:ae:e7:bd:
1a:a8:53:a9:f8:88:71:06:5c:78:24:fc:73:db:36:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:1A:50:9A:A3:4A:E6:3D:89:54:D7:B2:51:F2:19:BE:54:BF:35
X509v3 Authority Key Identifier:
keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:b6:6a:cf:f7:9d:f3:00:a2:ef:8c:10:d6:f5:fe:07:66:
10:85:76:1d:05:98:92:97:d0:0f:bd:cf:ee:f9:ac:4d:65:51:
c6:59:8b:1e:3e:34:7f:24:a7:6e:05:c7:80:78:82:c1:20:a5:
79:6d:0e:ac:b1:8c:7e:0b:70:71:26:80:b1:78:c1:9e:04:2b:
e1:f8:8c:81:9f:5f:db:5c:98:d7:87:a9:16:52:7f:df:34:f7:
b0:f9:09:71:7d:2f:33:dc:61:d9:b0:57:63:ae:cb:b3:a0:ce:
86:f6:b4:10:09:92:03:04:3e:f4:42:74:f5:3e:28:8c:75:2f:
f9:61:03:e8:fa:53:38:7e:17:00:5f:f5:cf:67:cb:13:28:47:
1c:90:24:a2:4e:cc:23:50:57:fb:77:ae:b6:66:aa:d7:4e:30:
5b:3b:05:42:ad:55:1b:83:b2:01:f5:4c:08:01:14:6b:cb:9b:
dc:1e:3f:cb:64:fe:b1:d4:35:e0:7c:ed:c3:a7:7f:4c:05:11:
46:20:df:07:51:ae:3d:d2:6b:cc:4f:47:c0:40:b1:14:a7:f5:
cf:a8:b1:40:00:00:4b:a3:d0:0a:1c:42:1e:2e:b8:83:d0:77:
a9:ec:59:be:c3:43:c8:eb:96:51:22:26:a9:b0:05:04:4f:af:
1d:0e:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:23 2025 by rpki-client