Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File: GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier: tmsd0M7n74B9mmmx9hUefwY84FB+7ZDJpuW1Zsg8xcs=
Subject key identifier: 93:E1:B4:C6:D6:AE:70:13:FB:FA:D8:C0:EE:EC:ED:11:20:B8:12:52
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 019A4D3D2B7B7196072C678BE2595F19D9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: hUn+6dcLqoENrweXGZB7mJjTE2lfIP3gRb3I9p0M3q4=)
3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2b:7b:71:96:07:2c:67:8b:e2:59:5f:19:d9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=93e1b4c6d6ae7013fbfad8c0eeeced1120b81252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:42:35:54:ee:21:db:62:88:18:54:d1:d0:
3f:1d:77:33:bb:f7:98:94:ce:00:50:e2:8c:8c:ca:
4e:26:44:79:f2:20:ce:57:1a:2a:36:bf:f8:82:af:
68:03:20:46:be:37:1b:5e:18:81:99:cb:24:b7:ce:
2a:57:36:a2:00:a8:c3:72:97:4d:02:d6:73:4a:28:
f3:05:b4:a1:7b:5f:d7:e3:8d:3e:f5:6b:e5:af:a4:
92:f8:c4:fa:4e:6b:ec:74:0d:9c:b6:1b:e7:61:83:
a7:e9:f4:cd:2e:ca:a7:b7:7b:fb:48:4b:09:b4:21:
dc:64:d3:8b:09:dd:db:c1:2c:ae:c2:5f:41:0e:bc:
0a:f9:45:4f:42:89:83:f5:4c:d5:e6:f1:30:52:ac:
48:1f:e9:7e:60:04:e9:af:7d:72:fa:ff:3a:6b:21:
ab:2a:9b:d6:81:4a:46:11:15:cd:a3:da:5e:f4:26:
09:cb:7c:9f:2b:6c:02:be:c0:09:bd:c2:0d:4d:6c:
a3:0c:be:2f:62:08:d2:cc:0d:4a:49:ea:9f:f7:0f:
d9:0f:d3:0e:8a:7c:87:80:25:b4:ea:2c:82:26:70:
08:36:c6:51:d3:5f:3e:a6:3e:a7:0f:24:40:30:de:
53:cf:1e:07:0c:c3:89:31:97:ba:70:32:d8:2a:08:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:B4:C6:D6:AE:70:13:FB:FA:D8:C0:EE:EC:ED:11:20:B8:12:52
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6b:52:ee:70:0e:1e:6a:17:63:d6:67:b5:2e:31:51:32:59:
05:22:fc:1b:94:35:05:14:3d:be:d7:bd:e8:83:b5:e3:ef:11:
cd:6b:5b:d6:46:73:2f:7f:0d:f2:b5:f6:3c:f8:4d:cf:67:8e:
7d:8c:ed:d7:23:35:27:b7:d5:6e:81:fb:11:74:6d:06:1b:02:
61:e6:d6:27:94:06:89:8c:72:ec:0d:23:6d:ba:fb:38:44:a7:
99:37:13:4e:6c:a6:b6:dc:a9:5e:1d:ac:c7:64:c6:e4:cd:00:
c4:b3:6c:72:ad:ed:99:c5:06:2e:66:4e:b8:96:6b:f3:4a:4a:
b9:56:ef:92:1b:b2:d6:80:90:1d:77:1f:f4:1b:fb:38:70:fd:
24:dc:79:b2:0a:1f:19:35:44:d9:f5:4a:ff:4b:f4:ea:e7:7d:
a1:0e:e7:43:f4:4d:99:40:40:41:43:de:c9:f9:df:6c:56:64:
e7:00:a5:c5:32:2d:e0:e8:73:13:62:ed:16:23:c0:0c:07:7b:
bc:12:4e:1f:f1:b6:4a:39:5b:17:e2:da:e9:f0:da:75:1e:b3:
84:2d:30:fb:aa:92:97:a2:f2:36:e5:f8:84:49:2c:e9:d1:e3:
98:2a:d0:90:7d:79:54:4a:05:a1:62:55:9b:64:6c:3e:ee:81:
fa:8d:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:12 2025 by rpki-client