Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: MU7Sx1KpizW1qF3ycAFWMv8Vo2GeR0HDgJUkaJM/NF0=
Subject key identifier: 81:0B:01:38:49:0B:AD:69:53:74:B0:87:9C:3A:CA:12:D0:3E:8C:AA
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 0197D1A9C80FFBB1DCA3B98A2196B4A34A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0A3B
Signing time: Thu 03 Jul 2025 19:00:54 +0000
Manifest this update: Thu 03 Jul 2025 19:00:54 +0000
Manifest next update: Fri 04 Jul 2025 19:00:54 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: RHFs2aUpZCiCTXYlIErOWDPxNMBsFkAFkWXmJRRv/Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:a9:c8:0f:fb:b1:dc:a3:b9:8a:21:96:b4:a3:4a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Jul 3 19:00:54 2025 GMT
Not After : Jul 4 19:00:54 2025 GMT
Subject: CN=810b0138490bad695374b0879c3aca12d03e8caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:d7:76:88:c5:4e:82:78:f6:98:08:d2:51:
59:9d:fe:12:5e:29:c7:d3:47:fb:65:b5:a5:41:df:
0c:90:88:de:51:94:cc:73:21:8a:52:17:db:8c:b8:
fa:75:93:7c:ec:5d:b6:c5:c7:61:d5:ab:87:da:06:
60:c7:80:42:87:cd:2c:13:56:1b:ef:44:55:e1:5a:
b4:ab:d9:e6:55:27:43:8c:1c:5f:e3:a0:69:a8:cb:
e3:e3:d8:9d:84:68:7c:2d:04:1c:dd:6a:be:d5:c9:
c3:0b:1d:af:e3:fc:e5:09:f5:d0:e2:d2:e1:06:31:
eb:d9:90:b4:26:ca:9d:ff:fb:ce:d3:ec:6d:89:9a:
f0:7c:f1:fa:20:5f:f4:00:e8:57:58:3a:0c:b1:46:
05:69:3b:35:1c:91:24:08:12:ec:b6:76:ce:e6:0d:
4a:5f:25:7c:a5:0c:ba:0b:94:13:fa:85:23:b5:f4:
c6:12:d5:a1:c3:b5:1f:4e:ee:24:72:aa:6b:27:02:
af:ea:05:73:73:59:ea:f3:42:b7:2b:69:84:34:33:
05:64:3f:69:b3:a4:da:9e:ed:54:6f:1b:fe:4e:6d:
b5:6b:8f:01:95:9a:96:a4:8a:b5:9b:46:e8:a2:ff:
f8:7e:01:4d:64:19:d8:e8:af:8d:37:8a:da:32:41:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:01:38:49:0B:AD:69:53:74:B0:87:9C:3A:CA:12:D0:3E:8C:AA
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:e5:01:f3:29:c4:d6:da:60:b9:20:1a:49:fa:b8:40:2a:
5c:90:f4:b0:3e:8d:23:b4:8e:e0:83:72:b4:e7:94:17:40:e1:
48:42:73:13:09:1e:db:90:4f:3d:76:29:42:46:71:4d:39:93:
ba:37:79:66:85:f7:c0:ae:a4:f0:21:1c:2d:d3:fd:4e:47:0c:
a1:39:fd:02:17:22:ea:ec:38:bf:d8:bd:e7:f2:da:72:5d:cf:
a4:64:e6:59:df:c5:a6:9d:d6:ee:d1:d0:fc:df:20:11:3f:22:
0d:90:6a:32:bf:2f:8a:3c:9c:79:3a:43:72:74:c5:d0:ef:e1:
66:f2:78:71:5d:9b:b2:c2:cb:e2:54:3a:cc:7e:ea:88:c6:e6:
3c:3a:61:a7:3c:49:4d:7a:ee:33:64:a4:ad:95:0e:7c:9a:c9:
0e:9e:88:53:82:49:f4:62:e3:ad:4b:e6:dd:89:ad:e4:5d:3a:
3e:97:4f:4b:84:29:97:e4:72:d2:d4:23:9e:5f:45:9a:95:77:
9f:1b:bd:68:83:e6:65:dc:6d:20:6b:37:f1:37:35:f9:10:cc:
4f:97:4b:e9:c1:6b:3c:b2:21:55:88:e3:a3:33:05:b7:ff:a9:
c3:8d:a1:4a:ab:ae:d7:ff:e1:6a:64:25:bd:72:39:4c:c0:7d:
02:b6:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:45:26 2025 by rpki-client