Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: OlNtrNtfKO2HIMkpayD5vNwOUcWJoNJzD2F9KxkV6Po=
Subject key identifier: 2B:10:0C:CB:53:B5:90:99:28:EB:D3:21:88:A6:86:39:2D:D3:41:8B
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019A71B7F0F2AE9C9DA3F70CDE7E38960E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 168E
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: L6Ok0Cp1vgAnbmCA4CXz80cNl9msbpAM0JXq0WarfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f0:f2:ae:9c:9d:a3:f7:0c:de:7e:38:96:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=2b100ccb53b5909928ebd32188a686392dd3418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:e5:c3:8f:23:6a:b5:65:ac:12:11:b7:5a:
d3:ab:dc:e2:12:3a:1c:0e:0d:07:f9:79:60:42:30:
d7:1d:cf:2c:5b:03:6d:8f:31:7b:67:c7:af:45:8a:
bd:c8:28:d3:1a:3d:59:ef:59:67:a3:e8:15:e3:d6:
4c:50:79:ce:df:44:31:23:f6:c9:65:4c:14:3d:32:
db:3c:aa:d7:40:4c:54:92:63:23:e7:c6:54:25:9f:
ad:29:19:5c:33:26:ed:f5:fa:f1:6f:25:ce:c8:83:
9a:33:b0:07:7d:5a:51:80:83:2a:da:49:ba:3f:e0:
6a:2e:f0:2a:f5:ba:86:12:f3:38:f4:36:32:da:9b:
41:11:6b:72:03:76:f1:05:6a:05:55:19:30:4d:c4:
fb:de:ed:62:41:4b:40:59:ae:f3:0a:43:47:69:dd:
ad:0a:0e:3f:10:07:f4:ba:e4:cf:00:5d:b6:16:b1:
f6:a7:59:3d:73:9f:b9:23:d1:ed:9e:08:7a:3b:0d:
87:40:16:d8:a0:cf:a4:31:8c:b0:ef:25:28:cb:fe:
b1:fe:04:bc:eb:d8:da:b0:a5:4c:f6:8c:c2:0c:07:
12:03:91:0a:d9:79:12:bc:77:5a:7d:02:7b:ab:4e:
5e:b4:ff:d0:42:ce:d0:20:e3:ae:12:c9:20:7b:1b:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:0C:CB:53:B5:90:99:28:EB:D3:21:88:A6:86:39:2D:D3:41:8B
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:05:77:3e:de:72:b5:b4:4d:a2:bb:93:6f:fb:33:97:0f:
20:44:e7:82:a2:44:3f:da:0c:d3:e9:c0:48:fb:2a:62:06:fd:
9f:c8:da:e9:11:74:5d:04:00:6c:6c:73:25:7f:82:29:08:df:
40:fa:4d:a6:ad:35:b9:1d:d7:68:b4:4a:83:27:20:f9:36:f8:
32:ff:25:a7:ec:18:ad:c5:75:52:1a:5a:bf:aa:0a:21:4f:df:
96:ff:29:3c:02:b6:05:90:cd:87:da:ae:ff:f0:25:e4:ad:d7:
2a:f6:d7:eb:a1:d8:45:df:eb:3e:b4:53:36:f9:6c:53:83:72:
3e:46:1b:2c:39:70:a0:1f:2e:bd:16:7b:0f:e7:b0:3a:2c:5e:
0c:ec:89:ba:4b:e8:f4:32:50:32:64:0f:c3:05:0b:49:d1:e1:
fe:f9:06:ae:98:98:26:e7:59:9c:30:30:ee:8d:ad:f2:e2:1e:
c1:94:f0:83:64:d5:1d:ca:bd:9a:7e:b7:0a:c4:a7:3c:5b:b8:
af:ec:ad:c9:df:57:7e:42:82:33:89:c5:79:b0:01:36:41:c6:
5c:18:fb:d8:4a:d4:36:fe:21:35:a0:8a:30:41:15:a4:ee:09:
e7:f1:61:39:b0:a0:3c:b9:fa:91:2b:3f:70:74:47:72:64:e7:
6c:d8:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:35 2025 by rpki-client