Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: Py8AUR31lH/eW4XSR4QNKQzXKqrXoPXWTwKeVdMrEd0=
Subject key identifier: B4:AA:07:D5:E6:E4:37:86:4B:BE:E8:2C:DE:E7:A0:5E:D2:23:67:91
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019874BE42CF6186DFF4ACA708698C4FCAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 11BE
Signing time: Mon 04 Aug 2025 11:01:22 +0000
Manifest this update: Mon 04 Aug 2025 11:01:22 +0000
Manifest next update: Tue 05 Aug 2025 11:01:22 +0000
Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: eYZKV9iyp9nSwvXU44WhMLIkoctr5UwrFYt55azkHI4=)
3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:42:cf:61:86:df:f4:ac:a7:08:69:8c:4f:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Aug 4 11:01:22 2025 GMT
Not After : Aug 5 11:01:22 2025 GMT
Subject: CN=b4aa07d5e6e437864bbee82cdee7a05ed2236791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:99:73:4a:8b:89:c8:0a:d0:1c:e9:51:b6:
88:5a:ce:2f:1d:28:9b:5e:69:f5:25:d4:00:6b:3c:
14:91:08:05:e6:09:dc:67:23:16:8f:1a:f9:0b:92:
44:ec:32:e0:15:8d:46:a2:6c:89:19:45:1a:63:64:
2a:76:de:43:ce:30:6e:cd:0e:f0:cb:3e:b3:33:4a:
a8:91:0a:ab:84:b3:22:7d:a9:24:c1:ac:2d:c2:84:
8a:e7:6b:b3:72:24:02:30:d8:10:f1:df:80:a4:15:
79:7d:99:4c:82:f1:5d:f8:c9:56:f3:90:18:4b:28:
99:9e:8b:02:09:f7:71:4b:3b:cc:fd:18:1a:3b:fe:
ae:87:06:eb:c1:33:0f:d9:aa:5c:90:40:3e:89:79:
a1:c0:ae:50:3a:2e:d6:c6:df:9a:46:93:e1:d5:d0:
03:47:ae:83:42:10:2b:9b:9b:70:5d:a6:ef:a1:94:
00:55:1a:4f:9d:56:fd:2d:dc:ff:4b:62:96:99:12:
40:c1:cd:14:3a:e5:c3:31:d0:ec:67:f8:f1:01:ea:
e3:e3:6b:83:0c:20:7f:6b:ee:17:e4:ca:54:dc:9a:
e7:59:c7:61:0a:00:3c:a3:51:df:b4:be:e3:11:47:
1a:90:f6:0d:09:33:4d:54:bc:74:6e:52:7f:63:6e:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:07:D5:E6:E4:37:86:4B:BE:E8:2C:DE:E7:A0:5E:D2:23:67:91
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:40:6e:63:4e:06:38:4c:a1:7b:e0:2f:e7:d0:45:71:47:
35:08:cd:81:7c:c9:54:b7:21:39:ab:8e:85:f7:0e:1d:80:2b:
a1:c7:98:e3:28:17:ac:f6:f7:2f:7f:44:a6:97:a9:71:2e:76:
d6:74:cc:6b:66:ef:b5:7b:45:83:6b:23:2b:5c:75:9f:13:ec:
54:04:87:8b:81:59:59:f6:a4:8a:ba:a6:49:e3:21:5b:16:d9:
42:5c:1e:7b:60:ce:d2:eb:fc:c5:60:79:83:64:1b:32:76:ed:
c0:62:4e:c0:dc:1b:f1:fc:a8:2a:63:c7:6a:15:ff:66:a5:02:
13:1d:49:1f:87:4a:f7:c2:9f:58:63:d1:02:7f:df:6a:d9:01:
be:e5:69:62:bd:96:d6:a2:93:f5:64:63:7d:a7:51:b3:e9:25:
5d:85:ad:de:6a:ed:ed:a0:67:ed:f1:a5:5e:9b:8f:08:f9:5e:
00:6a:83:38:90:2f:7a:92:e9:7a:d2:6f:9c:68:37:cb:d3:a5:
6b:74:a7:67:48:23:b4:c3:69:25:15:f6:55:06:c7:e8:84:71:
1c:2a:09:a2:19:b5:f5:df:5c:f1:9e:83:40:73:7f:fc:8c:84:
dc:fb:9a:77:26:5f:41:7b:7b:76:c7:a0:4b:14:d9:32:2a:53:
be:f5:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:21 2025 by rpki-client