Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: VRenDFJmHuVnBLFR6Yntfk2IBcbmIS21mZNjnAHhG2A=
Subject key identifier: 7B:03:78:15:05:2F:21:E8:D6:38:BD:CF:FA:5B:C2:D0:84:A4:46:69
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 019873E252884A7D09189263980BA9B67A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0A8F
Signing time: Mon 04 Aug 2025 07:01:08 +0000
Manifest this update: Mon 04 Aug 2025 07:01:08 +0000
Manifest next update: Tue 05 Aug 2025 07:01:08 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: Ku5/v1CZzCxdgDmXE9sez3Y3hcJdDh4jfXYmXsT0HC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:52:88:4a:7d:09:18:92:63:98:0b:a9:b6:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Aug 4 07:01:08 2025 GMT
Not After : Aug 5 07:01:08 2025 GMT
Subject: CN=7b037815052f21e8d638bdcffa5bc2d084a44669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:ad:de:48:75:91:52:4b:be:2b:19:3b:94:
bb:b4:6d:d1:09:84:0f:ab:ab:fc:67:f7:e9:1d:4a:
4d:c0:74:cd:ef:41:d0:66:ab:ed:c4:2e:44:e5:2a:
a8:16:ab:78:65:f9:6d:ca:11:58:f2:9b:d6:ef:67:
76:71:b9:cc:e8:de:ed:3a:22:9d:7e:30:37:e5:ac:
3a:0e:ea:35:a4:2f:fa:05:f5:bd:c8:57:81:0d:b9:
c4:c0:91:1c:3a:66:41:61:45:6d:d9:dc:3a:8e:fc:
62:6d:32:e2:81:e4:63:41:97:8d:bf:6d:f6:f6:3a:
cf:70:75:a8:67:e4:4b:19:13:1a:89:fe:b5:ee:5a:
37:13:7e:23:3d:1d:68:e7:ba:eb:0a:47:ce:ba:bb:
bd:6e:c0:25:0a:c7:a4:3e:8b:65:f1:0a:8f:fe:35:
61:aa:7f:de:6d:c4:d5:05:e1:d6:4e:82:1e:1b:7d:
c3:99:b2:1a:df:4e:3d:0b:9c:31:43:fb:14:a0:9d:
8e:ec:2c:60:ad:63:63:d9:47:7f:53:67:24:48:ef:
4c:8a:09:01:bc:a9:da:48:53:23:96:d8:68:5d:8e:
88:aa:4c:88:c6:d2:95:23:8a:57:58:0d:6a:a0:4f:
e5:15:2b:4b:b0:36:90:4e:88:3a:4e:b5:20:13:c8:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:78:15:05:2F:21:E8:D6:38:BD:CF:FA:5B:C2:D0:84:A4:46:69
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4b:28:41:c9:d6:00:ba:13:c2:2c:a3:1d:8c:51:15:1a:42:
fc:72:41:43:f8:3b:58:e5:6b:e6:d4:8e:25:2e:83:d6:3c:51:
e7:92:b2:a1:53:94:14:51:8a:a6:91:92:99:36:e9:1d:59:6b:
c9:e2:44:22:f1:40:b6:13:6a:60:30:d8:fe:bd:95:67:20:84:
fa:d8:4a:e2:be:96:c9:82:a6:01:ea:07:c8:7b:df:60:14:f0:
e2:7e:ef:ba:7c:0c:6d:02:9c:4a:0f:19:98:4d:df:e6:46:80:
73:78:96:97:90:1d:04:74:fd:59:32:d9:1d:7c:8e:77:c3:c3:
c9:16:d6:ec:69:14:cf:c5:86:08:42:f8:c8:9f:18:92:7c:38:
77:6d:02:1a:90:c5:71:f0:a6:8e:c5:a9:cb:a7:88:95:30:ff:
12:8b:bf:d5:c0:f1:eb:f0:de:03:b7:fb:54:53:9d:53:39:d0:
8e:1c:ac:76:36:e9:3e:d0:6c:c7:32:83:ea:fb:1e:bc:ea:1d:
73:d6:d0:a8:aa:f8:8b:4f:b8:b2:92:5c:af:cd:95:39:db:b7:
33:ff:98:cf:46:51:59:51:22:ba:3c:eb:8e:8c:9a:96:81:ff:
8a:d4:e6:cd:e3:84:d1:37:ee:88:2f:d8:95:d3:fe:29:88:06:
2f:e1:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:18 2025 by rpki-client