Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: yjC/XVVCR3yquuiTckD//NnOkZrkyZqEkISNVT82iM4=
Subject key identifier: D9:C1:4A:28:8C:14:3D:66:55:06:96:91:D1:D7:78:64:9E:DB:6D:16
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019A4DE20C005C3CE8952B551652862FC204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: 4XkyWOXAgmRf78O1DaKDQleyPKk2wZxgMmtRjxow++g=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0c:00:5c:3c:e8:95:2b:55:16:52:86:2f:c2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=d9c14a288c143d6655069691d1d778649edb6d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:b7:ea:fe:f8:29:87:20:42:dc:89:7f:12:
97:da:6d:5f:29:0e:28:89:63:1b:38:02:57:59:cf:
07:b0:9b:54:e5:bd:60:c5:a6:2e:33:06:4a:84:47:
d3:8d:7c:16:78:19:6d:19:23:07:6c:49:0f:92:06:
39:5c:08:d3:45:f5:2c:1f:27:5c:03:b9:57:34:7b:
84:e4:eb:fc:e8:1c:15:7e:dd:da:93:ed:10:e5:07:
48:81:eb:ef:1b:84:69:9b:15:90:ec:29:26:cf:89:
0c:fc:21:7a:4e:bc:d0:7e:dd:bd:63:4d:41:0c:f8:
d3:9e:fe:37:47:92:95:b0:be:9a:ff:81:14:c9:23:
f7:fe:72:4a:0c:cf:4e:0e:0d:2a:a8:23:ee:b5:48:
22:2d:70:c7:30:6d:db:e2:3a:7c:35:9d:ac:6c:d9:
37:62:57:12:b3:fa:df:27:b3:c3:f3:83:85:80:94:
9c:57:c2:63:66:ae:81:c5:dc:e2:d3:08:2e:04:06:
37:62:9a:5a:a9:12:b5:58:d4:97:a2:f8:c5:b2:cf:
10:c1:1a:88:29:f1:c9:c0:73:91:5c:2e:72:d3:b1:
9d:c2:d1:f6:2d:45:6b:60:6c:ae:a1:78:b2:25:82:
68:4a:9c:bb:29:29:db:15:69:8f:40:4f:58:3b:2a:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:4A:28:8C:14:3D:66:55:06:96:91:D1:D7:78:64:9E:DB:6D:16
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:73:ea:50:4c:71:4e:0c:77:ad:6b:8a:24:f7:d9:d5:72:3d:
49:2d:a8:23:9b:3e:53:e3:29:69:31:e7:f1:07:b1:6c:45:25:
21:10:d0:08:8d:ed:41:a0:05:0c:37:55:59:93:d2:7f:1a:3a:
42:fa:5f:c0:8d:0b:5c:30:01:b1:79:8c:a4:0f:bb:2a:41:f0:
7a:4d:27:26:dc:30:68:d2:71:5b:dd:f2:46:a1:e0:f5:d2:ab:
af:c5:6e:d8:35:1b:78:3a:7f:63:49:12:a4:39:9e:74:f3:05:
84:ca:57:94:3a:08:6c:fc:4b:0e:fc:a3:6f:c8:ab:7a:10:b0:
f9:7e:5f:6a:61:99:66:f7:10:18:2f:cc:b9:ee:08:3c:67:27:
26:c4:15:57:93:43:2d:84:7e:56:0c:15:31:71:06:09:e5:e6:
02:0f:67:74:8e:26:d4:09:ad:0f:1c:f1:ee:41:b7:54:79:74:
87:30:e0:f1:3a:b7:f2:18:2a:75:35:4d:96:45:16:5c:17:46:
12:42:0e:bb:5f:ef:13:dd:fe:a7:54:2e:d7:0a:d5:ad:67:89:
d2:08:5b:f6:11:c7:63:1e:d0:84:b9:10:7d:1b:00:29:c0:1b:
e0:25:5d:41:53:d1:98:a8:d6:41:4c:e5:7b:39:cb:e8:9e:ea:
ec:c4:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:21 2025 by rpki-client