Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: l48SZffd2TNK60Z+Xmy06hpeE8cMWCA7UAIczAcWLcI=
Subject key identifier: 58:3D:50:6B:1D:11:49:A6:42:D3:27:23:5C:8D:E2:09:49:C2:BD:76
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01984A09E1D31503DE4350EDE24721A7B33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 08EC
Signing time: Sun 27 Jul 2025 04:00:18 +0000
Manifest this update: Sun 27 Jul 2025 04:00:18 +0000
Manifest next update: Mon 28 Jul 2025 04:00:18 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: zhsSNATkZwZeo/MYjW/qUpjWwJ+gBexxwfWeFwkbaYg=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e1:d3:15:03:de:43:50:ed:e2:47:21:a7:b3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jul 27 04:00:18 2025 GMT
Not After : Jul 28 04:00:18 2025 GMT
Subject: CN=583d506b1d1149a642d327235c8de20949c2bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:82:e6:86:53:ca:01:12:46:fc:37:2e:a6:
f1:63:4c:75:40:ca:4e:73:20:82:78:7b:5e:77:e1:
5b:55:1c:f2:1a:f6:be:5e:67:52:d6:dd:69:0d:f5:
72:0a:4d:7c:2a:e6:ed:eb:ea:af:c2:93:2f:99:8e:
09:4e:2b:41:87:18:fc:55:bf:d8:f2:fb:dd:f0:3a:
29:01:1d:69:0c:04:a0:09:ca:73:f6:57:46:dd:a0:
30:7b:33:29:39:18:08:aa:34:97:1e:2d:65:0f:af:
91:c0:f4:e2:8c:0e:6b:ad:5b:13:fe:af:36:03:a5:
e7:6a:36:98:5b:80:96:e5:d4:25:85:4e:1a:f1:85:
2e:bf:71:f8:69:fc:4b:08:c4:7c:6d:07:49:b4:83:
41:da:ff:db:25:a1:27:83:d6:ea:6a:f8:ad:0f:60:
2a:c8:bd:53:b7:81:05:c6:94:75:04:48:70:f8:d7:
c9:5d:33:b9:00:76:c0:15:ef:31:5f:0d:93:2d:46:
57:41:67:de:d5:d2:8a:6d:b9:b5:82:23:5f:fd:6c:
de:b4:7e:9b:f0:b1:0b:ff:37:5c:36:7b:91:d0:13:
41:c4:6f:97:c9:f3:66:72:6a:3f:b9:2d:6b:8a:f5:
e0:1b:1a:e9:bc:3b:03:78:49:43:61:a7:b7:37:67:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:50:6B:1D:11:49:A6:42:D3:27:23:5C:8D:E2:09:49:C2:BD:76
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b4:b5:26:32:3d:32:7f:1d:34:f4:0a:de:66:de:c3:a2:f8:
4d:29:5c:40:ae:db:f7:23:ad:25:8a:ba:0c:c1:3c:eb:5b:c3:
cb:aa:5d:2f:6a:98:dc:da:60:da:1c:87:68:ff:39:7d:8f:9e:
57:6a:5e:61:9d:da:fa:38:8c:38:de:f9:a2:03:7a:a3:4b:36:
aa:f7:84:7d:ae:0c:59:6a:00:9a:d4:34:68:d8:e6:db:de:c6:
d9:3a:23:d2:a6:f0:73:87:08:52:77:64:36:23:c1:1b:79:22:
e9:f7:7d:1d:9d:1d:db:a5:af:82:aa:d5:69:08:fb:1a:4e:3f:
22:45:14:b7:1e:a9:1b:6d:ba:9b:28:9a:d5:73:49:5e:39:07:
8c:28:1e:31:0d:eb:e4:46:8f:04:3a:2e:5c:98:fd:a0:d3:a9:
7b:dd:ca:80:50:74:b8:11:78:98:aa:0e:36:20:fa:df:63:cc:
f4:4d:6f:59:f8:47:16:9d:98:6a:50:ca:5e:7f:1b:45:49:aa:
17:37:97:5c:a0:c5:10:be:28:f1:30:4e:54:6a:51:af:d2:0b:
75:98:08:c5:ea:64:47:09:e9:21:d8:62:66:64:8a:a8:cc:e6:
84:05:a5:ba:f4:d9:e8:6f:e1:99:54:4a:8a:1e:4f:9d:fe:bf:
d0:8b:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:36 2025 by rpki-client