Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File: GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier: xwYi2t/t1CocbFoUBqFjK3qlPtNWF/3DFk8rnYmE3c4=
Subject key identifier: C8:0D:C7:EB:91:96:59:DE:21:CE:1B:9D:B9:69:6D:60:77:ED:3B:11
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 01976EF4F26C7DE36DAAF2D99EB4614865E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number: 14A6
Signing time: Sat 14 Jun 2025 15:00:35 +0000
Manifest this update: Sat 14 Jun 2025 15:00:35 +0000
Manifest next update: Sun 15 Jun 2025 15:00:35 +0000
Files and hashes: 1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: D+zZZlC2TWnooQQWC3bhtJonkw4Yu7eA1bOG6uLV1VQ=)
2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f2:6c:7d:e3:6d:aa:f2:d9:9e:b4:61:48:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Jun 14 15:00:35 2025 GMT
Not After : Jun 15 15:00:35 2025 GMT
Subject: CN=c80dc7eb919659de21ce1b9db9696d6077ed3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:24:70:dd:f2:63:c8:02:29:98:cd:71:9e:
d2:c6:e7:e1:e8:3b:87:21:b6:d8:78:73:34:98:ec:
9a:c9:42:6e:e8:19:e8:d9:8d:ce:92:52:a9:ff:21:
9b:d8:e8:b5:9c:b5:91:bd:ae:e6:ce:dc:b4:cf:99:
fd:4d:94:47:2d:4a:94:f3:e8:15:ec:17:e8:ad:44:
db:65:c0:35:5d:e1:46:b1:71:2c:6d:5b:e7:07:6a:
62:c1:e0:03:ec:bd:8a:0a:cc:99:8a:00:7d:9b:24:
f8:9f:b3:27:0c:29:ac:4c:6d:63:4e:82:01:0a:f2:
d7:d5:66:3f:e5:f1:58:33:a3:12:10:1c:92:c3:df:
1b:fd:91:f9:84:8a:ff:88:94:8f:d0:3b:43:f2:7a:
79:80:ea:4c:f7:1d:3c:69:48:b6:d1:c7:55:c7:a1:
46:6b:a4:c3:10:29:f7:ee:02:59:2e:19:4e:b5:37:
f0:75:6b:19:79:15:39:d7:ff:aa:9c:25:28:35:e3:
07:20:03:0c:da:f0:2c:4f:88:27:24:bc:b7:7f:40:
3f:6c:92:0e:be:ac:15:a0:bd:c8:28:ee:f0:65:56:
e1:2a:e6:ab:62:92:b3:17:09:0c:64:29:54:ec:d8:
5f:b4:1e:38:c4:b2:ba:17:e6:a7:c2:ba:6c:fb:c1:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:C7:EB:91:96:59:DE:21:CE:1B:9D:B9:69:6D:60:77:ED:3B:11
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c0:79:c0:1b:11:ce:94:6f:58:de:3f:a2:a7:1e:39:02:89:
1d:42:4a:4c:92:f4:86:a7:6e:ce:28:49:a7:63:18:4a:b3:36:
16:04:91:20:d4:82:95:15:85:24:11:fb:f7:d5:bb:7b:ac:f9:
f4:29:49:8f:f1:1e:cb:0b:37:68:96:0a:16:11:45:7b:db:85:
de:96:6e:63:ef:57:e3:6b:f6:4b:93:26:9d:30:64:91:57:c9:
5d:82:9f:99:58:24:fe:71:32:c1:09:00:e2:0c:06:fa:6e:4c:
5e:55:65:ea:b6:48:f9:7e:1a:22:82:d5:a3:35:c1:df:34:3e:
24:ac:5b:24:d1:71:12:16:c9:a8:de:7d:bc:a4:2d:49:69:76:
62:ab:8e:e2:86:2c:eb:83:aa:e9:d6:e2:ec:7c:fa:e8:7b:cc:
ee:4d:7d:9f:45:b0:84:0f:68:18:94:7f:71:ff:de:8d:1d:15:
55:dc:f7:1f:60:4d:0c:96:6e:32:18:e2:43:78:37:0b:f0:e9:
c5:a5:a5:45:92:05:7a:85:8e:f1:2f:e1:a8:cb:24:10:42:90:
31:2c:f8:25:9a:2e:47:9a:5c:f0:14:3b:52:92:14:91:74:73:
64:cc:6b:fa:6d:d9:b8:82:2c:da:ef:14:2c:15:85:4d:5c:4e:
db:9c:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:40 2025 by rpki-client