Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: jjvBqvjgUGC3yGqbiTYCB9jGTmtJ29sk0hSY/ZNDp0M=
Subject key identifier: 23:E6:D7:59:EC:26:37:36:61:45:59:C8:B2:0E:83:FA:54:C9:2C:9E
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 019A52639E8A4B2D69FECD9F5319528521E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 06C5
Signing time: Wed 05 Nov 2025 05:00:51 +0000
Manifest this update: Wed 05 Nov 2025 05:00:51 +0000
Manifest next update: Thu 06 Nov 2025 05:00:51 +0000
Files and hashes: 1: EXfBcBM7uA8bBSr72NlYucOvfhM.roa (hash: oLqWHUAW+al/Mt/NTfMz7OcTXKmFCSYo9Jv88gAzIcg=)
2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: 83O2rW8sZbpndjN/ACjhAWrb7H0bw13h+9/hG6wcFF8=)
3: WZpaBRHbJvV3APgauuka7IhrTjY.roa (hash: N7PJ6tT8+NoaNwurVN1hCRFlu22DLnLYMpbiTBoA0mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:9e:8a:4b:2d:69:fe:cd:9f:53:19:52:85:21:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Nov 5 05:00:51 2025 GMT
Not After : Nov 6 05:00:51 2025 GMT
Subject: CN=23e6d759ec263736614559c8b20e83fa54c92c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:fe:c3:fd:4d:ce:36:2e:07:2d:84:ee:ef:
a3:96:a7:49:c6:78:0f:9e:cd:f3:03:8e:3a:c7:5e:
7a:f5:0d:5a:c1:50:9c:13:ca:bc:64:d4:af:e0:be:
a9:66:15:cd:f7:ea:fc:8c:49:6f:14:f3:3b:1f:e3:
af:e2:96:2c:dd:6a:d2:bf:bd:f7:5e:c9:9a:76:af:
b5:69:0c:b8:72:87:34:75:77:45:07:3c:02:32:06:
d1:68:7a:48:55:45:ca:c4:d1:fb:2e:e6:50:bc:f5:
a2:b1:26:0e:97:00:3e:c0:15:97:6d:67:61:a2:5d:
7c:bd:f3:d1:da:6d:e3:4a:f5:56:a2:f4:44:7a:c8:
ca:36:8f:df:7e:35:81:18:fc:9c:cc:d6:9f:69:3f:
2c:81:17:cd:d0:44:31:e5:b4:e7:c2:b9:e5:52:b3:
e0:20:d1:b1:06:9e:5d:e4:27:1d:25:e8:3a:35:78:
98:00:dc:cc:89:d4:8f:da:97:b3:26:c9:04:0f:a3:
42:57:56:b3:37:ce:8f:b8:7b:56:75:00:bb:68:52:
b3:06:0d:e2:10:93:19:38:96:b4:86:f2:d9:06:0c:
19:9c:1c:0e:22:27:97:9e:52:16:5f:fc:5b:2f:5f:
c0:2f:ce:b7:9d:5e:68:ce:36:bf:72:09:c0:de:bd:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:D7:59:EC:26:37:36:61:45:59:C8:B2:0E:83:FA:54:C9:2C:9E
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:ca:27:f7:ff:0d:d2:0d:9f:53:7e:1d:f1:8a:89:fd:34:
08:e1:12:4d:aa:92:f7:9e:aa:45:db:f7:76:a9:fe:9b:95:ac:
1f:04:2c:97:b1:e8:dd:59:8d:74:b6:b3:bc:fa:7e:a6:ec:66:
c6:ad:6a:6c:e3:8a:77:53:1b:7b:2c:e7:fe:26:fd:1f:05:df:
fa:d7:08:da:7c:c0:f6:22:22:08:75:cc:92:bc:a1:d8:fe:b7:
7c:0f:6c:d1:4e:8b:29:c7:29:fd:2a:d8:c3:37:1a:1b:f1:76:
a6:65:92:d9:ac:69:e5:f3:1b:7e:74:70:0f:22:17:57:ca:b9:
1c:71:c2:16:f2:8d:3e:42:92:e8:29:99:ca:45:61:06:94:62:
f2:f0:0f:19:82:2d:5a:f2:3c:95:cb:c2:88:9f:d2:c8:11:4e:
b1:e2:6a:9b:96:0b:9b:87:32:d3:7b:15:35:c2:d1:14:52:5a:
2c:29:31:3d:58:0a:10:7c:c3:15:36:ca:f7:b0:90:f4:f8:40:
af:1a:46:52:38:d2:88:18:b3:51:a0:32:56:50:41:2e:8a:95:
f8:e1:9d:f0:93:d2:5d:f1:03:0d:c5:11:82:d7:c3:2e:27:d3:
57:3b:0a:91:82:39:ce:8f:cc:c7:ca:e6:e6:dd:7c:ab:81:17:
df:78:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:42 2025 by rpki-client