Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: g+UPxHpdfUVkzJeTLYx0zubYQMzCVX5316I/1rwILdc=
Subject key identifier: 0F:25:08:BA:49:65:DC:93:1B:02:ED:BA:08:60:D4:92:FA:78:88:1D
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019A7293F0BC34E1E8FAD2F1DAAF3C2B37D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: NPMIp4BQQgpibkgoUTdq1rJbFgbKbuaIg2KTlhDFTDo=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f0:bc:34:e1:e8:fa:d2:f1:da:af:3c:2b:37:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=0f2508ba4965dc931b02edba0860d492fa78881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:a8:c7:21:a5:92:f8:73:a5:95:aa:d7:fc:
3d:ca:2c:5f:09:c2:b5:90:3a:56:64:e3:ee:95:f3:
a8:39:1c:f1:25:ee:94:3b:3e:dd:d2:1f:bc:be:d0:
55:3b:a5:ca:c5:84:5e:c4:13:1a:0f:a4:4b:07:0f:
a6:94:b4:a3:bd:1c:ba:2e:22:75:8a:aa:32:0a:5c:
60:ed:f3:1c:53:c2:1b:f7:3c:10:8d:d6:d2:24:bd:
24:b6:92:35:63:c5:70:b4:45:c2:16:f6:a1:e8:f9:
c9:a1:83:82:03:6a:d4:77:1f:dc:5a:c1:8b:6e:62:
b9:6c:42:a8:65:43:71:a2:dc:11:55:78:ce:a4:90:
13:4b:d5:29:e7:c6:cf:61:1b:53:85:79:a0:45:9c:
a3:df:78:a4:6d:54:dd:d9:90:17:80:3c:61:d2:d8:
30:f0:c5:28:26:d4:87:d1:62:ac:2e:05:65:34:a8:
af:29:86:e5:76:9e:92:2a:01:d5:60:ee:cf:2d:5f:
e4:8b:32:38:2f:4f:fa:64:db:13:e3:09:7f:9a:2b:
10:6a:86:fa:5b:ce:99:82:a3:c1:1b:73:ef:4a:4d:
98:10:81:d6:7f:27:76:56:05:f3:3b:bb:fb:3c:2b:
33:ed:bf:38:75:9d:fa:2f:d5:28:8b:48:9b:79:81:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:08:BA:49:65:DC:93:1B:02:ED:BA:08:60:D4:92:FA:78:88:1D
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:47:07:11:68:6f:00:31:39:65:31:17:4e:c2:03:00:3d:
32:54:89:ee:6a:30:89:a6:94:69:fe:1b:0f:64:22:be:df:19:
e9:76:0f:aa:a8:4e:88:e6:6b:7c:df:af:49:30:53:c8:bc:19:
88:1c:1b:97:46:4e:f5:40:c1:5a:41:ca:0f:a8:00:5f:da:53:
4c:bc:a6:00:59:99:46:f0:34:c3:d5:6f:2a:e5:eb:e2:c7:d9:
22:b4:5d:e5:4f:26:a9:75:82:43:03:97:2f:a1:0e:22:da:38:
78:db:2d:d9:a7:1a:cf:12:59:be:f9:ff:df:ce:35:a0:55:76:
18:c3:e8:e6:90:36:0b:a8:35:c8:59:54:15:ab:d9:c3:fd:4f:
40:02:49:07:04:34:6d:f1:fd:eb:ad:be:80:6d:c3:08:a4:01:
ac:16:b8:54:18:1a:f6:04:37:22:67:c1:83:1d:86:fd:a5:69:
99:6b:5e:67:44:9a:21:5e:60:74:52:4f:5f:09:bf:65:0b:3d:
ee:c4:46:9a:e2:12:ca:61:87:85:d9:8d:45:49:a0:0a:65:c4:
16:d2:11:44:c9:e0:2a:1c:86:5d:a2:90:51:57:cc:91:47:60:
26:ee:68:70:c4:e5:f9:57:0b:c4:8e:59:c0:30:22:e0:f4:f1:
f0:a0:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:16 2025 by rpki-client