Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: 6REwVvwRd+xBVt9e8aMiF37BNPSpiSXFs3fe19K7/+Q=
Subject key identifier: 1B:6C:25:54:DF:9E:9C:3F:73:16:57:9D:EA:EB:6C:4B:D4:7B:C6:44
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019A4DE2260387F80D4FE60C9BCA2FE14053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 12B3
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: gVuKz8cZC8gXiStp6NcUB9qNg6nuebIXMmaAsZi70nA=)
3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:26:03:87:f8:0d:4f:e6:0c:9b:ca:2f:e1:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=1b6c2554df9e9c3f7316579deaeb6c4bd47bc644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:09:2c:f2:c9:50:3e:b7:52:b3:98:34:04:
27:8f:ce:58:85:c8:70:6d:9f:5d:63:a9:cd:a1:a9:
dd:60:31:e1:96:2e:f7:5b:04:7f:29:af:82:ea:0f:
2e:b6:27:59:2f:0b:f5:c6:f0:10:be:46:f2:45:41:
36:7f:78:b4:53:35:5f:0a:c1:32:b7:03:dd:1d:d5:
d1:53:3b:f8:0c:46:6a:7c:ab:4c:6f:02:75:e1:d0:
d5:60:af:d9:51:83:fb:90:e2:f6:12:d1:8d:e0:c1:
a5:64:cc:05:7c:1f:15:5b:7f:e7:0d:aa:33:46:82:
af:ac:61:32:63:a5:48:49:34:25:2d:bb:5c:b0:95:
6b:34:43:35:60:b1:d4:36:c1:0c:91:e2:8c:68:cd:
d5:e2:dc:87:78:20:ac:ed:58:e5:d1:2a:6b:2f:94:
1b:34:2f:7d:b7:17:6e:45:fe:1a:d7:b9:c4:c5:13:
4f:ac:a6:93:0d:63:6c:ca:71:19:0c:e9:d1:50:62:
25:25:af:2a:b0:e6:60:95:fd:5c:6b:14:8b:ee:77:
d9:cb:73:bf:fb:c7:0c:c1:6a:57:8b:f3:ec:67:2b:
63:e5:d9:7b:2e:97:63:bf:da:d0:e8:fc:4f:d8:50:
db:f5:02:ab:ec:6a:f8:08:a7:18:f3:1d:71:09:ed:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:25:54:DF:9E:9C:3F:73:16:57:9D:EA:EB:6C:4B:D4:7B:C6:44
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b0:4a:37:aa:78:57:4b:48:b5:3c:5f:83:b7:0a:25:65:d5:
0b:be:14:21:ab:19:ed:8f:79:9b:69:1f:a5:4e:35:6d:4e:65:
8d:a4:3d:d4:31:11:4f:91:9d:c5:de:e4:d2:9e:3b:1a:cb:92:
c1:fe:51:0b:a3:04:c8:90:f4:53:5f:13:59:1a:bd:17:31:82:
00:b7:a2:5c:9b:c4:7b:a1:99:93:dc:ae:6d:f3:03:b6:a1:08:
12:9c:69:00:fa:e5:e8:25:6a:cd:bc:9b:0a:05:f3:a7:a6:a3:
e3:3c:e9:be:31:60:89:b3:af:94:be:6c:67:41:fe:73:a8:98:
f3:14:7f:22:9c:45:61:2b:45:c5:ac:d8:05:15:f5:a5:d4:81:
c1:79:61:45:72:7f:3a:da:f9:10:7b:93:6a:cf:91:8f:09:6c:
35:5b:5d:54:37:44:0f:53:c4:b0:43:fc:1f:df:49:1e:b9:23:
e6:85:14:f8:62:b5:a5:83:75:1d:82:8e:ec:3e:b0:00:59:36:
f6:ea:40:be:30:a6:41:ed:7f:64:3e:61:06:58:fb:6f:d6:3f:
cd:4d:ea:f7:29:88:fc:36:26:67:88:64:44:14:a4:79:9f:9a:
a4:80:8b:b2:21:21:56:7c:92:da:4e:ec:e2:f4:d3:6a:1e:71:
2e:d6:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:28 2025 by rpki-client