Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: gfE/Ilk8pNFieiRqr/NO/8dFsE5glQbPe64J2Wdx90A=
Subject key identifier: 18:2A:10:1B:C5:19:6A:81:24:56:39:30:C5:19:81:06:10:10:76:3B
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 0199228C76D8EB1DBDA86541E18B29C254D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 06B4
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: KuLRLCIcF6yQCSlMHHroDvyQxhPv4kzrtDdzQiMfVDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:76:d8:eb:1d:bd:a8:65:41:e1:8b:29:c2:54:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=182a101bc5196a8124563930c51981061010763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:1c:e0:c4:20:60:04:81:e6:5d:0f:77:fc:
f2:79:cf:6f:06:98:3c:48:4f:b5:64:3e:1b:b6:f8:
c4:f9:94:af:3a:e3:81:23:4a:2a:88:e2:bc:88:5d:
03:95:33:5b:ac:88:4f:39:6c:be:bb:d6:b0:ed:49:
2f:8c:4a:3d:85:ba:7c:a0:a8:37:a4:d1:fe:42:0b:
55:67:ae:cb:e8:00:a4:1f:d0:21:74:99:e4:18:c6:
34:cd:da:90:d0:ac:f0:a0:72:01:03:c8:4a:70:06:
d6:83:51:b3:4b:d8:c6:00:e4:80:df:6f:c5:fe:23:
51:c9:4e:b8:af:83:33:1d:d3:a1:1a:2d:51:53:c6:
8f:e0:fb:59:09:12:23:05:ee:9e:46:2b:9e:3b:da:
23:27:8c:3a:d3:b9:51:f0:9b:0c:77:3a:91:67:c7:
c4:19:ed:8a:1d:41:13:13:30:ab:46:ea:0f:73:a2:
b5:00:d1:d3:77:50:1b:74:e2:c7:a8:28:be:33:05:
1f:7f:23:b0:e9:06:57:0e:a8:3a:53:7a:ab:fc:da:
75:ce:6d:7f:5b:59:e2:f5:94:da:46:1c:14:2a:5b:
af:b8:00:2f:0a:e3:4d:f0:cb:b7:cb:2a:14:04:cd:
6b:30:e3:68:69:1b:c2:c9:cd:76:61:8d:c0:c2:08:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:10:1B:C5:19:6A:81:24:56:39:30:C5:19:81:06:10:10:76:3B
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9e:1e:57:f8:9e:f4:7e:0e:b9:e0:3f:7a:67:07:11:16:6e:
5d:d5:97:74:23:6a:c7:17:f2:0c:88:9b:bd:e1:0e:c1:8c:a1:
a8:39:2b:89:cd:ee:aa:2b:af:3a:3b:b8:5c:b1:c4:e4:65:ec:
96:45:6d:85:cd:81:93:10:b5:e2:47:39:fb:58:08:c8:33:17:
e7:b3:22:4c:84:02:d8:04:d8:2f:9e:5b:e4:df:25:7a:61:a0:
b2:69:6c:9e:be:92:a0:a3:25:f3:20:ab:fa:9a:15:84:ed:89:
4c:53:4a:2b:78:9d:b3:68:a8:81:77:cd:42:e1:70:54:52:da:
bc:7b:f2:bb:63:7e:6f:7b:b1:d7:8c:e1:30:b1:93:c6:f8:97:
2a:84:be:63:08:bf:b3:47:a8:d5:19:78:1d:68:b6:05:8d:21:
8e:cb:af:43:6a:5d:c1:ef:cf:03:ba:87:d4:23:b4:71:a5:42:
97:ee:8d:6b:0f:3c:90:0f:0e:7e:3d:de:98:bd:2f:d7:84:13:
23:50:e0:72:21:8b:5a:9e:30:58:37:c2:c0:26:a9:4b:c9:e5:
cf:ae:54:20:f7:75:43:8c:4a:c3:d3:cb:b4:e1:e1:95:69:5c:
17:b6:34:ac:be:a2:6d:bc:f9:3c:b6:91:36:9d:51:ae:c2:42:
9b:9a:5c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijHbY6x29qGVB4YspwlTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz
YjMwZWUwHhcNMjUwOTA3MDUwMDU0WhcNMjUwOTA4MDUwMDU0WjAzMTEwLwYDVQQD
EygxODJhMTAxYmM1MTk2YTgxMjQ1NjM5MzBjNTE5ODEwNjEwMTA3NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAYc4MQgYASB5l0Pd/zyec9vBpg8
SE+1ZD4btvjE+ZSvOuOBI0oqiOK8iF0DlTNbrIhPOWy+u9aw7UkvjEo9hbp8oKg3
pNH+QgtVZ67L6ACkH9AhdJnkGMY0zdqQ0KzwoHIBA8hKcAbWg1GzS9jGAOSA32/F
/iNRyU64r4MzHdOhGi1RU8aP4PtZCRIjBe6eRiueO9ojJ4w607lR8JsMdzqRZ8fE
Ge2KHUETEzCrRuoPc6K1ANHTd1AbdOLHqCi+MwUffyOw6QZXDqg6U3qr/Np1zm1/
W1ni9ZTaRhwUKluvuAAvCuNN8Mu3yyoUBM1rMONoaRvCyc12YY3Awgj5PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgqEBvFGWqBJFY5MMUZgQYQEHY7MB8GA1UdIwQY
MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt
NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3
LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJ4eV/ie
9H4OueA/emcHERZuXdWXdCNqxxfyDIibveEOwYyhqDkric3uqiuvOju4XLHE5GXs
lkVthc2BkxC14kc5+1gIyDMX57MiTIQC2ATYL55b5N8lemGgsmlsnr6SoKMl8yCr
+poVhO2JTFNKK3ids2iogXfNQuFwVFLavHvyu2N+b3ux14zhMLGTxviXKoS+Ywi/
s0eo1Rl4HWi2BY0hjsuvQ2pdwe/PA7qH1CO0caVCl+6Naw88kA8Ofj3emL0v14QT
I1DgciGLWp4wWDfCwCapS8nlz65UIPd1Q4xKw9PLtOHhlWlcF7Y0rL6ibbz5PLaR
Np1RrsJCm5pciQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:27 2025 by rpki-client