Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: gzW1Lt6AijplQeV1Xz8uc9ltHz7WH0geYXz3MGJEFzk=
Subject key identifier: D5:A1:EB:DF:E8:CA:7F:7D:A8:DD:F1:95:84:BF:EA:D0:BF:66:72:C3
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 019A71808B3BD0882670D4B2FCEF8B79A8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 0762
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa (hash: N/XUOamSaDoqkQC9NmUkQgS+Uf69LEs+brVxUPL9rfU=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: yiPA9kCkXdVCGrsrt3TrwfHWfbZODkddky1mnWYpqDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8b:3b:d0:88:26:70:d4:b2:fc:ef:8b:79:a8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=d5a1ebdfe8ca7f7da8ddf19584bfead0bf6672c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:a5:91:b5:da:83:cb:06:86:e3:20:e3:85:
ba:25:97:43:5a:40:df:e9:fa:7d:9f:b8:d1:69:85:
d6:68:7c:d8:63:d4:4c:91:27:14:27:89:c5:8f:9d:
62:ba:5b:1e:f8:78:d1:03:f5:cc:7f:18:1b:e8:ef:
94:e9:ca:3c:b0:16:7e:66:08:c7:f6:40:8f:3a:86:
71:7e:a7:05:0b:ec:9c:6a:59:1b:87:c6:05:60:37:
88:b0:9a:62:d3:9e:01:fb:49:86:71:14:ae:d7:13:
47:59:3d:a3:9b:6b:72:95:86:61:a2:2a:05:c8:24:
95:65:66:ee:cc:27:31:3b:be:0b:9b:1f:d3:84:34:
89:df:01:89:98:42:4b:a8:c7:9d:1a:1a:e7:8b:b4:
d4:c4:9a:2c:be:7a:05:ed:c8:81:e4:97:9f:56:e3:
d1:8b:f1:f4:6d:20:3c:e3:00:c6:77:73:5c:ae:3e:
f9:b7:f9:b8:12:cd:39:26:4c:33:eb:29:2d:79:06:
3c:bf:6f:aa:b8:cf:9f:f7:5a:b8:a6:39:2c:72:18:
54:4f:c5:25:41:a3:9c:9d:4f:3a:d5:f6:17:20:9c:
25:c3:b8:26:ac:e3:06:43:90:39:b0:58:56:0e:21:
90:f3:57:6b:41:98:6d:89:96:05:fc:f0:84:6d:56:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:EB:DF:E8:CA:7F:7D:A8:DD:F1:95:84:BF:EA:D0:BF:66:72:C3
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0f:f6:c8:e5:f3:63:31:1b:a7:3c:30:f9:c2:31:38:72:ec:
07:5f:ec:94:3b:bb:cd:d9:d1:e9:23:a0:30:73:fc:4f:15:cd:
0c:cb:d4:95:17:63:dc:63:b8:34:70:92:fd:e1:5b:a7:84:f2:
a2:78:5f:8e:85:00:b4:06:fe:91:e6:b4:a1:24:8c:c3:2a:67:
c8:8a:9f:a6:39:f0:ad:3b:8f:73:b7:ca:05:80:11:bf:34:13:
f9:05:62:57:9a:bf:e8:f8:95:36:23:a1:eb:10:22:fd:99:56:
f4:61:b6:46:76:15:23:72:d2:bd:e0:90:81:82:5e:d0:c9:b1:
cf:72:82:15:12:b4:b9:83:ca:56:7a:df:ed:e1:0c:49:be:d3:
c1:f7:51:2c:27:0b:0f:41:f2:d4:95:11:f0:5b:f3:8f:5e:6d:
00:2d:67:73:c0:76:fe:f3:f5:23:ad:08:fd:82:b8:08:18:4b:
e1:c6:ce:46:dc:4d:bc:d3:d6:c3:8b:c1:b9:19:68:98:bb:aa:
17:e2:a2:f3:89:7f:51:68:b2:9e:9f:58:2f:5d:6b:3c:9e:e0:
4a:a6:18:ca:53:b8:9d:3e:73:68:9d:bb:e2:1a:a3:9a:df:da:
21:13:e2:e3:7b:2a:f7:2e:30:5b:a6:fe:fe:ba:f1:54:7c:c2:
39:a3:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:05 2025 by rpki-client