Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: P85/mpEzgPu/jEgHhmvisd6RfNluRnDqO88liewNWxI=
Subject key identifier: 8A:93:AD:23:D2:55:8D:D9:E2:FD:58:DC:9C:12:F6:DA:C4:2C:16:F6
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 019A71B91717E81AC1712CBFC3B9C5E79295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0B97
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: Nci8bflAM5PUR94Jc3D1OZcYDuZ1oSMNCQRAAKmHcxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:17:17:e8:1a:c1:71:2c:bf:c3:b9:c5:e7:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=8a93ad23d2558dd9e2fd58dc9c12f6dac42c16f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:1f:28:d8:18:76:67:9c:79:c8:98:45:25:
a1:63:14:6d:33:4d:8c:0d:b3:57:50:e8:9c:f2:e2:
87:2f:20:33:af:fe:f1:cc:6b:10:20:3b:86:79:bc:
3d:4c:7d:82:e9:36:f3:91:81:88:8a:60:aa:15:32:
4a:69:e1:f3:ef:08:3a:69:ba:7d:55:02:c6:39:c6:
dd:fa:68:18:5a:1c:90:58:b8:f8:cc:bf:0c:d9:d6:
4e:89:e0:50:6a:24:da:20:47:87:d0:6e:1f:4c:e4:
f1:06:da:cb:3a:b4:12:53:51:9c:46:dc:23:1e:f3:
3e:bb:93:82:42:52:01:2e:6b:37:fb:d7:08:6f:76:
46:f5:1d:4b:c0:56:45:f1:39:7e:d0:d2:a4:c7:52:
7f:f9:a1:c6:b6:a8:9a:0e:7a:c8:94:fd:f2:7d:11:
c6:37:22:ab:1b:59:d1:be:8c:50:00:f1:b4:bc:9a:
dc:ab:a0:1e:b9:85:24:b9:aa:48:db:cb:1c:45:12:
2e:c7:9d:f3:91:a4:e2:06:97:f9:96:23:de:fe:a6:
19:83:ee:c8:3f:fa:91:7c:c8:de:04:fa:aa:6a:00:
92:84:4f:bd:43:de:c5:aa:ed:7e:b7:19:18:42:ee:
b5:12:48:63:19:95:b8:5a:0a:31:2f:0d:f3:40:97:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:AD:23:D2:55:8D:D9:E2:FD:58:DC:9C:12:F6:DA:C4:2C:16:F6
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:db:2a:85:da:a1:59:f5:7a:36:a8:1e:ed:c9:37:6d:71:17:
97:2c:d9:dc:d2:4d:01:29:52:fd:4f:ea:a5:bb:3a:0f:0a:57:
b8:8e:d0:fa:a5:df:43:82:a9:a3:e1:85:a8:d5:da:b3:33:4e:
ec:14:e3:73:ce:ef:84:7f:30:e8:5b:2d:a9:23:70:1b:0f:8f:
e2:ad:1f:1b:f5:49:56:9e:31:af:db:38:97:ad:31:33:4c:55:
9c:f9:07:c8:a7:8a:93:62:7b:6a:f3:66:56:47:e0:ca:f0:61:
e1:27:f3:47:0b:7d:7f:3f:4e:29:09:16:1b:c2:cf:06:5d:70:
f8:8c:e0:79:eb:ab:e3:99:c9:ef:8e:8d:5a:26:70:fc:0e:64:
a5:ff:8b:ea:49:7c:ad:bf:e7:22:c8:c2:1b:0e:6f:65:47:26:
fa:8b:fc:35:ed:ef:29:57:05:3b:c8:b3:7b:b2:5c:24:f8:0a:
25:9a:7a:d8:3e:b3:20:ca:9e:6c:d9:f0:13:33:00:e6:21:56:
ab:81:b9:7b:a5:67:77:1c:ef:f4:2b:c1:d7:f2:2e:c2:57:43:
e4:ad:0e:63:0d:37:f4:69:62:05:a1:d4:76:e5:6d:93:4f:62:
4e:2b:8f:24:ca:e3:f6:97:36:f6:41:33:05:7d:65:2c:76:bf:
77:d6:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:42 2025 by rpki-client