Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier: POjAj5pbyIocy6qIpg1FAHfoWyRrIAxrOv9N3bpBS7Y=
Subject key identifier: D8:E3:39:18:04:1F:DC:CB:99:3A:ED:54:07:D4:B6:02:B1:C2:B2:C6
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial: 019A7225A40DE0326CD7C753D7E323802BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number: 069C
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: rmou9qryS3U645nptUJYJWP5ETtTgz9RZ0rTfWNgDuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a4:0d:e0:32:6c:d7:c7:53:d7:e3:23:80:2b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=d8e33918041fdccb993aed5407d4b602b1c2b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:b0:22:49:19:6d:d4:1a:f0:ca:d6:cd:b8:
62:bd:a1:d8:6a:2e:1d:77:64:00:32:37:ae:b3:1d:
26:f9:4c:43:d6:9e:fb:b5:40:b3:53:af:0d:35:78:
e9:74:f0:8a:81:62:c6:79:7a:a4:46:8f:f6:e6:8f:
16:91:a1:b7:95:c8:cd:2f:9e:93:71:69:d3:d2:5a:
0a:b8:67:fd:76:83:fc:77:34:0b:21:72:b0:09:f1:
51:56:3a:a1:eb:2e:6c:76:a3:f8:70:2c:a1:b9:f9:
b9:1a:09:e3:a1:44:b0:c0:a1:04:c0:c8:30:69:7c:
ba:8b:b4:b9:74:50:95:6d:dc:bc:b4:49:9e:10:a5:
ff:4c:48:8e:c5:f7:76:cb:c0:63:4a:38:4e:8b:17:
ef:cd:ad:c4:be:48:f0:65:6b:27:ab:ed:57:f6:7a:
bc:22:0f:f2:1a:9f:67:41:ee:fa:79:aa:36:5e:47:
5e:e5:2d:a9:b8:75:04:18:42:77:e8:89:f6:ca:f7:
a8:73:d3:f8:59:37:da:1e:4f:46:c6:52:64:cc:75:
ff:08:6a:c3:a0:a7:9b:9f:71:76:21:b0:02:ce:fe:
2d:43:80:fd:75:2c:ed:14:b9:14:1b:2b:2f:3d:02:
49:01:0a:2a:98:10:f3:10:e4:3c:ff:13:8f:0e:7c:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:39:18:04:1F:DC:CB:99:3A:ED:54:07:D4:B6:02:B1:C2:B2:C6
X509v3 Authority Key Identifier:
keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fa:04:8b:5f:1e:3c:38:70:c4:a2:12:53:37:14:b6:80:ab:
be:47:cf:c9:af:cb:d2:54:d1:0d:a9:d2:c9:65:e5:68:b4:0b:
1a:72:38:57:4e:9a:5f:31:98:a0:b7:52:b4:1d:63:56:85:3c:
08:56:47:3a:bb:68:ea:c1:7c:00:ca:68:cd:5a:12:4a:e2:ab:
91:b4:15:d6:49:f6:fc:16:79:91:c2:69:7f:bf:9b:18:a9:f5:
fa:15:b9:db:c0:45:e5:10:7b:cf:69:13:a0:b5:2e:7e:62:de:
47:7b:d2:ff:82:a3:20:09:6e:de:52:50:5e:68:10:91:21:d1:
9a:68:14:dc:75:46:8b:19:5a:b0:d4:73:54:a7:77:db:c7:72:
df:9d:9f:d4:6f:e6:44:df:6b:40:db:7a:02:6f:45:22:44:1e:
bd:f6:6a:ea:3d:d9:0a:8a:2a:89:17:99:64:1a:a1:7b:63:da:
97:77:9f:b9:ce:05:c7:5f:c2:0a:9d:ff:6d:46:82:db:f6:a9:
e1:96:88:3e:f5:5d:d3:fb:6b:c0:43:ba:65:22:8a:1b:36:c8:
c8:f6:0d:87:d5:d2:c1:7c:93:05:e3:e9:93:aa:bc:cb:e2:f2:
a1:d3:f7:29:91:8a:bf:89:33:89:31:9b:03:c7:6b:ca:69:e5:
a7:45:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:59 2025 by rpki-client