Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: 2J0tVYtvvHhavfopDej6rGQ0NQ0VbsiTf7zsRSZNUdA=
Subject key identifier: 93:02:70:6F:FD:9E:85:9D:F0:34:63:C0:11:03:65:AE:8E:8D:D9:71
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019745F96935185D0E3A04BC4347CB7A3FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1121
Signing time: Fri 06 Jun 2025 16:01:02 +0000
Manifest this update: Fri 06 Jun 2025 16:01:02 +0000
Manifest next update: Sat 07 Jun 2025 16:01:02 +0000
Files and hashes: 1: 2x3GH0uugj9PiKapw7_y_5XF8YY.roa (hash: Q5ocnBPifUXZuaMrfYFAL794jt6aZyPuaM4u2/TpMXA=)
2: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
3: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: 65sGaqRaoapFOFJgeK80LEgNkdTzUyOUp2eFrQcW7/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:69:35:18:5d:0e:3a:04:bc:43:47:cb:7a:3f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Jun 6 16:01:02 2025 GMT
Not After : Jun 7 16:01:02 2025 GMT
Subject: CN=9302706ffd9e859df03463c0110365ae8e8dd971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:18:f6:a6:14:13:60:be:a8:91:96:71:02:
5f:53:d8:57:18:71:fb:4d:46:dc:49:6e:d4:88:33:
9b:c0:ca:64:28:c7:7f:dd:05:33:13:d0:8d:f6:33:
1f:0e:a8:09:46:ba:91:49:02:52:34:23:b2:4b:0d:
ef:e6:67:53:cd:a1:f2:67:71:2e:58:00:d6:43:20:
74:6c:30:53:0d:ff:75:e1:f2:a8:fd:67:15:a4:09:
cc:42:7f:11:08:b5:31:86:2c:f9:e2:2c:da:65:77:
50:5e:d4:bc:64:91:8b:9b:b8:b4:24:ac:e9:00:53:
0d:6a:a9:47:62:eb:22:36:c4:d4:b2:32:b9:e1:00:
8e:9c:92:cd:75:46:49:83:e7:a9:78:92:40:4c:8e:
7f:f7:4e:ef:b3:1a:a8:9e:fa:ce:11:65:b2:11:34:
56:62:8a:c3:05:ce:9e:d8:3c:d4:d6:08:25:fb:35:
f4:44:76:f2:38:b6:a1:64:82:59:8e:b4:ab:d8:8d:
de:25:44:1e:e8:ed:ef:61:46:71:6d:a3:43:59:ff:
17:e5:e2:0d:79:95:94:f2:1f:69:eb:c0:a3:82:d8:
a7:da:fc:a6:89:8f:d6:e0:f3:20:0a:36:a6:71:10:
e4:86:4e:79:12:30:58:18:6e:ea:1d:9c:e3:d0:a9:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:70:6F:FD:9E:85:9D:F0:34:63:C0:11:03:65:AE:8E:8D:D9:71
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:d2:41:9c:eb:c6:ba:84:49:6b:a0:83:fc:6a:61:3d:ef:
fa:42:4d:77:bf:47:be:cb:04:cd:53:f5:e0:89:07:69:10:c3:
ea:aa:5c:06:df:74:3a:91:3c:a0:31:fc:5c:65:a8:6c:3e:30:
ec:6c:7a:58:9a:40:ba:f9:6e:7f:d2:90:4b:02:1b:de:66:01:
79:72:dd:f0:97:03:05:91:36:4a:6b:7c:3b:15:0e:97:f5:97:
14:cd:37:04:43:b1:6b:13:53:56:b2:8e:61:14:3b:07:32:6f:
d4:5e:61:61:a6:d1:3e:87:cd:7d:34:37:12:1b:d2:33:ea:38:
e7:d6:d0:05:d3:b8:12:82:bb:1d:79:e4:cf:a8:07:da:ce:e0:
13:01:d2:85:9a:3a:25:9d:70:51:ab:7b:56:d6:e9:aa:3a:77:
04:c2:a8:7f:dd:2a:c0:78:a6:58:42:5d:f2:74:cc:33:49:ed:
a7:f3:38:31:b4:0b:18:91:d1:9a:6a:92:7d:5e:8b:6d:65:b3:
67:e2:0c:61:71:b9:f1:0b:2a:8a:29:e0:f6:50:f8:a2:6a:c4:
ba:de:99:8d:56:ac:26:a7:2c:40:a7:1d:a8:4d:45:b4:7b:17:
6e:3b:ee:dc:1a:1c:87:66:61:ba:1a:76:f5:08:3f:fc:37:d6:
6c:7b:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:31 2025 by rpki-client