Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: qIkOcCW43OsQSA6Tw+6T5ICC0SLn0ifZGco7ajGyN58=
Subject key identifier: D4:53:39:BC:55:2E:8D:EF:90:E1:1E:31:98:4F:F7:45:E9:4C:F1:A2
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 019A4DE1E37CA09F6070D227D224F57164EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: 9IOjbbb55vp42+ZaPlz7rx9bpsuh6M68Ej7q9Hf0xY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e3:7c:a0:9f:60:70:d2:27:d2:24:f5:71:64:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=d45339bc552e8def90e11e31984ff745e94cf1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:fe:bc:c4:72:20:18:1c:83:fa:bd:1c:b6:
85:ba:09:eb:e8:fa:fa:fa:92:2d:b8:5b:65:83:de:
5e:c9:0c:42:d6:d1:8d:34:19:12:b3:66:eb:6b:e1:
0d:d9:de:65:03:0e:40:b2:27:5b:13:6b:85:03:83:
8f:d6:93:12:c7:c3:67:63:b7:1c:cc:99:48:88:bf:
db:ea:5a:2d:f6:f0:0d:53:e2:6a:65:47:62:d3:1e:
0a:6f:5d:aa:30:3e:e2:2b:50:52:7b:43:1c:c2:64:
63:ae:19:0c:67:91:77:42:62:ea:e9:e6:cb:2d:33:
97:8a:97:0f:41:61:00:7f:69:99:49:49:e1:50:ff:
86:ab:d0:e2:b3:36:ce:8e:48:b1:2d:31:c1:f0:3e:
d8:19:d9:5e:e7:1c:b0:95:ea:06:2b:ad:4b:6a:32:
d5:9b:57:db:24:f7:d7:6f:aa:c1:b4:9e:ec:1d:12:
9b:8c:06:1f:1d:ba:7d:36:f1:25:aa:ac:a5:2d:0b:
ff:bb:3a:a3:bb:42:c2:98:f8:38:2d:71:ec:1c:fc:
d0:03:3a:e0:44:6a:4a:c2:7f:cb:0f:84:57:9e:16:
9e:70:4e:57:5b:11:a2:1d:72:a9:89:55:48:3e:4f:
1a:8d:13:65:80:11:5d:ff:5e:56:96:57:a3:12:de:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:39:BC:55:2E:8D:EF:90:E1:1E:31:98:4F:F7:45:E9:4C:F1:A2
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a3:19:d4:e4:3d:22:c0:19:bb:97:49:df:95:14:5f:d3:1c:
b6:a7:28:8e:61:7f:eb:c1:5d:e5:d3:3a:27:6d:2e:33:c7:51:
96:7a:8e:63:5b:dc:ec:9c:68:cc:f7:c5:02:b5:1d:95:78:84:
c7:5d:f3:08:c4:a9:90:01:46:b7:7d:64:a6:ba:80:16:a3:9c:
1e:ca:5c:1f:40:41:e6:8a:8d:8c:0c:88:4f:4a:4f:c8:8d:e9:
fd:24:1a:1b:0d:81:04:d7:b6:38:8a:3c:9f:25:af:2d:89:15:
36:b9:ff:21:45:5a:3f:b6:a0:84:58:20:aa:07:a0:4a:a7:af:
04:2c:01:3d:37:d1:0e:50:8c:9d:5f:d9:01:c3:1f:16:1a:24:
28:7c:c7:92:69:80:ab:97:be:ac:e3:48:93:4b:2a:03:5c:94:
7d:84:ba:1e:45:64:f3:c5:e7:17:8b:89:7b:e9:11:05:52:33:
81:b0:47:4e:f4:b8:83:7f:3f:45:8c:d8:20:2e:f9:e9:fb:e5:
31:e1:fd:1e:8c:e7:e8:c5:fa:82:51:72:87:01:c8:59:cc:d9:
06:df:17:ad:f2:db:56:29:f6:d4:b4:f3:39:b3:b6:ef:a9:af:
3a:80:98:f4:6a:56:bf:b2:7d:8c:11:ce:a8:71:73:f8:de:f6:
52:90:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:06 2025 by rpki-client