Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: FNekKxPCzPk4UaKH63+Dny+ae9y2Bs/DardujIecYOA=
Subject key identifier: 47:03:E2:0C:6B:37:CB:95:1D:EF:04:0F:BB:97:AC:E3:EE:10:5F:6E
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 019A71B839D56F255C38C56F54D97D531B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 13B0
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: DvNYkJZTRAvg7bw/wBvjbKsvBZFUaFWiSDWLWFG2Ons=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:d5:6f:25:5c:38:c5:6f:54:d9:7d:53:1b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=4703e20c6b37cb951def040fbb97ace3ee105f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:44:8e:c2:4a:fe:93:17:2d:de:48:2e:7c:
d0:60:9a:a1:7e:d2:ed:4a:81:5b:37:c3:1c:bd:e9:
1b:e9:6c:32:36:7c:e7:3d:8f:84:b6:18:c4:84:24:
b1:db:dd:8f:f8:dd:8a:96:6d:ee:ae:13:a6:55:a9:
bd:d0:02:9c:57:bd:56:36:ed:4d:4e:a5:dd:64:b6:
30:5f:4a:02:c7:1b:31:57:34:63:17:80:8d:22:cc:
2d:88:72:18:fa:ec:98:68:ef:d4:c1:66:7a:16:0a:
e6:1e:33:04:c9:de:3c:0e:c6:f8:ba:a0:47:2e:e1:
5c:55:b2:96:73:ce:b5:c3:15:5e:36:03:28:d6:5b:
37:54:75:1c:82:af:7b:40:c9:5a:ac:69:a7:86:ad:
60:61:fb:d9:bb:b1:c3:66:b1:14:56:0a:8d:f1:8b:
b9:d3:25:85:10:e2:07:11:2b:2a:a5:a7:5f:6d:67:
36:fa:e4:f5:31:c2:b5:fc:92:4d:3b:79:06:5d:c4:
81:12:84:bd:fa:83:b2:53:59:d3:06:fa:a8:14:02:
d9:23:be:c3:99:46:36:a1:35:0b:69:51:6f:f3:33:
7d:10:46:85:3d:a5:b0:46:ca:f9:67:54:a5:c8:22:
fc:0b:8c:ac:3b:9a:fe:9d:eb:9c:86:08:64:36:0f:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:E2:0C:6B:37:CB:95:1D:EF:04:0F:BB:97:AC:E3:EE:10:5F:6E
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:49:bf:04:aa:9d:bd:60:0b:70:64:3b:03:2f:8a:61:23:92:
73:c7:75:29:34:23:95:12:60:6a:23:7a:c5:b3:fc:f5:42:f8:
2a:40:71:8b:07:e0:25:82:02:3d:a4:c0:e8:22:da:da:5b:99:
e0:df:13:5a:69:ae:30:04:ae:6b:e0:62:f0:60:35:06:3e:3c:
2a:01:83:b5:48:38:99:18:a1:3b:80:ed:8a:e1:31:da:6d:dd:
6c:50:bd:87:6e:11:e1:01:68:aa:83:f1:5b:b5:15:3c:d1:3c:
31:cc:56:5d:ae:6f:ef:23:5f:44:0f:92:b4:18:fb:e3:05:47:
88:06:18:ef:a9:0b:28:3a:c8:38:a9:cb:dc:d5:c7:be:2d:43:
98:f8:8e:6e:72:9c:cb:0d:3d:5a:b4:e1:a1:2a:85:ea:9f:fe:
2e:99:c8:03:b2:e1:61:88:ca:b9:74:f5:20:e3:fc:06:83:a0:
bc:01:33:19:f5:24:cd:83:d1:02:cb:b9:84:5b:48:02:ab:5a:
a1:c4:9d:91:77:02:c8:8a:23:3e:18:61:d3:35:77:6e:48:ec:
73:d6:36:45:14:c6:f9:7f:6c:8b:52:3c:87:3d:75:ea:49:ea:
1e:54:eb:9d:ba:5d:d3:73:fd:11:2b:c2:93:63:20:50:50:ad:
b2:f5:dd:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDnVbyVcOMVvVNl9Uxt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGQ3ZTFhYmIyY2Q4M2U5YTJkZTlhMDZiMzkxYjNhNTI0
NDQ0MWIwHhcNMjUxMTExMDcwMTMwWhcNMjUxMTEyMDcwMTMwWjAzMTEwLwYDVQQD
Eyg0NzAzZTIwYzZiMzdjYjk1MWRlZjA0MGZiYjk3YWNlM2VlMTA1ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDZEjsJK/pMXLd5ILnzQYJqhftLt
SoFbN8Mcvekb6WwyNnznPY+EthjEhCSx292P+N2Klm3urhOmVam90AKcV71WNu1N
TqXdZLYwX0oCxxsxVzRjF4CNIswtiHIY+uyYaO/UwWZ6FgrmHjMEyd48Dsb4uqBH
LuFcVbKWc861wxVeNgMo1ls3VHUcgq97QMlarGmnhq1gYfvZu7HDZrEUVgqN8Yu5
0yWFEOIHESsqpadfbWc2+uT1McK1/JJNO3kGXcSBEoS9+oOyU1nTBvqoFALZI77D
mUY2oTULaVFv8zN9EEaFPaWwRsr5Z1SlyCL8C4ysO5r+neuchghkNg//AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcD4gxrN8uVHe8ED7uXrOPuEF9uMB8GA1UdIwQY
MBaAFE9Nfhq7LNg+mi3poGs5GzpSREQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAt
NTFmNWM0NThmMTJjLzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAtNTFmNWM0NThmMTJj
LzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUm/BKqd
vWALcGQ7Ay+KYSOSc8d1KTQjlRJgaiN6xbP89UL4KkBxiwfgJYICPaTA6CLa2luZ
4N8TWmmuMASua+Bi8GA1Bj48KgGDtUg4mRihO4DtiuEx2m3dbFC9h24R4QFoqoPx
W7UVPNE8McxWXa5v7yNfRA+StBj74wVHiAYY76kLKDrIOKnL3NXHvi1DmPiObnKc
yw09WrThoSqF6p/+LpnIA7LhYYjKuXT1IOP8BoOgvAEzGfUkzYPRAsu5hFtIAqta
ocSdkXcCyIojPhhh0zV3bkjsc9Y2RRTG+X9si1I8hz116knqHlTrnbpd03P9ESvC
k2MgUFCtsvXdXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client