Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: ZA4P479Sp4vJmEwzzI2IplV41QF01+ZjcYNdU5DnT5g=
Subject key identifier: DB:67:20:5E:31:79:C2:D8:2C:C9:0A:96:77:52:6F:9F:E1:EB:5B:0D
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 0197715158D3EF773606C0405A696E979EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1598
Signing time: Sun 15 Jun 2025 02:00:45 +0000
Manifest this update: Sun 15 Jun 2025 02:00:45 +0000
Manifest next update: Mon 16 Jun 2025 02:00:45 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: tjzV+1YrCcj7OKR8RC/YRWsY8yryX3uDAUNjWYq2Dik=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:58:d3:ef:77:36:06:c0:40:5a:69:6e:97:9e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jun 15 02:00:45 2025 GMT
Not After : Jun 16 02:00:45 2025 GMT
Subject: CN=db67205e3179c2d82cc90a9677526f9fe1eb5b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:1b:dc:8e:14:c6:e9:20:0b:e6:90:72:8d:
44:ee:11:a0:99:e9:4e:ac:eb:f4:5b:d7:4e:73:6f:
e2:a6:1d:9e:a7:0b:8a:f1:d2:2d:58:38:e4:58:e9:
46:c5:ee:fb:0b:c2:b3:c2:59:02:9c:c9:ab:69:d1:
ea:b1:6e:4f:25:7c:71:bd:93:db:5b:49:f9:0b:b0:
da:e6:0a:d7:05:d3:1a:40:1b:e5:ef:6f:aa:38:a9:
05:68:e5:d6:49:01:ac:5a:0b:cd:c1:1f:e9:40:00:
25:91:61:94:32:c2:5e:54:83:a9:79:6d:99:ea:0e:
2a:77:ce:7a:49:0c:b8:94:28:d6:d8:a2:37:55:6a:
0c:95:4e:9f:6a:17:35:96:a3:fc:72:c3:86:6c:54:
f0:db:cb:4e:4f:e0:0a:f4:86:c0:39:ab:06:20:46:
db:7f:8e:4a:d0:ab:d0:ed:dc:a8:cb:c2:57:9d:61:
7b:e3:2d:08:06:69:1f:32:5e:31:77:b6:16:08:21:
7e:f6:f1:71:9d:f3:40:b8:a9:81:b1:7b:1c:c9:e3:
97:46:65:33:a8:f5:32:4d:1e:57:d0:cb:7e:b3:ec:
12:c3:b0:25:66:e1:e3:61:ae:99:c9:66:7f:e2:05:
a9:c7:0b:cb:83:eb:01:e8:3f:80:ad:d7:af:f4:5f:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:67:20:5E:31:79:C2:D8:2C:C9:0A:96:77:52:6F:9F:E1:EB:5B:0D
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:98:5d:20:7f:21:7e:4f:7f:59:57:b5:d8:f7:84:7a:80:13:
c3:88:b4:11:f9:d7:e5:b0:b7:03:c9:8d:ed:d4:f4:3d:b5:ab:
75:2e:ef:38:72:dd:9d:b9:51:35:a1:af:9f:4a:b9:2c:5c:e8:
6e:18:70:fa:c6:15:26:17:cf:8a:2e:2d:7f:34:af:b9:8b:fe:
a0:87:a0:76:5b:54:2a:d8:46:43:b7:8f:eb:d9:e8:69:e0:fa:
e6:64:a2:17:c8:41:c7:f4:e2:8c:59:bd:da:b3:19:b4:64:4b:
a9:ed:48:95:39:05:a0:d0:62:6e:5a:f3:af:31:65:46:81:54:
38:c7:53:90:2e:0e:eb:9e:d1:a8:fd:80:c0:18:c1:6b:25:af:
4c:26:92:91:e0:89:51:5c:06:25:75:f1:8c:c9:ef:27:78:11:
3e:93:e8:52:ed:42:ef:7c:0e:d2:af:e4:31:bb:51:cb:c6:c4:
0a:d3:66:d1:a7:53:68:8a:ed:ed:2f:40:59:e0:d0:06:ba:3b:
13:e6:9a:b0:4d:11:33:50:8c:2c:75:72:9e:05:28:24:85:05:
cd:9b:b4:1e:32:17:29:d2:31:44:fe:df:8a:5e:bc:99:ca:89:
d7:7f:86:40:44:d6:e1:c4:b0:66:f9:0f:d6:0d:7b:c8:ce:ee:
75:a3:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:17 2025 by rpki-client