Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File: GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier: VHEi55W2zrdIVsIH5tWRujH6HQUWY2tVyzNaFsZOsOw=
Subject key identifier: FF:17:FC:37:B1:64:DC:94:3C:88:26:79:B3:3D:69:D5:57:79:5E:52
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 019A71B8BD050A011C114D94C8BFC2856AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number: 1635
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: a3QbvyG8qUq4U8moYpmbF6AM4MolC/AhQZvJdwbUNyo=)
2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bd:05:0a:01:1c:11:4d:94:c8:bf:c2:85:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=ff17fc37b164dc943c882679b33d69d557795e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:d1:c4:0f:2a:3e:39:87:47:c8:b0:70:09:
6a:ec:a2:e8:45:bd:a2:f5:3d:f5:b4:f1:15:1d:bf:
7a:a1:00:be:64:26:f3:73:5c:a3:3e:3b:3d:56:db:
36:0d:5e:0e:cf:55:eb:e4:8b:af:98:59:7c:ab:64:
cb:64:cc:76:b7:17:ac:82:b0:1b:0e:82:00:d1:43:
42:b3:1e:62:50:62:91:75:01:ce:bd:d5:c1:f9:a4:
ff:bd:62:bc:fb:7f:4d:ea:c9:10:a3:dc:71:3f:ad:
42:d6:b4:af:7b:6b:cd:47:be:f7:ed:19:81:0b:8a:
71:1d:d2:65:45:20:25:ea:81:14:7f:38:d0:2f:91:
b3:ee:7d:a6:ab:48:b3:c9:b1:ba:ac:52:bc:b7:88:
46:1a:81:83:92:d9:c8:97:ef:34:c8:51:db:03:69:
45:d9:34:57:89:7f:09:34:f3:72:19:e5:ea:b9:9a:
11:0c:48:b9:7c:8a:ea:d1:b9:0c:8e:d8:a0:3f:aa:
42:9a:9c:b6:7a:69:31:f3:55:75:8f:e4:83:26:c1:
7a:b2:24:79:93:df:04:05:ac:26:4f:19:ab:f4:63:
91:c4:64:f9:9e:5b:f0:62:7a:5a:1c:92:a7:cb:19:
b2:51:29:01:36:fd:53:00:09:ae:b9:0b:11:69:75:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:FC:37:B1:64:DC:94:3C:88:26:79:B3:3D:69:D5:57:79:5E:52
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:78:8f:84:f4:5f:06:ec:6e:61:98:6f:0b:7b:f3:3a:42:1d:
88:f1:f3:6a:83:cf:8d:ef:e2:c8:ed:a1:e0:35:19:b8:23:ca:
ab:f0:f0:26:db:37:ae:fc:9c:f5:85:86:bd:8a:58:92:f7:13:
06:47:e9:6b:60:b2:f8:dc:3b:6a:7d:20:f3:27:4c:e7:6c:a8:
36:20:4f:67:61:98:7d:72:72:66:b6:14:2f:f7:23:35:f3:25:
0a:c1:51:cb:da:70:c0:7d:e9:2e:14:1a:97:8c:24:af:ec:4c:
6f:30:fa:10:f2:b9:52:e7:81:66:49:5f:7d:ec:64:48:c2:17:
5e:dd:69:9b:50:57:89:16:3b:b7:ae:44:38:40:71:df:60:fe:
ab:56:2a:ab:2a:28:c1:75:dc:a6:1f:06:5a:29:6b:fa:fb:b0:
94:14:d6:47:32:8a:79:70:16:0f:ff:e6:11:87:ee:ca:68:4a:
a9:b8:0d:34:04:f9:16:d5:47:78:c5:1b:5d:85:d7:23:d9:1d:
a6:e6:a9:f4:a7:49:7e:e2:25:44:e1:be:4f:ce:fc:7f:f2:be:
32:0c:22:9f:76:5b:34:f9:ee:d0:db:5d:36:74:c7:c5:71:21:
5f:ab:b8:3e:28:6f:62:7e:1b:02:6c:26:ec:35:30:e3:5c:01:
07:85:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:56 2025 by rpki-client