Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: KCyawzSMflVhpmCsoXNa8gFXc4XUb4G8fYdaToTmCDo=
Subject key identifier: CB:1B:CA:28:8F:56:36:09:31:F0:19:95:3C:08:CE:AF:16:6B:8C:3F
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0198499C17F70A6DDBA0B7786C195F8DCA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0B7D
Signing time: Sun 27 Jul 2025 02:00:23 +0000
Manifest this update: Sun 27 Jul 2025 02:00:23 +0000
Manifest next update: Mon 28 Jul 2025 02:00:23 +0000
Files and hashes: 1: 5GAvl6a2LhO40IHXb3FEQRL43dI.roa (hash: /6XSNGfrUMapG8xHohOBC097pXOO/8yE7oieep3PnkA=)
2: UEpNb3wmOOdCK7UvN3lXTC2DcUk.roa (hash: pmS4hRe0q9ReL0MLHSlxbOJsASxbtpyjkGhM1kcVhvc=)
3: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: TYf/FhFVMUVhQqomWdoJFMMwrt7WbCUZWeXV2fWpapc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:17:f7:0a:6d:db:a0:b7:78:6c:19:5f:8d:ca:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Jul 27 02:00:23 2025 GMT
Not After : Jul 28 02:00:23 2025 GMT
Subject: CN=cb1bca288f56360931f019953c08ceaf166b8c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:98:bc:fe:ac:db:df:37:cd:0e:1a:51:30:
b2:d7:66:f3:37:80:64:d5:40:b6:55:28:a3:f1:ae:
b7:74:d9:16:d5:72:9b:76:01:46:51:31:87:af:b5:
8e:15:3e:ff:62:bf:11:eb:5a:9b:35:9d:74:5c:77:
e2:14:b8:62:48:a4:8f:ed:29:58:3c:98:80:69:a5:
d5:26:2d:13:8f:8b:7b:4f:98:9e:e0:1f:fb:bd:a3:
11:01:d7:db:84:69:f1:43:28:61:a2:99:db:c6:b2:
ee:2e:ef:b5:f1:a2:a0:b4:b9:f8:b9:5a:84:4d:38:
c3:99:ff:76:fa:54:de:82:59:9b:a4:db:99:8b:ab:
3a:81:5e:c9:9e:bc:de:2b:f9:24:a0:c8:65:98:06:
b1:90:48:cb:7c:5d:70:7a:e8:ef:85:9e:77:f5:95:
ad:77:c7:74:1c:53:19:9d:ca:db:e3:bc:64:20:1e:
b3:8d:08:54:65:ee:bf:c2:49:3b:8c:d1:5b:c0:8d:
b3:f8:32:e1:2c:08:6f:c8:dd:2b:17:80:a3:51:93:
af:55:ff:69:a9:ad:d6:01:30:14:bd:41:b5:56:5f:
cf:c1:78:18:b0:0d:56:5a:43:13:3c:72:92:e6:a2:
8a:e6:70:72:76:c4:51:87:3c:ec:8f:3c:28:2f:ce:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:CA:28:8F:56:36:09:31:F0:19:95:3C:08:CE:AF:16:6B:8C:3F
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:30:54:13:37:dd:8d:3b:f3:c2:de:f8:15:14:c6:6f:a0:46:
8b:ea:53:4a:ee:32:01:8f:f9:3b:83:dc:c6:1d:a5:10:43:d0:
51:06:93:f0:26:f2:ce:01:8c:15:aa:92:6b:7d:68:57:53:3d:
cb:13:85:45:e3:ed:61:f6:66:6e:0c:10:2d:41:5d:cf:9a:d8:
f4:00:da:36:06:c6:97:2d:6e:43:f3:da:ee:cb:99:1c:31:03:
22:a7:19:f0:df:bc:c1:2f:73:cf:17:9c:d0:37:eb:5e:ef:5b:
5b:e2:9b:fe:2c:7c:0c:49:11:c8:90:0c:bc:87:f9:d2:c8:25:
a0:9c:6d:a2:0f:7d:ed:86:b6:4c:36:5b:0c:d3:ea:00:bb:84:
16:2e:82:87:24:88:77:ef:2c:33:3e:d1:1c:12:17:31:32:1e:
8e:3a:df:6b:8b:25:fe:22:1d:4c:5e:3d:83:47:56:5a:90:b5:
ad:dd:60:4e:31:80:8e:00:15:e4:70:2e:28:97:a6:cc:f1:32:
ec:cc:6b:56:b4:81:3b:48:3b:b9:13:b5:3a:19:53:bb:d6:02:
c6:40:3b:df:72:3c:7a:67:3c:1e:c6:8a:76:71:2f:96:bd:fc:
62:c3:ab:6d:a3:5a:65:de:83:63:44:4f:40:2f:62:c2:d8:82:
49:8c:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:18 2025 by rpki-client