Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier: nORQiTqZEO3YfUVeJ0ypLhkN30mLx6/g704gB+eXCoc=
Subject key identifier: C5:4E:0F:38:82:E8:59:B7:AF:42:24:19:45:F8:BB:13:AF:41:FB:A4
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 019874BDE504FE3C05E5A9D862DA2F0819FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number: 0DB0
Signing time: Mon 04 Aug 2025 11:00:58 +0000
Manifest this update: Mon 04 Aug 2025 11:00:58 +0000
Manifest next update: Tue 05 Aug 2025 11:00:58 +0000
Files and hashes: 1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: aJ7lrIoiVWyRE80gje0BBaYlREZyJDf969OmXJ4HfJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:e5:04:fe:3c:05:e5:a9:d8:62:da:2f:08:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Aug 4 11:00:58 2025 GMT
Not After : Aug 5 11:00:58 2025 GMT
Subject: CN=c54e0f3882e859b7af42241945f8bb13af41fba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:b6:c9:cb:2e:b9:96:b5:22:eb:da:d4:17:
fb:68:ed:0d:85:70:2e:b3:41:e4:a1:bb:e2:c7:cb:
47:bd:bc:43:2b:ff:3e:7f:be:c7:e7:3f:36:9e:6d:
68:52:c2:ad:65:03:6d:54:2c:5f:44:50:b3:db:89:
13:37:a6:62:a9:ed:88:0e:57:bf:df:b4:43:16:ee:
a8:48:0b:9c:c8:c5:2b:c9:bb:4b:e7:25:cf:5f:64:
29:79:37:a1:f5:5f:f2:28:36:3e:d4:be:2e:cf:94:
e0:11:50:f4:40:99:11:fd:a7:6c:78:af:f2:a8:3c:
96:6f:08:b5:e7:c4:fd:3f:53:ad:f6:cc:33:46:a5:
12:32:5c:f3:05:ed:da:88:f5:b7:07:bf:3d:e4:ea:
b3:34:50:89:80:aa:1a:25:b1:9d:38:a0:13:a8:22:
7f:c1:43:de:80:6b:cc:ce:40:18:97:d4:3e:ae:4b:
16:59:3c:27:9f:ee:5d:59:72:45:68:dc:3b:e0:47:
ba:20:e5:3e:4b:60:49:e3:8b:7f:e8:b7:f4:b9:4c:
d8:2a:52:aa:32:b2:11:98:0d:57:ed:c3:93:42:83:
e5:99:36:5a:a4:d1:8f:b0:8f:8f:f7:a7:55:94:35:
9a:64:26:99:04:e0:95:8a:33:9f:f0:3b:e9:ca:88:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:0F:38:82:E8:59:B7:AF:42:24:19:45:F8:BB:13:AF:41:FB:A4
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:32:0e:1a:81:ee:77:8e:13:ae:04:e3:33:02:75:70:75:9e:
57:23:73:56:66:cc:e2:5c:f8:db:d9:15:d8:9c:44:5c:89:a7:
83:63:c7:14:7d:8a:e3:4d:e8:5b:fe:bf:69:6b:a5:c1:88:9b:
2c:0f:23:cd:06:5b:43:67:c9:36:c2:26:51:9e:4f:b2:2d:4e:
f3:63:6a:e6:df:58:cf:5c:a5:3e:6f:a2:07:63:21:03:bd:d5:
85:1d:2a:c6:28:00:ff:5c:1a:3f:77:e1:a3:4a:ca:a7:42:ed:
ae:b9:b7:45:4f:a7:81:62:85:2f:07:92:71:6f:9f:34:f7:77:
5d:b2:78:3c:36:b5:bd:60:61:a9:7b:bd:5b:b4:f5:fe:1b:01:
a9:ee:61:4c:90:81:55:bb:a2:33:91:44:00:dc:78:62:4a:f6:
3e:86:03:89:0b:3a:b2:23:94:6e:0f:85:d6:5a:39:3a:7d:8b:
b9:85:16:c1:50:d0:09:a1:be:8a:55:ae:45:ff:8a:93:41:0f:
90:39:16:30:26:aa:29:5a:53:6e:06:15:b3:58:ff:c6:c1:93:
57:fe:d4:a8:da:15:86:d2:d9:7d:c1:e3:0c:85:8e:f5:57:be:
42:66:b0:31:47:4e:0b:16:01:af:a5:76:df:0e:33:2d:c5:db:
fa:10:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:50 2025 by rpki-client