Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: CYMar4eRXv4G+xLp3gOJCco7poBWFAgqgEG+GPXQpe8=
Subject key identifier: 06:63:C9:A4:6C:85:FD:87:F3:D5:CF:72:2C:69:78:0E:EA:3F:8C:3D
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019A53AD256157262D1F1C2253EAC99CDEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 11:00:47 +0000
Manifest this update: Wed 05 Nov 2025 11:00:47 +0000
Manifest next update: Thu 06 Nov 2025 11:00:47 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: wt7F8VZxzNvL2IJYao/OrJhxmaqrOJEIfGmyYkxGCiY=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:25:61:57:26:2d:1f:1c:22:53:ea:c9:9c:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Nov 5 11:00:47 2025 GMT
Not After : Nov 6 11:00:47 2025 GMT
Subject: CN=0663c9a46c85fd87f3d5cf722c69780eea3f8c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:9a:b6:38:3e:29:09:a2:ac:d8:7a:86:7c:
01:d9:d0:e6:a6:30:98:d6:e2:ae:1a:ae:ce:e9:d7:
20:d1:e5:e9:f9:d4:7e:8a:25:f1:21:7f:f3:78:d3:
be:e4:bf:d9:39:ee:44:dc:04:14:82:81:16:b5:c1:
74:24:ad:ec:b9:dc:cf:28:f0:32:c2:93:a9:75:06:
0d:70:be:83:93:14:cc:c7:87:ed:19:9e:96:33:d7:
f1:81:51:c5:ee:75:a2:92:19:44:81:e4:13:bc:ff:
ac:66:75:ba:7a:6d:8a:78:f4:a0:83:9a:4e:52:06:
cb:99:47:17:de:ee:52:94:5b:8e:c7:72:bd:f5:5e:
0c:ae:96:7a:7e:02:b2:7f:cd:dd:0d:eb:7b:0d:03:
dd:cd:85:13:b5:b5:0e:19:26:05:f6:72:65:df:7b:
16:86:23:3f:32:d6:ef:ce:34:09:6b:7c:43:aa:39:
b8:c4:9b:eb:cc:ed:2f:fe:d5:9c:6d:66:53:ba:9f:
f6:37:bc:47:b8:1d:c2:cf:29:7b:dd:9a:4c:d4:91:
21:03:fe:5f:e3:e3:a2:3b:9a:56:c8:e8:ca:5d:35:
6f:09:b7:fb:2f:95:0c:d4:2a:11:0d:7d:ff:a8:1c:
91:53:53:45:6a:e0:e3:11:57:93:0a:5b:6e:08:a6:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:63:C9:A4:6C:85:FD:87:F3:D5:CF:72:2C:69:78:0E:EA:3F:8C:3D
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:29:8b:60:cc:f1:67:2d:e6:0a:56:6f:da:c8:07:f6:a6:
e4:21:78:c9:93:20:b7:6c:39:7f:64:4c:c8:32:f9:f9:d0:0e:
7b:5b:f4:d5:6b:6c:ff:36:45:14:6b:b9:73:5f:21:f2:05:1a:
09:e8:31:2c:90:14:b2:ed:ff:a4:18:b1:7b:d6:5b:54:b6:8c:
ac:53:4c:e5:41:80:fd:25:f5:79:e3:89:7c:34:83:18:ca:c5:
fb:ea:a7:d0:0b:b8:90:ad:f7:b4:7c:7a:a7:8b:7c:b4:35:2a:
d3:f4:b3:54:b0:9e:bd:46:0d:11:a2:4c:1f:a9:45:87:48:fe:
8f:1c:f6:2b:25:02:26:3f:a3:17:00:3c:02:0a:e2:5b:41:e1:
be:7a:a5:0b:ef:eb:28:29:77:f5:cd:17:43:d9:18:d7:18:7a:
f9:80:b1:2c:a9:c1:f1:ad:21:2f:de:80:8b:2a:6f:59:69:00:
6e:2a:1f:4a:ea:74:16:88:5e:5f:1d:02:ad:cd:21:07:96:ab:
83:87:49:30:ab:7e:58:d2:c7:c7:34:e1:9e:91:cc:de:5a:b9:
c1:c3:0b:8c:f2:24:3b:42:f9:e1:4f:33:58:5c:50:eb:75:64:
06:f0:50:17:12:8d:10:c8:7f:e8:1a:d8:dc:8d:8d:98:af:e6:
5c:c7:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:55:46 2025 by rpki-client