Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: 2wi3WJZ+UYZbeUaQ6NlARPcifv2dEoKiHSJOAJT73OI=
Subject key identifier: 11:1F:66:4E:2C:57:5E:04:E4:BB:9B:8D:1A:E0:A0:3F:BC:6C:D2:16
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 01984475FEFB175CA7CA6AB574895F127886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 11A5
Signing time: Sat 26 Jul 2025 02:00:40 +0000
Manifest this update: Sat 26 Jul 2025 02:00:40 +0000
Manifest next update: Sun 27 Jul 2025 02:00:40 +0000
Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: 7pW1VUjP0B0SdAEOnF/o+wtmhdIg6QwcmWzOj39IlJU=)
3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:fe:fb:17:5c:a7:ca:6a:b5:74:89:5f:12:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Jul 26 02:00:40 2025 GMT
Not After : Jul 27 02:00:40 2025 GMT
Subject: CN=111f664e2c575e04e4bb9b8d1ae0a03fbc6cd216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:f2:4a:a6:a0:57:de:45:69:37:b5:a0:af:
65:24:63:ea:a7:66:f2:29:b8:52:14:29:57:fa:ea:
8c:5e:31:cc:f6:5b:1f:40:3d:e8:ff:2d:cd:27:30:
4c:d5:ca:56:4d:ad:82:1f:05:a8:dc:5a:8d:1a:e2:
e5:b7:da:9f:c7:02:e8:91:68:df:8a:30:86:32:c4:
c0:4a:54:f1:c5:90:06:59:43:ec:ed:af:59:93:ef:
de:69:37:d1:62:2b:c7:ba:17:84:b1:d8:a8:ff:0a:
02:98:d3:d7:84:40:58:12:13:42:78:a6:07:4a:a9:
7a:d3:3a:ce:45:7b:e0:e2:6d:64:fb:65:5e:8e:be:
74:65:7d:77:05:57:d6:77:c1:84:ab:22:6b:e9:a5:
66:5a:c3:12:3c:c6:ed:a5:1a:52:2a:89:25:0f:2c:
c7:5d:b1:25:be:37:89:b3:a5:61:3a:cf:15:1c:a3:
a0:ec:dd:97:ae:8e:d6:45:d6:06:5a:c5:7b:a3:dc:
75:9d:2c:ff:22:b3:62:a6:34:87:89:e8:ba:23:b6:
98:85:2d:80:a1:aa:e1:50:fd:99:60:18:9b:12:41:
64:61:ae:27:9e:d9:4b:59:9a:a3:af:ca:e9:e3:ce:
ed:46:2c:56:44:cb:f2:ce:05:5f:c4:14:c2:23:53:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:66:4E:2C:57:5E:04:E4:BB:9B:8D:1A:E0:A0:3F:BC:6C:D2:16
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cf:42:99:b4:aa:04:57:e9:c5:1b:3e:80:9f:e0:26:c8:a0:
1c:7a:9b:6b:ec:c9:23:35:53:5a:0a:e3:6b:a8:c4:e1:d6:c2:
c3:c3:a8:57:a6:b5:29:0d:d8:b9:5d:02:b7:7f:d9:fb:ad:d3:
b1:b0:4c:dc:7f:95:84:bb:be:e3:f3:03:cc:4d:cc:ba:fe:9a:
e0:05:f2:20:d4:04:51:1f:27:59:54:1d:54:92:a6:4a:70:0f:
7e:91:de:42:09:54:af:dd:a6:64:1a:d2:49:06:2d:8e:9b:d9:
83:ef:cf:87:44:16:bb:92:59:d4:80:46:01:1a:ed:ef:7a:2e:
87:e4:a4:58:81:e2:b2:59:3d:d1:26:4c:91:20:38:e5:ee:b5:
99:d4:ae:1c:29:10:31:a6:67:11:e6:14:01:3c:27:1a:d5:4b:
14:4d:7e:3f:63:93:a4:26:3e:cb:e3:fe:07:e6:52:19:9c:72:
0c:1e:ec:11:fc:27:21:e8:7d:e3:d8:6d:a2:50:aa:d6:8d:9d:
0e:68:5d:db:b3:a9:fe:69:bb:a0:41:9c:46:e3:c9:43:ae:84:
63:f6:0a:a8:f3:c1:ce:8f:0a:05:0d:66:ff:8e:87:9b:96:10:
61:cf:84:47:52:a3:0f:07:7c:c2:c8:54:51:f3:71:24:63:37:
58:07:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:29:47 2025 by rpki-client