Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: ZpvrE86+scy/MFew9R6F4HJp715X58klnSplOoieV4s=
Subject key identifier: AB:31:0F:3E:9E:E8:64:C0:18:27:42:77:F7:3F:20:D4:36:43:6A:59
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0196403072343C7A1159E248E36799FB30BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1462
Signing time: Wed 16 Apr 2025 20:00:38 +0000
Manifest this update: Wed 16 Apr 2025 20:00:38 +0000
Manifest next update: Thu 17 Apr 2025 20:00:38 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: ShDpKIQYYplUQIj7wDPdFtV6qcyJb+xLxiSil+5tubs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:72:34:3c:7a:11:59:e2:48:e3:67:99:fb:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Apr 16 20:00:38 2025 GMT
Not After : Apr 17 20:00:38 2025 GMT
Subject: CN=ab310f3e9ee864c018274277f73f20d436436a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:22:c2:ec:6e:b2:a0:ed:82:2f:d7:d0:f9:
84:b5:38:16:d8:09:86:ff:11:03:ac:ff:d8:c6:bd:
c6:6a:52:d1:cd:34:6d:31:2f:ec:1e:c8:c6:3f:4c:
ec:e3:c3:ae:c1:98:bc:0c:87:f0:ec:55:00:2a:a5:
07:83:0b:c8:e4:41:0a:0e:0b:30:c5:fa:4f:5f:c9:
a3:7d:49:a7:00:db:18:5f:0f:ae:c6:db:0b:20:7d:
a1:d0:48:be:f3:b9:5c:09:15:b2:88:20:1b:32:ec:
52:07:6c:40:fa:86:90:e1:e3:31:85:b6:d9:c3:8e:
56:86:14:b4:af:1e:72:cf:d8:00:ca:10:92:23:ca:
d5:7e:b0:5e:4c:ca:2e:03:05:54:49:6b:40:0d:c6:
9d:3c:e8:3d:a9:c7:b3:ff:07:fc:30:98:12:59:78:
81:97:1e:a7:ca:d3:40:27:de:4e:f8:db:20:50:f1:
3b:31:58:ef:b0:40:76:40:77:a3:22:a9:f4:e3:60:
d7:8e:00:fe:47:de:2e:c6:7a:d7:4f:fb:70:f7:df:
89:2d:6d:f1:46:2b:eb:b0:29:3d:eb:e6:ec:81:44:
a6:df:1b:33:e5:e8:f3:e5:76:ce:69:cb:9f:46:1c:
3f:8b:7e:3c:bb:d4:59:89:ae:4b:7f:ca:31:3a:83:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:0F:3E:9E:E8:64:C0:18:27:42:77:F7:3F:20:D4:36:43:6A:59
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:14:f7:79:ea:c7:a4:74:65:66:b4:5e:80:bc:8e:32:29:
a3:0f:b0:64:33:b7:af:7f:7a:a4:f9:e7:74:47:50:b5:4e:34:
f6:9a:4e:dc:72:25:99:2d:71:ff:14:32:38:2a:1a:c7:68:da:
4a:20:68:2a:55:17:87:e2:cc:15:58:b5:0a:69:98:5b:64:ba:
4a:c3:c0:09:79:83:bd:e7:cd:a5:c0:12:6e:55:dd:ac:f9:9c:
f8:b6:58:e1:05:f6:97:48:1a:f3:4f:c5:f8:e0:5a:22:70:a7:
f2:1c:d0:1f:30:3c:1e:a1:ff:3f:82:cd:5d:75:36:d3:d3:b1:
8c:82:7b:cd:85:f7:ad:74:4a:22:69:e4:c4:d7:f1:eb:96:78:
d7:31:ab:87:76:cb:f5:a5:f4:b9:0a:91:39:2d:dd:98:6a:95:
e8:e1:ec:63:ef:ab:e2:19:ba:08:0b:a4:e3:28:60:49:78:cb:
05:10:b0:dc:48:1c:6e:03:54:f0:4a:55:51:be:1d:08:ca:5c:
ec:8d:84:fe:59:e1:03:2e:c0:e3:c3:0f:a3:65:48:72:ab:65:
99:ca:dc:1d:69:d3:11:a7:17:53:8c:8b:43:bf:fb:03:2c:85:
db:b0:eb:51:16:94:20:58:89:4c:5c:9c:a8:40:d6:d3:f3:35:
14:d0:aa:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMHI0PHoRWeJI42eZ+zC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy
NDZiNGIwHhcNMjUwNDE2MjAwMDM4WhcNMjUwNDE3MjAwMDM4WjAzMTEwLwYDVQQD
EyhhYjMxMGYzZTllZTg2NGMwMTgyNzQyNzdmNzNmMjBkNDM2NDM2YTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqYiwuxusqDtgi/X0PmEtTgW2AmG
/xEDrP/Yxr3GalLRzTRtMS/sHsjGP0zs48OuwZi8DIfw7FUAKqUHgwvI5EEKDgsw
xfpPX8mjfUmnANsYXw+uxtsLIH2h0Ei+87lcCRWyiCAbMuxSB2xA+oaQ4eMxhbbZ
w45WhhS0rx5yz9gAyhCSI8rVfrBeTMouAwVUSWtADcadPOg9qcez/wf8MJgSWXiB
lx6nytNAJ95O+NsgUPE7MVjvsEB2QHejIqn042DXjgD+R94uxnrXT/tw99+JLW3x
RivrsCk96+bsgUSm3xsz5ejz5XbOacufRhw/i348u9RZia5Lf8oxOoMtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsxDz6e6GTAGCdCd/c/INQ2Q2pZMB8GA1UdIwQY
MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt
MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5
LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdYU93nq
x6R0ZWa0XoC8jjIpow+wZDO3r396pPnndEdQtU409ppO3HIlmS1x/xQyOCoax2ja
SiBoKlUXh+LMFVi1CmmYW2S6SsPACXmDvefNpcASblXdrPmc+LZY4QX2l0ga80/F
+OBaInCn8hzQHzA8HqH/P4LNXXU209OxjIJ7zYX3rXRKImnkxNfx65Z41zGrh3bL
9aX0uQqROS3dmGqV6OHsY++r4hm6CAuk4yhgSXjLBRCw3EgcbgNU8EpVUb4dCMpc
7I2E/lnhAy7A48MPo2VIcqtlmcrcHWnTEacXU4yLQ7/7AyyF27DrURaUIFiJTFyc
qEDW0/M1FNCqfg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:43 2025 by rpki-client