Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: emsk+pCXeQfaqICivXGGJvA9QBAo0r2GNqR7/cJtSZ8=
Subject key identifier: 32:61:9F:93:41:D3:8C:2D:30:D0:34:83:7C:AF:03:0D:B0:57:33:45
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019874191DBC44D025969D714BA1CD09A331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 08:00:59 +0000
Manifest this update: Mon 04 Aug 2025 08:00:59 +0000
Manifest next update: Tue 05 Aug 2025 08:00:59 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: WLsS040nupdBGbacFwt9mfFVW5Oq+OiegugN3nQuPmw=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1d:bc:44:d0:25:96:9d:71:4b:a1:cd:09:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Aug 4 08:00:59 2025 GMT
Not After : Aug 5 08:00:59 2025 GMT
Subject: CN=32619f9341d38c2d30d034837caf030db0573345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:63:41:1d:40:3b:db:1b:50:cc:bb:77:f5:
0a:68:aa:f9:50:71:26:1f:20:8a:18:2a:2d:bf:41:
f8:2e:dd:38:06:aa:86:75:f9:53:86:79:af:95:71:
bc:5a:a9:c9:01:1a:f0:ac:af:6e:6e:d3:1c:df:14:
de:10:36:ea:95:c5:f3:b1:11:9b:08:0e:28:ff:a6:
52:5e:b0:25:c1:a7:84:92:45:4e:03:b4:25:33:10:
85:e5:82:74:1e:34:0e:5d:75:96:66:b6:8d:ae:a3:
5e:4d:c1:a8:51:43:1e:a4:e7:35:0b:63:7f:fb:97:
62:d5:d7:e6:b9:74:26:ab:b5:a0:81:05:2a:cf:6b:
d7:6f:e6:ab:ef:26:65:0a:6c:83:af:66:8c:02:34:
3c:32:9f:dd:46:c5:3e:91:67:54:91:f9:a8:b6:77:
64:2a:51:ca:61:57:39:63:d5:48:32:78:c7:df:6a:
73:d6:b0:c1:7b:6d:6a:f9:77:0c:7e:a7:13:f4:d1:
7b:58:6a:b0:57:7f:c0:92:8e:77:4d:f1:6e:fc:fa:
fc:fa:ee:93:98:7e:c5:c2:34:1f:ee:26:9e:79:68:
c9:8a:3a:5a:66:ce:8f:b3:58:11:4d:74:05:26:35:
1e:12:df:f7:01:1d:a2:41:fe:17:1b:ae:4e:07:b9:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:9F:93:41:D3:8C:2D:30:D0:34:83:7C:AF:03:0D:B0:57:33:45
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:41:bc:aa:b9:8d:f9:ab:83:00:51:8e:6c:3b:0d:4e:e9:
22:a0:5c:fb:24:91:d2:52:e6:4a:b0:6e:f8:c4:e4:0d:80:e1:
4c:99:82:30:34:2f:be:cf:3a:0b:64:15:f9:7c:9c:db:a0:1e:
ba:9f:a7:68:46:a2:c3:7e:63:57:85:58:9f:d6:c7:f0:62:2e:
87:45:aa:3b:6c:ff:11:99:a9:11:f0:b9:be:3b:e6:85:48:3d:
43:dc:f7:fe:df:1d:f9:d4:44:e5:38:cb:11:24:93:f9:15:3a:
61:d7:97:c9:06:0f:ce:ea:c0:ad:a6:5b:04:67:db:e6:92:e0:
c4:98:5b:37:8f:e3:89:4b:f0:dd:e2:31:b2:25:58:1b:49:5c:
11:05:09:bb:71:80:43:7d:59:c4:d1:b7:61:7a:c2:92:7c:7d:
7d:e5:8f:4f:26:d3:4c:8f:39:ee:6b:bf:65:ad:cb:dc:ae:d7:
8d:af:b2:e2:80:c3:c2:ad:1e:6f:52:a7:3f:c3:aa:58:e8:8f:
75:41:79:d3:c9:33:20:ec:d1:80:cb:95:6b:3c:b0:cd:33:0f:
b7:80:09:f3:57:85:e5:2e:72:31:df:da:da:a1:33:c1:ea:a7:
ca:10:d4:25:9f:d0:c8:ef:da:58:fc:16:74:b6:a1:8f:2c:75:
ec:4d:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:22 2025 by rpki-client