Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: VXM6e+Bwtc4yu/pRmdtN++3YrvSLxEOOl9GSrBTuq4A=
Subject key identifier: B9:98:0E:20:0F:FC:0A:89:1D:65:85:B0:71:E9:95:CA:A1:F4:75:DA
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 019885445186525157401B51111C7BDFD5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 05D5
Signing time: Thu 07 Aug 2025 16:01:43 +0000
Manifest this update: Thu 07 Aug 2025 16:01:43 +0000
Manifest next update: Fri 08 Aug 2025 16:01:43 +0000
Files and hashes: 1: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: sEZyWAkU4DZh96g+dLg0Xgxj1cbdOQDaycK50zLIMPk=)
2: WZpaBRHbJvV3APgauuka7IhrTjY.roa (hash: N7PJ6tT8+NoaNwurVN1hCRFlu22DLnLYMpbiTBoA0mg=)
3: ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa (hash: 6pwZz0N+RWGCnPxCzoJegCbH7w0PemUKcz6iq2EQKR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:51:86:52:51:57:40:1b:51:11:1c:7b:df:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Aug 7 16:01:43 2025 GMT
Not After : Aug 8 16:01:43 2025 GMT
Subject: CN=b9980e200ffc0a891d6585b071e995caa1f475da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:0a:0a:79:0a:02:14:9f:a6:b0:14:63:d6:
c1:46:b5:00:78:59:ee:70:a9:6c:93:1a:df:d4:5f:
1c:1a:71:cd:e7:eb:0e:28:cc:6a:e4:f4:3b:b5:f5:
8b:55:d0:cb:e9:32:fc:1a:89:d3:e5:5d:57:e7:5a:
52:20:3c:fe:79:d3:1f:66:27:61:ac:1a:a4:2a:5b:
b1:60:9d:60:ed:2b:b0:07:18:8d:c7:03:20:28:0f:
4d:a2:12:f3:08:ae:30:fc:9e:1b:fa:22:8f:34:5b:
80:e8:2c:b3:89:f7:6f:90:d2:ae:10:40:2f:84:54:
cb:8a:78:31:09:5e:76:7e:53:09:31:64:7a:dc:b9:
34:27:11:d2:4f:bb:34:74:0d:50:d1:a5:a4:19:94:
6c:10:b9:2d:b3:63:06:a5:c2:26:40:ba:ee:24:dc:
96:d7:9c:03:b8:72:16:d3:9e:e6:b0:b8:bf:85:16:
76:cb:d9:3f:35:38:65:2a:2a:52:53:d2:0b:dc:f6:
61:73:58:38:fe:fe:69:f2:ff:3d:86:ef:bd:88:22:
69:12:c7:01:e5:9b:f2:b7:16:08:1f:08:2b:31:2e:
13:7a:08:b4:04:ae:96:0e:f4:e4:5b:8b:b5:e6:ab:
be:55:a6:a7:df:2c:7e:2f:99:cc:70:c9:ac:30:89:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:0E:20:0F:FC:0A:89:1D:65:85:B0:71:E9:95:CA:A1:F4:75:DA
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:34:de:6b:7a:da:1d:8c:54:8e:4b:a8:7d:c0:58:0c:aa:
0c:74:33:e0:51:82:50:88:51:96:68:24:ad:3d:e3:b6:43:c3:
02:59:2e:15:2b:5b:6f:86:08:81:1d:75:0c:eb:ea:c1:33:3e:
56:d9:cb:23:18:17:32:be:a9:0d:21:55:7f:10:77:ee:ba:6f:
5d:70:c5:e0:1a:fa:98:c5:ca:9d:ae:81:c5:67:5d:b4:be:4a:
4c:0c:66:ea:e8:9b:7e:b1:e0:02:19:2f:24:1b:7c:50:42:bb:
0f:ef:7b:6d:b0:bc:1c:ea:d7:58:91:f8:48:b1:65:db:a4:8e:
c1:4e:ac:17:02:09:ad:6a:2d:c7:26:e3:83:27:79:df:56:3b:
8b:e5:b3:7a:6e:f6:0c:c2:21:98:7c:8a:af:47:0f:40:a4:cb:
d8:95:2c:88:ea:89:6d:24:7b:2c:4c:a3:36:bd:33:de:6a:e5:
5a:c2:e7:f6:1e:c1:f1:73:f5:71:1a:42:59:9a:51:65:cf:c8:
77:a9:08:7a:e1:ac:f2:f1:63:59:a9:66:b8:34:a0:a9:18:ee:
7e:d8:a6:9c:d1:85:c1:ad:a1:d1:2b:7e:11:d4:e5:95:62:1f:
8b:30:c9:28:76:9e:7f:09:95:a2:6d:eb:a7:c0:1e:02:08:b9:
86:d7:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:34 2025 by rpki-client