Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: /9jrjdTyeHtPsV0DADB7n4F4d7pDjCivXx25AFISR6E=
Subject key identifier: 5C:08:67:09:1A:98:BA:52:FB:7B:87:62:87:D9:58:3A:7C:46:84:B1
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 01988168588304712269FA9DC85C661ED506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0E91
Signing time: Wed 06 Aug 2025 22:02:35 +0000
Manifest this update: Wed 06 Aug 2025 22:02:35 +0000
Manifest next update: Thu 07 Aug 2025 22:02:35 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: yFOhtbDI455wVk3vIqJsZKy1Ne0/8cY2KNGio95NCLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:58:83:04:71:22:69:fa:9d:c8:5c:66:1e:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Aug 6 22:02:35 2025 GMT
Not After : Aug 7 22:02:35 2025 GMT
Subject: CN=5c0867091a98ba52fb7b876287d9583a7c4684b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:7f:f1:5b:74:97:36:47:41:fa:4b:0f:20:
01:31:6b:79:2f:f4:cc:2a:e4:02:c5:f0:ba:4b:6d:
d5:b7:93:12:a2:32:30:02:bf:75:e1:94:4e:dc:c7:
e9:2a:2a:7d:86:98:91:54:62:43:75:31:4f:fc:80:
3a:dd:4a:21:b1:2e:95:d7:61:41:90:49:7f:67:a9:
cf:46:d3:c5:51:d3:d4:48:22:6a:0f:5f:b5:7d:12:
ca:3e:4c:f8:8e:c2:9a:7b:ae:b1:18:d2:d2:b6:fe:
ec:f6:52:29:00:a2:6e:a4:23:ff:12:60:a2:5b:a8:
d4:69:9d:b8:15:d2:f6:44:17:81:5b:45:4b:dc:fe:
bb:93:59:b4:1c:59:4e:99:66:93:16:c0:97:bd:44:
61:97:38:2c:35:37:7b:fb:24:92:7e:dc:80:cf:51:
00:05:2b:4d:77:2e:e3:57:64:16:9c:13:4d:60:51:
d6:51:09:61:aa:db:c7:dc:c9:97:46:33:8a:2c:a0:
0c:f2:ec:9e:fb:4e:c6:39:ee:a4:95:09:13:4d:06:
90:92:af:0c:f0:cc:9a:d4:26:62:47:e9:96:c9:cd:
ee:8c:b9:db:2e:a0:49:81:17:f8:23:5d:15:52:70:
d7:13:51:f9:4d:6d:7d:6b:48:e7:5b:23:db:03:11:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:67:09:1A:98:BA:52:FB:7B:87:62:87:D9:58:3A:7C:46:84:B1
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:77:df:e9:9a:7d:dd:aa:c1:e3:d2:27:cf:52:9a:94:a2:
15:bb:50:90:2a:46:95:70:b1:96:c6:24:de:10:1c:cf:08:bd:
d0:f3:36:ff:ce:8b:01:da:ed:a4:2f:5f:0e:e1:6b:86:61:4f:
cf:b5:5b:d2:b9:cb:f0:56:db:41:86:c2:ab:45:bf:51:4d:70:
39:13:6a:72:6f:04:3f:2c:84:6a:51:ef:f8:e4:5f:62:37:75:
a0:9e:1c:c2:92:d9:4f:c0:8f:c8:be:0e:c7:61:63:bf:35:c8:
aa:b8:ea:dc:f1:ed:9c:d2:4e:be:50:94:a8:dc:a7:29:41:06:
66:aa:f0:33:27:74:77:af:87:38:ab:2a:51:33:57:fd:23:39:
2e:44:cf:3a:00:f6:8f:d5:6f:11:40:6f:25:76:1b:44:90:bc:
01:34:f4:dc:12:4e:e7:a1:3a:fb:0b:6a:bd:d2:9b:9f:30:c2:
74:e8:ce:43:6e:27:03:02:23:96:17:9f:37:d8:bc:4e:0a:8c:
a0:2d:34:b4:d0:f5:c7:6c:42:e0:41:20:27:4c:e8:a6:0d:7e:
21:71:3b:9d:bf:d6:ae:28:af:eb:02:fa:6e:79:f4:6b:d9:c1:
b9:b7:d9:ad:ee:a7:08:2e:8c:a5:54:8d:0d:7d:91:cf:2c:ed:
d1:db:1a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaFiDBHEiafqdyFxmHtUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjY0ZDdmMTU5ZTkwMmVhNmE1YWRkN2ExMDBkYzA1ZmEx
NGE5ZWQwHhcNMjUwODA2MjIwMjM1WhcNMjUwODA3MjIwMjM1WjAzMTEwLwYDVQQD
Eyg1YzA4NjcwOTFhOThiYTUyZmI3Yjg3NjI4N2Q5NTgzYTdjNDY4NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk1/8Vt0lzZHQfpLDyABMWt5L/TM
KuQCxfC6S23Vt5MSojIwAr914ZRO3MfpKip9hpiRVGJDdTFP/IA63UohsS6V12FB
kEl/Z6nPRtPFUdPUSCJqD1+1fRLKPkz4jsKae66xGNLStv7s9lIpAKJupCP/EmCi
W6jUaZ24FdL2RBeBW0VL3P67k1m0HFlOmWaTFsCXvURhlzgsNTd7+ySSftyAz1EA
BStNdy7jV2QWnBNNYFHWUQlhqtvH3MmXRjOKLKAM8uye+07GOe6klQkTTQaQkq8M
8Mya1CZiR+mWyc3ujLnbLqBJgRf4I10VUnDXE1H5TW19a0jnWyPbAxH22wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwIZwkamLpS+3uHYofZWDp8RoSxMB8GA1UdIwQY
MBaAFIK2TX8VnpAupqWt16EA3AX6FKntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hOTk3YjYtMGJiNy00NzY2LThhY2Mt
Mjc1YWMxNDQzMzE4LzEvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hOTk3YjYtMGJiNy00NzY2LThhY2MtMjc1YWMxNDQzMzE4
LzEvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXt33+ma
fd2qwePSJ89SmpSiFbtQkCpGlXCxlsYk3hAczwi90PM2/86LAdrtpC9fDuFrhmFP
z7Vb0rnL8FbbQYbCq0W/UU1wORNqcm8EPyyEalHv+ORfYjd1oJ4cwpLZT8CPyL4O
x2FjvzXIqrjq3PHtnNJOvlCUqNynKUEGZqrwMyd0d6+HOKsqUTNX/SM5LkTPOgD2
j9VvEUBvJXYbRJC8ATT03BJO56E6+wtqvdKbnzDCdOjOQ24nAwIjlhefN9i8TgqM
oC00tND1x2xC4EEgJ0zopg1+IXE7nb/Wriiv6wL6bnn0a9nBubfZre6nCC6MpVSN
DX2Rzyzt0dsasA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:26:54 2025 by rpki-client