Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: Pi7uss/MpWD2W2yNBDlWO75ZDZqCZEGaPrW/PvdhlOc=
Subject key identifier: 9D:1C:84:79:F8:E7:CA:D7:57:78:7F:5B:50:DF:C3:14:C4:A2:81:7A
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019746D4D737FCC5BF9759F2F1C96CEDA024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1582
Signing time: Fri 06 Jun 2025 20:00:43 +0000
Manifest this update: Fri 06 Jun 2025 20:00:43 +0000
Manifest next update: Sat 07 Jun 2025 20:00:43 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: HioZyGHnbSh11rXTa3v8pF1u3WQT8rSjRv+mxeq3C1o=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d7:37:fc:c5:bf:97:59:f2:f1:c9:6c:ed:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jun 6 20:00:43 2025 GMT
Not After : Jun 7 20:00:43 2025 GMT
Subject: CN=9d1c8479f8e7cad757787f5b50dfc314c4a2817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:fc:39:d5:d4:3b:f2:84:06:32:bf:b2:fa:
e4:d2:5e:fa:c2:99:89:fb:15:5e:a0:a3:e5:a8:b0:
d3:18:3e:58:e2:32:23:03:d9:4a:85:a2:9f:74:4d:
66:bc:1f:ac:ce:e4:86:9c:d9:5c:6b:91:30:26:d5:
84:74:4a:44:d6:66:4f:48:f0:41:e6:fc:9a:b1:9e:
64:88:8a:34:e1:51:75:72:15:d5:e5:82:e2:d0:4e:
de:2b:d6:e2:f8:ce:73:bc:0e:6b:af:90:13:8d:47:
cd:14:66:53:47:06:89:a4:59:8e:a3:67:3d:e1:6a:
55:1d:cb:c8:3b:d1:6e:03:60:b9:82:09:3a:17:4e:
9b:53:1c:62:92:f0:d5:fe:c8:08:26:f5:7c:5d:12:
7f:e9:3b:6b:44:d5:32:56:3c:97:85:44:c3:fc:6f:
59:86:a4:2e:38:f4:69:57:8d:87:ea:aa:c2:9b:e3:
db:63:b0:b2:9e:c4:3c:63:7b:3d:f5:85:3d:e4:bf:
89:c8:ea:37:06:bb:d9:c7:02:9e:88:0a:10:d9:38:
c8:5a:23:68:6e:0d:d6:97:65:87:6e:a2:4c:ee:08:
3d:d0:12:04:f7:0e:66:de:d1:97:73:4f:5c:76:bb:
e2:6b:ac:7d:42:03:9b:48:49:51:72:46:94:50:10:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:84:79:F8:E7:CA:D7:57:78:7F:5B:50:DF:C3:14:C4:A2:81:7A
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:29:64:c7:9c:6f:c0:06:cc:0d:72:7f:dd:db:15:b0:eb:
af:59:bd:5a:9f:01:79:1e:97:94:86:47:2e:71:4d:ae:e4:47:
a7:ab:6c:41:df:b8:c7:e7:1c:56:e2:62:7c:39:95:aa:70:2f:
1a:6c:ff:42:f5:7e:2b:e0:96:1f:8f:18:2a:10:13:18:46:aa:
53:9d:fd:de:35:45:1d:f8:1f:f5:1e:e0:c5:84:06:d6:ab:53:
62:d4:23:76:f3:35:99:0c:fa:4d:d3:bd:ec:db:7a:b0:77:10:
53:be:d5:e4:18:0a:92:e3:5b:c0:6a:98:75:e1:95:75:dd:7c:
3e:af:6a:2b:06:a8:97:55:82:b2:1b:bd:79:78:8a:df:2e:0b:
bd:67:bf:23:9d:c5:43:6b:bb:64:9c:82:c4:92:82:3e:17:a8:
19:06:0e:89:3e:6f:02:d9:d1:46:71:fd:80:4d:8d:d3:9e:23:
fb:6f:13:43:f8:57:ab:6b:10:3a:a4:b0:49:17:f0:a6:3f:ad:
fb:f5:6a:6a:5c:e6:d0:d9:19:12:d0:5e:7a:cd:4e:6c:bd:ef:
b5:f9:71:4b:66:b2:1d:70:d0:ef:89:82:7c:7d:63:6c:8e:39:
b9:a3:e6:0b:19:c4:e0:2a:f4:9f:22:22:6e:de:fb:ee:bd:0e:
37:52:6e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1Nc3/MW/l1ny8cls7aAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjVjMjJiZjUzYjcwNWM3YTJiYjI3M2JhNzNlM2YwYzA1
OTViN2IwHhcNMjUwNjA2MjAwMDQzWhcNMjUwNjA3MjAwMDQzWjAzMTEwLwYDVQQD
Eyg5ZDFjODQ3OWY4ZTdjYWQ3NTc3ODdmNWI1MGRmYzMxNGM0YTI4MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6T8OdXUO/KEBjK/svrk0l76wpmJ
+xVeoKPlqLDTGD5Y4jIjA9lKhaKfdE1mvB+szuSGnNlca5EwJtWEdEpE1mZPSPBB
5vyasZ5kiIo04VF1chXV5YLi0E7eK9bi+M5zvA5rr5ATjUfNFGZTRwaJpFmOo2c9
4WpVHcvIO9FuA2C5ggk6F06bUxxikvDV/sgIJvV8XRJ/6TtrRNUyVjyXhUTD/G9Z
hqQuOPRpV42H6qrCm+PbY7CynsQ8Y3s99YU95L+JyOo3BrvZxwKeiAoQ2TjIWiNo
bg3Wl2WHbqJM7gg90BIE9w5m3tGXc09cdrvia6x9QgObSElRckaUUBBapwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0chHn458rXV3h/W1DfwxTEooF6MB8GA1UdIwQY
MBaAFBq1wiv1O3Bceiuyc7pz4/DAWVt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTct
YjRiMWY2Zjk4YTkwLzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTctYjRiMWY2Zjk4YTkw
LzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/EpZMec
b8AGzA1yf93bFbDrr1m9Wp8BeR6XlIZHLnFNruRHp6tsQd+4x+ccVuJifDmVqnAv
Gmz/QvV+K+CWH48YKhATGEaqU5393jVFHfgf9R7gxYQG1qtTYtQjdvM1mQz6TdO9
7Nt6sHcQU77V5BgKkuNbwGqYdeGVdd18Pq9qKwaol1WCshu9eXiK3y4LvWe/I53F
Q2u7ZJyCxJKCPheoGQYOiT5vAtnRRnH9gE2N054j+28TQ/hXq2sQOqSwSRfwpj+t
+/Vqalzm0NkZEtBees1ObL3vtflxS2ayHXDQ74mCfH1jbI45uaPmCxnE4Cr0nyIi
bt777r0ON1JuOA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:16 2025 by rpki-client