Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: XF/W/G0/8m0I6wTeP3cYRZ9RDgjCLv8l1neUdznd/Jw=
Subject key identifier: C1:F7:55:A6:C0:D3:93:D8:BA:C9:84:98:07:48:F9:72:9F:5D:81:73
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0198383A9B8BCA273D842285365874C3F1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1567
Signing time: Wed 23 Jul 2025 17:00:21 +0000
Manifest this update: Wed 23 Jul 2025 17:00:21 +0000
Manifest next update: Thu 24 Jul 2025 17:00:21 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: gHWZ5EVzH34XSteqmgv2UxxXn6BLQ7LeWHlGF2D0VBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:9b:8b:ca:27:3d:84:22:85:36:58:74:c3:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jul 23 17:00:21 2025 GMT
Not After : Jul 24 17:00:21 2025 GMT
Subject: CN=c1f755a6c0d393d8bac984980748f9729f5d8173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:3b:f1:84:cc:16:5e:a0:75:c3:c2:51:b8:
e3:4b:47:d5:14:42:9b:ff:5c:22:bf:13:fd:2f:60:
f6:88:14:5d:46:50:c2:7f:4c:ce:3f:1f:2a:b7:5c:
9b:cf:95:72:62:b4:b0:87:ad:82:3d:a8:54:eb:27:
c2:13:92:79:eb:8b:a0:7a:b9:1a:94:aa:ca:4c:fe:
02:cd:e2:22:d9:56:b5:ed:46:e0:84:32:07:ae:cc:
62:11:89:1d:18:2d:1b:7c:f7:7c:83:75:bb:c2:b1:
10:8a:fd:c7:fc:10:65:63:19:ff:a3:a8:ef:4f:26:
1f:f6:80:7c:92:c7:d9:36:a7:8e:e4:f7:8c:72:46:
d6:e8:a0:37:fa:b8:8f:11:11:02:f7:96:9c:9f:b7:
5e:84:b4:4e:6d:f0:82:6e:c0:52:f1:9f:85:46:2a:
e9:fe:7f:64:ce:53:55:21:2b:e8:f8:b1:1a:a6:40:
93:b5:04:2a:6e:13:6e:48:6a:ed:e5:c5:a4:b2:37:
09:47:4e:22:03:06:89:f2:65:bf:ed:39:f5:b8:f6:
df:37:01:9c:e2:49:a6:74:f6:6e:40:24:0b:5c:2b:
5a:31:3b:5d:7a:5d:bb:f9:be:9d:75:9b:31:31:52:
c6:33:c9:d1:30:0a:a8:f1:3a:1a:37:0a:3e:5c:9f:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:55:A6:C0:D3:93:D8:BA:C9:84:98:07:48:F9:72:9F:5D:81:73
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:51:3e:6f:4e:5f:8c:3f:30:5a:81:b5:61:f9:e0:03:7f:0d:
76:18:02:65:6d:c1:74:52:4f:82:30:29:04:8d:c2:c6:32:3e:
34:f0:c2:02:a1:36:33:c6:f6:91:7e:01:27:c5:c1:a4:5d:bb:
2a:3f:1e:77:6d:81:75:38:29:67:a5:5f:79:f2:ad:7a:6f:ce:
9b:ab:89:09:7c:46:3b:8d:69:6e:9b:d6:e8:a1:e7:ce:00:18:
dd:4d:2e:83:36:4a:b4:25:f4:72:76:f8:12:e1:c3:7b:0c:33:
dd:bd:45:fa:94:7c:d3:7a:05:fc:c6:af:b5:16:7a:7e:fb:87:
ab:21:5c:73:9c:eb:c3:78:2e:9b:39:e2:5f:51:1a:db:00:d6:
26:6e:cf:55:ce:57:fa:bc:20:2e:16:94:ee:b1:90:f5:77:bf:
d8:40:65:ec:2f:53:c1:2e:22:51:23:8e:e3:5f:4a:78:52:2d:
0e:fe:08:8b:8d:f4:7a:ad:3c:3f:70:6f:f5:e9:f6:e5:f1:0b:
6d:f2:ef:b1:aa:98:6c:7c:53:09:7a:48:ed:c6:d7:ab:fe:6a:
40:26:9c:6c:b8:87:ac:26:1c:33:04:ce:35:79:a8:ba:d4:b0:
5b:55:35:b1:eb:ee:c1:c2:75:ee:a4:28:ba:8f:64:8e:c7:dd:
44:79:66:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4OpuLyic9hCKFNlh0w/HtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy
NDZiNGIwHhcNMjUwNzIzMTcwMDIxWhcNMjUwNzI0MTcwMDIxWjAzMTEwLwYDVQQD
EyhjMWY3NTVhNmMwZDM5M2Q4YmFjOTg0OTgwNzQ4Zjk3MjlmNWQ4MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuI78YTMFl6gdcPCUbjjS0fVFEKb
/1wivxP9L2D2iBRdRlDCf0zOPx8qt1ybz5VyYrSwh62CPahU6yfCE5J564ugerka
lKrKTP4CzeIi2Va17UbghDIHrsxiEYkdGC0bfPd8g3W7wrEQiv3H/BBlYxn/o6jv
TyYf9oB8ksfZNqeO5PeMckbW6KA3+riPEREC95acn7dehLRObfCCbsBS8Z+FRirp
/n9kzlNVISvo+LEapkCTtQQqbhNuSGrt5cWksjcJR04iAwaJ8mW/7Tn1uPbfNwGc
4kmmdPZuQCQLXCtaMTtdel27+b6ddZsxMVLGM8nRMAqo8ToaNwo+XJ+EfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH3VabA05PYusmEmAdI+XKfXYFzMB8GA1UdIwQY
MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt
MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5
LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1E+b05f
jD8wWoG1YfngA38NdhgCZW3BdFJPgjApBI3CxjI+NPDCAqE2M8b2kX4BJ8XBpF27
Kj8ed22BdTgpZ6VfefKtem/Om6uJCXxGO41pbpvW6KHnzgAY3U0ugzZKtCX0cnb4
EuHDewwz3b1F+pR803oF/MavtRZ6fvuHqyFcc5zrw3gumzniX1Ea2wDWJm7PVc5X
+rwgLhaU7rGQ9Xe/2EBl7C9TwS4iUSOO419KeFItDv4Ii430eq08P3Bv9en25fEL
bfLvsaqYbHxTCXpI7cbXq/5qQCacbLiHrCYcMwTONXmoutSwW1U1sevuwcJ17qQo
uo9kjsfdRHlm/g==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:38:35 2025 by rpki-client