Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: HHYJPeFhgc3jPCU+vf5auuOA/uGMvDU5aAcAG2p/3iE=
Subject key identifier: D3:A6:69:1D:8B:44:82:99:0D:7C:89:1D:B8:26:51:B7:E1:AB:2B:5E
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 01987CE568DE7C7937061B89B8AF49596969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 134B
Signing time: Wed 06 Aug 2025 01:01:05 +0000
Manifest this update: Wed 06 Aug 2025 01:01:05 +0000
Manifest next update: Thu 07 Aug 2025 01:01:05 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: RNtN5chP1tkSj3WfVyKGC9bzNlqf9DIwOgY3oskBDwk=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:68:de:7c:79:37:06:1b:89:b8:af:49:59:69:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Aug 6 01:01:05 2025 GMT
Not After : Aug 7 01:01:05 2025 GMT
Subject: CN=d3a6691d8b4482990d7c891db82651b7e1ab2b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:16:26:6b:d1:bd:60:3a:17:e1:c0:f5:fb:
0d:de:28:ec:fd:39:2d:3a:bf:73:66:7d:7c:d0:7f:
2f:af:fa:9b:ff:db:e6:7e:f6:a3:60:b1:ba:2f:d2:
6d:4f:d7:f8:a0:ed:a3:7d:f0:8c:26:2c:94:a0:58:
e2:f7:af:2f:b4:24:89:70:a5:57:07:2b:78:ce:32:
dc:64:c7:37:00:9b:52:b0:2f:04:20:a9:b8:23:d5:
78:a9:2c:50:b9:7c:58:7c:2f:f7:e3:4a:04:80:a9:
0f:52:bd:9f:98:ad:6f:33:7e:68:c2:58:df:22:ef:
97:11:02:aa:bd:f9:01:95:52:32:dd:14:a7:9f:71:
bf:34:1c:20:f5:2d:25:59:6c:3b:60:7e:23:06:eb:
d8:64:ff:ea:ed:99:e6:34:b2:b7:36:91:99:1a:6d:
3f:ef:33:21:68:19:f4:ce:69:cc:c6:9b:dd:07:3d:
f9:f4:89:03:9c:63:aa:ca:dd:6f:8f:14:06:6f:79:
88:47:8c:82:dc:2a:84:f1:a5:94:ff:b2:06:bf:eb:
7a:2c:72:9f:d0:22:94:2c:3b:26:98:a3:25:73:da:
e6:6a:8a:77:c8:62:16:a3:54:86:70:65:22:a4:64:
ca:d2:77:c0:61:e6:e5:27:ea:6d:09:42:73:4a:24:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:69:1D:8B:44:82:99:0D:7C:89:1D:B8:26:51:B7:E1:AB:2B:5E
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:4a:9e:57:62:98:6d:be:4a:3e:8e:90:3a:97:6b:7b:0a:
71:fd:f8:2a:0d:83:8b:d6:4e:f3:8c:66:d8:ba:98:f6:88:60:
8b:4e:f6:1f:dc:2a:3e:51:6a:0c:18:62:a3:eb:58:b6:79:5d:
90:b7:df:d3:03:57:27:c4:ba:aa:0d:47:bf:72:c1:a5:17:4b:
d9:19:33:05:27:3c:6d:4c:d2:15:fc:62:4b:97:a6:05:0e:00:
10:e0:05:7e:cf:48:0a:09:c7:76:82:be:43:fc:bd:f3:48:16:
98:10:9c:c6:1d:9a:6c:3f:46:48:7a:d5:fa:19:03:07:ae:16:
3f:45:25:84:6d:e9:74:af:52:79:4d:39:01:82:64:ee:ff:06:
ec:ac:d9:33:46:e8:a0:dd:c8:56:75:97:68:57:59:9b:ca:fe:
db:ee:c0:de:c1:e4:a5:c4:04:fe:9f:72:bb:a3:80:8b:44:01:
5a:24:7c:ee:dd:b1:40:27:f8:69:39:74:31:88:9a:6f:58:40:
2b:ad:77:00:ec:35:ef:3d:10:02:94:78:3a:7f:ee:90:de:99:
e7:2e:89:5a:b4:45:9e:c7:90:1e:ec:f8:20:ab:5d:d9:ca:03:
e6:f1:f3:62:92:1f:c2:b9:86:7a:66:d1:a9:26:a0:ab:3a:3d:
18:1e:22:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85WjefHk3BhuJuK9JWWlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwODA2MDEwMTA1WhcNMjUwODA3MDEwMTA1WjAzMTEwLwYDVQQD
EyhkM2E2NjkxZDhiNDQ4Mjk5MGQ3Yzg5MWRiODI2NTFiN2UxYWIyYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIkWJmvRvWA6F+HA9fsN3ijs/Tkt
Or9zZn180H8vr/qb/9vmfvajYLG6L9JtT9f4oO2jffCMJiyUoFji968vtCSJcKVX
Byt4zjLcZMc3AJtSsC8EIKm4I9V4qSxQuXxYfC/340oEgKkPUr2fmK1vM35owljf
Iu+XEQKqvfkBlVIy3RSnn3G/NBwg9S0lWWw7YH4jBuvYZP/q7ZnmNLK3NpGZGm0/
7zMhaBn0zmnMxpvdBz359IkDnGOqyt1vjxQGb3mIR4yC3CqE8aWU/7IGv+t6LHKf
0CKULDsmmKMlc9rmaop3yGIWo1SGcGUipGTK0nfAYeblJ+ptCUJzSiTRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOmaR2LRIKZDXyJHbgmUbfhqyteMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaZKnldi
mG2+Sj6OkDqXa3sKcf34Kg2Di9ZO84xm2LqY9ohgi072H9wqPlFqDBhio+tYtnld
kLff0wNXJ8S6qg1Hv3LBpRdL2RkzBSc8bUzSFfxiS5emBQ4AEOAFfs9ICgnHdoK+
Q/y980gWmBCcxh2abD9GSHrV+hkDB64WP0UlhG3pdK9SeU05AYJk7v8G7KzZM0bo
oN3IVnWXaFdZm8r+2+7A3sHkpcQE/p9yu6OAi0QBWiR87t2xQCf4aTl0MYiab1hA
K613AOw17z0QApR4On/ukN6Z5y6JWrRFnseQHuz4IKtd2coD5vHzYpIfwrmGembR
qSagqzo9GB4iIA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:37 2025 by rpki-client