Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: fPpD/Y67Tpa2icKnwJDuwTCd71xutfAlFLajpvnd580=
Subject key identifier: AE:71:05:1A:8D:B3:B2:41:A5:A0:80:9F:2B:04:B8:58:02:CC:E7:40
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 01988DD9371AE1C2552D8CC7B7B1C4DB195C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 08:01:19 +0000
Manifest this update: Sat 09 Aug 2025 08:01:19 +0000
Manifest next update: Sun 10 Aug 2025 08:01:19 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: of+6DOcJ6OMdNDIpJob5tf+BXn00JZEdtYKJNJeTbFc=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:37:1a:e1:c2:55:2d:8c:c7:b7:b1:c4:db:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Aug 9 08:01:19 2025 GMT
Not After : Aug 10 08:01:19 2025 GMT
Subject: CN=ae71051a8db3b241a5a0809f2b04b85802cce740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:df:1e:bd:3c:89:36:d8:ae:4f:9d:89:98:a8:
99:3e:9b:77:39:8e:b5:d8:8a:ed:74:ad:bd:21:50:
03:65:33:e3:e6:f5:82:ef:d4:d7:9e:14:df:f7:71:
9a:c6:92:d8:62:92:3a:50:29:18:2c:64:e1:e4:ea:
ab:03:de:40:93:4d:7e:17:c6:78:0f:30:77:f8:f5:
4c:9b:e0:2d:59:58:0b:e9:d2:1b:bd:f2:00:1c:75:
5d:d0:d8:75:e3:ee:d6:70:4e:4b:b8:aa:2b:a6:1c:
9e:62:11:2b:df:c0:e8:e9:c6:f7:97:aa:45:a5:07:
f5:3f:27:d1:49:b2:7e:04:a1:5a:37:b6:7a:55:97:
23:08:0d:6a:9d:77:72:00:72:17:3d:48:1a:40:8f:
c8:b8:de:17:60:42:ce:f1:2d:28:f6:b2:2d:11:9e:
06:cc:a6:2b:f8:6b:d9:c5:41:74:22:9f:e6:f4:00:
bb:76:f5:d6:97:75:ba:47:11:2d:74:aa:d5:a0:9b:
6d:7e:ff:0a:fc:c8:40:4f:a9:8b:21:9d:61:f0:11:
66:e0:32:de:3d:3f:58:e0:8a:1e:1e:11:17:ae:df:
be:c3:7e:25:50:93:c4:5e:69:de:a7:c3:02:1a:5e:
29:43:01:7d:0b:71:42:c8:1a:cb:92:35:fc:51:ff:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:05:1A:8D:B3:B2:41:A5:A0:80:9F:2B:04:B8:58:02:CC:E7:40
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fb:26:e3:40:0b:d5:08:a8:22:08:58:65:6d:f0:c5:12:4d:
e6:02:36:f1:be:23:61:4b:4e:71:d7:cb:6e:a3:14:fa:99:d1:
61:13:9c:84:8f:a2:e9:0d:2e:3a:97:9a:02:f8:e6:6a:7f:4d:
83:e0:64:3f:e4:88:ab:dc:03:e9:17:0c:79:5d:54:fc:e2:06:
d0:29:d7:52:01:7b:d3:5b:ae:b7:d5:16:25:2f:1b:d5:1c:9d:
ef:4b:22:7c:d3:64:2c:58:74:13:12:4c:06:f1:4a:d8:88:18:
6c:13:a7:31:fb:87:87:ff:31:8c:46:56:d3:94:cb:e7:0e:f6:
cc:be:07:2c:1c:b4:3f:9a:e5:af:75:37:5e:4e:73:6d:f5:5f:
32:83:05:69:e7:60:36:3a:fe:3f:44:71:09:c9:73:58:29:fd:
e4:de:02:12:92:cb:c8:c1:b1:4e:f4:ad:a3:53:38:cd:fb:66:
03:2e:e9:e2:86:61:a2:ec:33:02:8e:fa:c3:74:c5:c9:20:35:
18:68:42:e8:eb:9f:5e:89:a2:ec:20:45:36:d1:d7:1f:a0:33:
5b:2a:1f:f7:f1:4b:f0:92:74:29:73:9d:1a:db:44:05:42:2e:
97:55:d0:f8:9c:35:8c:71:9e:eb:b5:98:a2:25:f7:a7:75:75:
5b:46:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:36 2025 by rpki-client