Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: NTmM5CBvv3GbLmaHNpZo1noVmSRn6ijq5P2F38+bWfo=
Subject key identifier: 46:8E:C4:76:4D:F4:36:76:AB:DD:91:48:56:98:1E:E9:B1:42:D9:0B
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 0199239FD9A87D6A2004AEDF64899CCFE68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 1303
Signing time: Sun 07 Sep 2025 10:01:42 +0000
Manifest this update: Sun 07 Sep 2025 10:01:42 +0000
Manifest next update: Mon 08 Sep 2025 10:01:42 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: UYoWtFuYiRnpUnQ2yIL+7O9YzmG5wjko8Rg7BHtP/PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d9:a8:7d:6a:20:04:ae:df:64:89:9c:cf:e6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Sep 7 10:01:42 2025 GMT
Not After : Sep 8 10:01:42 2025 GMT
Subject: CN=468ec4764df43676abdd914856981ee9b142d90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:84:b0:37:b2:ec:e5:d0:67:7e:ab:33:8a:
04:8b:ce:ac:c0:3f:ee:ec:69:23:e6:10:bb:19:62:
e7:2b:93:79:15:d2:b8:f2:30:ad:7f:20:d4:45:fb:
94:a4:52:4a:8e:4d:65:56:12:95:42:3e:2d:ee:63:
82:57:fc:62:93:1b:9d:94:e9:d4:46:38:67:d1:0c:
7b:a9:7a:03:9f:50:e3:70:d0:c0:bd:60:b0:de:06:
a5:1e:97:02:91:3d:d8:a6:29:d3:58:33:f6:2a:6d:
58:05:41:fd:e4:50:32:ca:1e:30:93:7b:ea:90:3a:
48:7d:45:38:7a:0f:2c:6a:34:64:de:d5:8f:38:16:
85:bd:10:2e:0b:3a:ad:4e:74:a7:f4:81:7e:1d:ac:
87:02:b2:05:96:15:cc:69:56:54:73:ed:62:7e:ac:
94:f8:83:34:e3:c2:02:cc:dd:b8:22:69:f8:e3:9b:
77:8c:9b:d8:48:ac:f5:d0:e1:6e:b5:1a:fa:4c:03:
e9:9b:e9:e2:f9:6d:e4:c1:a7:b0:41:ed:92:fa:8b:
8a:90:04:b4:d2:8f:fc:66:b8:c6:e7:8e:1d:fb:4d:
37:d8:27:ae:aa:97:f3:72:c2:93:28:d3:ab:2b:86:
8b:54:99:be:04:85:8e:98:60:73:0a:f6:3c:04:42:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:C4:76:4D:F4:36:76:AB:DD:91:48:56:98:1E:E9:B1:42:D9:0B
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0a:f7:82:f3:57:e1:81:27:48:6c:1b:7d:fe:98:62:3b:4e:
41:e8:6a:6f:48:c1:7b:3d:02:1f:44:35:f7:a4:0e:f7:42:87:
bd:71:8d:05:cc:a5:8b:53:37:e1:34:34:3f:d5:8e:fa:5a:6d:
78:21:85:07:6a:98:56:33:05:44:c7:83:91:fa:1f:71:82:93:
35:d1:b9:f4:a1:b9:00:40:1c:28:da:cd:58:87:23:e1:d3:26:
38:9a:8f:83:ad:5d:45:80:a5:6f:2a:5a:fb:5a:35:43:11:2a:
70:68:39:5f:64:1b:98:f8:32:1f:1c:5b:8b:20:30:a7:ed:fb:
be:96:83:cd:93:e6:44:00:47:fe:0b:e9:6b:ab:ee:82:25:9f:
f0:d1:99:af:ec:2e:ab:e7:b1:6a:e0:56:2d:0f:73:7d:30:15:
8d:80:d1:b2:fc:5b:26:34:d2:ee:4a:46:5c:26:7a:81:55:74:
a5:e9:43:ca:d6:8d:6c:db:10:e3:7f:84:81:36:6e:e8:82:2b:
a0:9a:be:72:62:92:d1:5f:d8:09:c5:1b:d3:a7:43:63:fe:0a:
e2:96:aa:48:b3:76:e1:01:f2:b0:07:96:78:d5:54:a4:a5:13:
d2:ee:96:a2:1f:8c:01:f1:34:95:7f:f8:f0:77:15:56:9b:5f:
3f:0e:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:05 2025 by rpki-client