Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: 5aIS6ByeK+GUNl7YWBXs1Bwgtwjmkbayx+E/AiMKu+M=
Subject key identifier: 45:7F:C2:00:9D:9F:F5:8A:7A:1B:E8:B4:57:21:12:F8:78:97:5E:F8
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 0198394D5BA6F3958C93CD4EA82AB8907765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1328
Signing time: Wed 23 Jul 2025 22:00:27 +0000
Manifest this update: Wed 23 Jul 2025 22:00:27 +0000
Manifest next update: Thu 24 Jul 2025 22:00:27 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: ymjxIk2BHI4XTYV3kt00Tdj1RYRg1FXDprt4LUN5LE0=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:5b:a6:f3:95:8c:93:cd:4e:a8:2a:b8:90:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jul 23 22:00:27 2025 GMT
Not After : Jul 24 22:00:27 2025 GMT
Subject: CN=457fc2009d9ff58a7a1be8b4572112f878975ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:3c:4b:4f:2d:df:a5:eb:11:4e:5d:aa:87:
ef:95:8a:9d:1d:85:8b:19:c7:3a:75:d2:49:81:54:
93:af:0b:82:64:c4:d6:81:3e:53:a1:88:06:13:34:
5a:7d:10:8e:dd:8e:ad:c9:4d:54:79:3f:5a:0e:86:
da:f2:b7:45:c9:11:2f:00:3c:83:2b:60:87:a0:a2:
1c:b7:23:76:f2:ef:47:08:91:7d:76:26:f8:20:87:
c1:14:a0:34:c5:0e:45:ea:f2:67:22:a1:1b:7c:48:
a9:40:cc:5a:71:9d:07:49:88:7a:2b:c3:2c:84:87:
8d:4a:8c:4d:c1:af:10:da:5a:19:25:a9:b2:f6:7a:
16:d7:27:eb:9a:d6:d7:2e:6a:67:98:7d:05:a1:cf:
ac:b9:b3:9e:3c:44:81:c6:f8:da:d2:16:41:7b:b5:
6d:30:7d:8d:93:91:5e:46:7e:1c:88:1b:f5:93:1a:
4b:80:f9:a0:27:32:c3:8b:d4:49:71:b9:3f:b1:78:
8f:98:28:0f:01:bf:6b:02:d1:4b:4c:de:dd:43:46:
e7:9c:b7:72:8e:bb:68:8d:29:10:80:5d:fe:72:cf:
3e:fa:1b:c9:76:f8:27:3b:3a:8a:52:e4:dc:06:ed:
ab:4d:3a:e2:53:f8:3b:1b:10:23:5d:d3:7f:ac:bd:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:C2:00:9D:9F:F5:8A:7A:1B:E8:B4:57:21:12:F8:78:97:5E:F8
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7a:ca:f6:64:91:f2:ad:2d:c1:49:e5:4e:38:ae:4a:92:1c:
2f:be:5f:75:be:92:d4:71:cf:0d:b4:8e:42:ea:68:41:90:b5:
df:1e:63:cf:db:fa:2f:02:f3:97:8c:dc:5b:34:af:05:6c:08:
b1:db:86:0f:c3:3c:b6:c6:9f:8d:c6:cb:ec:2c:c3:a6:f0:8b:
51:31:97:f3:ec:50:57:a5:46:f9:4d:0d:49:c9:f4:56:1d:f8:
ce:c7:a6:09:55:8f:c0:1e:ba:8d:de:c3:8e:34:e2:7f:ac:aa:
8e:c7:39:6e:d9:f4:75:6b:8c:a1:c2:44:90:41:ac:70:6a:6a:
26:3c:1f:1b:78:ca:e2:dc:46:3a:39:ac:a8:3d:97:ae:eb:99:
7c:f6:d2:77:f9:36:32:41:da:f4:b7:04:4f:60:1f:81:14:f1:
99:d1:fb:7d:94:d9:6b:b4:8a:f5:fa:ac:13:e2:97:9d:4d:6f:
5b:29:98:04:c9:fd:2f:8a:ec:81:17:db:93:89:e4:d2:88:ec:
2b:2a:f3:c8:70:c1:e5:32:25:25:91:fa:33:98:aa:63:de:c2:
4a:c3:5a:9b:6f:be:56:3d:ff:39:58:26:35:6b:05:72:63:e4:
a0:f1:45:44:dc:dd:b5:0a:a0:43:bf:fe:a9:10:8d:ee:33:b3:
b7:1a:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:13 2025 by rpki-client