Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: Fd8teQcFIKhPLo4OpbPE/7Nwf48wKZNepxh6SzTHhH0=
Subject key identifier: 8A:4D:1F:FB:A6:04:FF:0B:AE:2B:91:3F:59:F0:F7:3A:A8:1A:1C:80
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019921E7A3AD98F8079C00EB4C50B5B43C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 02:00:52 +0000
Manifest this update: Sun 07 Sep 2025 02:00:52 +0000
Manifest next update: Mon 08 Sep 2025 02:00:52 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: VLDaboN1FKXXxbxnaaXZjwimMyIFk//bhKc7z68RM4U=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a3:ad:98:f8:07:9c:00:eb:4c:50:b5:b4:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Sep 7 02:00:52 2025 GMT
Not After : Sep 8 02:00:52 2025 GMT
Subject: CN=8a4d1ffba604ff0bae2b913f59f0f73aa81a1c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:07:73:60:77:c5:39:43:59:d6:d7:9b:e2:
70:eb:45:9d:99:80:53:ed:7b:0e:b2:82:a5:f7:03:
2d:12:79:a6:54:3c:7d:d4:00:c4:da:ab:56:5a:89:
85:03:bb:f5:9e:f1:d6:70:87:21:0a:0f:b6:5b:94:
c6:b5:21:84:d0:81:e0:5b:1d:4a:72:c9:0f:56:94:
2f:1d:f4:97:11:d0:56:3e:fd:0d:14:98:ee:90:a0:
79:3c:1d:99:9f:21:cc:74:83:6e:0f:f3:88:bb:38:
12:cf:51:ad:5b:12:7e:cd:b6:96:3c:08:35:b5:22:
eb:a4:59:d6:e1:1a:38:d8:69:12:3e:fa:4d:74:cf:
79:b9:2d:f9:74:08:d4:02:8c:a1:dd:fa:58:14:96:
20:18:e7:48:ec:7a:39:f9:9e:9f:53:7f:74:91:5d:
ab:ba:b0:ec:e7:3d:ed:07:49:4e:3f:99:d3:92:64:
37:9c:c0:f5:9c:d5:eb:82:6f:b8:9e:3a:84:7c:c2:
1b:9e:be:7f:e9:38:e2:8e:f9:47:56:16:e0:17:34:
54:5c:d2:f4:3f:5b:3d:b8:d1:c5:51:b2:e3:6f:9d:
39:53:92:ce:e4:44:3f:32:ff:30:f7:d7:0e:2f:3a:
c9:5f:b4:da:8c:ee:ce:67:ce:1f:16:bd:a8:e3:71:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:1F:FB:A6:04:FF:0B:AE:2B:91:3F:59:F0:F7:3A:A8:1A:1C:80
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d8:15:da:ac:ba:07:4d:99:8c:d4:f1:4b:7f:92:d9:f3:b7:
65:6d:e2:96:4b:25:86:ab:f2:af:d1:02:50:1a:69:41:1a:9b:
72:58:12:58:94:73:1f:05:64:40:34:3c:98:2e:f3:5f:6d:58:
8c:6d:2d:fc:80:db:87:b6:09:43:df:d1:e5:2d:14:a5:84:cd:
40:98:98:28:a1:9f:3f:0f:b7:a9:01:47:ec:72:18:ae:04:13:
3d:3c:70:5e:d3:4c:63:9a:b2:ff:80:e3:13:21:3b:88:46:a2:
08:c6:14:21:77:66:f9:54:eb:d7:d7:80:12:4f:76:82:c0:a3:
82:1a:da:77:14:3a:cd:35:0e:91:db:34:0a:0d:e0:22:d6:de:
15:09:a7:b2:11:7d:ab:29:0a:11:72:0a:e3:8a:c9:ca:8c:36:
0f:96:46:46:f9:6c:3a:2c:28:dd:03:03:99:7d:27:80:a2:86:
88:ac:68:03:5f:19:d6:2e:3c:ba:d6:28:27:39:58:44:92:87:
0f:e3:23:a7:8e:90:96:44:6c:28:f9:e9:2c:08:7a:e9:b6:34:
90:f8:06:92:89:de:8e:e2:b9:db:d4:95:df:15:74:cb:30:1a:
83:04:61:92:87:0f:61:1d:0f:9d:1c:85:7a:16:bb:a3:cc:61:
28:c3:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:41 2025 by rpki-client