Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: 4zF+n7GSSsOqo4fQv5FidUaIWHjCXJ7QHHGp0hyfhJg=
Subject key identifier: 54:34:78:10:68:E2:2B:AE:19:62:47:B4:2E:C4:50:B8:19:D1:96:FE
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 01988EECA9AE259A26255B3F05405F06111C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 12B6
Signing time: Sat 09 Aug 2025 13:02:11 +0000
Manifest this update: Sat 09 Aug 2025 13:02:11 +0000
Manifest next update: Sun 10 Aug 2025 13:02:11 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: 3ttr9Y8VfNSQUdPETUuaPodKRIbZqaKmkEXHRdf/UwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:a9:ae:25:9a:26:25:5b:3f:05:40:5f:06:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Aug 9 13:02:11 2025 GMT
Not After : Aug 10 13:02:11 2025 GMT
Subject: CN=5434781068e22bae196247b42ec450b819d196fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:f4:f3:6f:15:35:58:d4:29:3c:6e:22:b5:
20:89:fd:a0:27:e2:39:31:01:c1:5a:c6:9e:13:a9:
5e:96:5b:f3:eb:8d:75:6b:4d:4e:88:18:a9:ce:ea:
11:69:11:be:28:7c:b3:73:9a:08:a5:b0:df:44:89:
24:55:35:f2:5b:26:80:c0:39:4c:c8:81:af:78:82:
72:b2:16:23:53:4f:a1:ed:84:d6:06:a8:04:bc:8a:
f7:82:c4:b5:c9:15:ed:67:de:a6:60:d3:f1:c0:7d:
89:85:f0:5f:6f:2a:5b:53:04:08:c5:b4:94:f0:a4:
14:01:94:c2:48:06:ae:3a:9f:b1:05:18:a8:16:41:
ec:8b:cb:e2:cc:99:ff:38:44:76:20:00:83:ac:3f:
0e:fd:a7:4f:fa:78:41:76:48:bf:aa:d0:9a:5e:7e:
0d:f4:da:e5:04:f8:72:88:45:8c:d5:f5:31:c8:e7:
a7:48:6c:f3:92:c7:f7:11:86:03:ca:25:ab:ed:f5:
e2:74:62:d6:bd:5b:7b:89:91:af:ff:c9:df:a1:b1:
ac:9f:af:df:35:cc:67:99:6e:70:25:c1:d9:ad:f7:
dc:0c:37:37:be:7f:c2:3f:8a:ac:0e:58:ca:a3:25:
ec:a3:51:57:d3:2b:15:84:f4:f2:da:b3:45:b4:40:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:78:10:68:E2:2B:AE:19:62:47:B4:2E:C4:50:B8:19:D1:96:FE
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:7d:5d:8c:1c:f9:3d:e6:4d:5d:2b:69:de:a8:e6:50:ea:
7e:d3:22:4b:79:9b:26:3b:a2:62:b4:60:fb:97:b1:9c:6f:0a:
e6:ea:90:06:3d:57:e3:84:16:41:d2:fe:7c:ca:ca:f2:ff:7a:
87:f7:fc:66:2c:4f:e7:4f:72:5c:70:14:5f:86:01:8b:4a:71:
db:03:7d:65:9e:2c:50:3f:92:b7:da:63:fa:88:c8:bd:04:ba:
03:a6:8b:ce:7b:38:6a:6a:ec:13:99:73:01:5d:6e:87:96:ae:
e2:06:85:08:4c:e7:0c:a4:b7:90:92:21:f0:0b:7c:45:56:a1:
a7:bc:9d:16:55:5d:30:6b:64:bc:bc:b6:bb:d2:ba:da:e2:3b:
eb:ac:66:94:50:96:78:9c:37:07:b4:71:48:dc:6e:a8:f2:60:
79:4c:20:b4:80:64:8e:72:1d:29:59:b5:60:5e:64:83:84:6d:
7b:c7:fc:5b:95:1d:73:88:19:15:f4:86:97:d3:e8:64:6f:6e:
de:f6:0a:9a:6f:42:b7:65:62:73:85:33:04:52:4e:f1:71:93:
b6:2e:09:a9:69:99:49:55:4a:a8:8c:61:d9:62:90:17:f5:95:
69:5e:06:1a:ab:28:76:fb:24:f6:91:2f:45:ab:cc:a8:6e:ee:
e9:f9:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:22 2025 by rpki-client