Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: c4u2F6EicSak0PQ9EAnzCPtXRWJQGCxhd6qFKu/VXuQ=
Subject key identifier: 60:5D:2A:30:BB:68:CB:49:AD:51:D9:C2:C8:9D:84:8B:15:25:FA:D7
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 0199180949DFD6B29CD13153AD2BEDDA4CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0AE4
Signing time: Fri 05 Sep 2025 04:01:25 +0000
Manifest this update: Fri 05 Sep 2025 04:01:25 +0000
Manifest next update: Sat 06 Sep 2025 04:01:25 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: W/Wf02Ek5XkV7mJCXw6A21PSZfluAWgOA/kVMaSU/ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:49:df:d6:b2:9c:d1:31:53:ad:2b:ed:da:4c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Sep 5 04:01:25 2025 GMT
Not After : Sep 6 04:01:25 2025 GMT
Subject: CN=605d2a30bb68cb49ad51d9c2c89d848b1525fad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:b9:23:fd:c7:2f:f4:dd:7c:2e:00:58:2c:
71:9c:f6:7e:42:46:e2:ab:84:07:05:0c:a6:61:80:
cb:17:79:18:9f:ed:f9:62:77:f3:79:a4:ad:2f:cc:
4f:fd:14:ac:a3:fe:4c:38:57:30:f6:60:ed:28:8e:
55:d0:e1:c7:f2:a7:c6:7f:58:8f:de:6e:61:5b:79:
5b:b2:39:69:35:63:1d:44:03:28:3b:8f:90:b7:de:
c7:e4:5e:9f:ef:9f:d3:5e:88:d4:79:d3:cd:8b:ba:
3e:3c:e2:04:5a:ef:f4:6c:bc:77:c3:61:23:50:2b:
1f:59:ee:99:b4:ed:be:bf:8a:2a:8a:df:67:01:53:
16:9d:4b:19:24:70:97:8a:50:8f:b1:4e:42:b0:47:
78:b2:19:bd:68:0d:41:47:00:80:2b:64:8d:58:fe:
fe:a0:5f:f9:9e:f8:f2:08:22:dc:aa:ba:0e:84:21:
a7:eb:01:03:09:a6:b1:55:db:ac:55:31:5e:a8:cb:
f3:9f:80:b2:7d:a2:d7:6b:b3:f5:79:24:45:18:39:
9f:2e:92:b5:00:4b:9c:86:af:b5:49:18:67:2c:dc:
5b:8d:32:f4:c4:ef:17:24:6a:e2:a8:03:5a:43:02:
dd:e2:07:f4:3a:1b:e6:bb:3e:35:66:22:69:f8:21:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5D:2A:30:BB:68:CB:49:AD:51:D9:C2:C8:9D:84:8B:15:25:FA:D7
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f3:5d:4e:78:ef:cc:87:44:2c:ff:f3:77:0c:5b:02:2c:c0:
dc:8d:a7:9a:1d:b4:15:b8:e6:e9:e8:9f:30:73:5a:5d:6d:a1:
5e:1e:89:7d:25:5e:15:7d:7a:4d:12:9c:26:db:08:ee:dd:b0:
55:11:24:e3:40:d2:4d:f0:b8:1c:cc:16:6e:2f:15:1a:41:4f:
09:ff:75:b6:79:8a:21:17:d0:6c:52:5c:27:7d:68:2b:08:12:
13:15:bf:51:82:da:23:c3:65:10:ae:60:f7:1d:16:40:d0:1c:
db:e5:17:45:56:fa:39:f2:64:71:e0:93:80:aa:a4:08:a8:fd:
bb:ea:c9:d4:88:fc:a7:ff:ce:e3:05:48:92:3c:c8:ed:55:3b:
18:0a:d2:83:00:8a:96:a8:21:60:a6:49:2a:85:5c:53:34:c0:
c8:1f:d0:2c:6b:a5:20:64:26:3f:21:09:02:6b:dd:46:39:99:
39:c4:d0:71:04:ea:0e:1b:a1:73:42:34:4a:8e:05:7e:7b:f2:
7d:f4:a3:18:47:11:16:90:22:b9:1e:5d:43:cd:be:ec:bc:50:
b1:aa:e9:dd:d2:86:40:92:2c:b8:de:a0:18:f3:4a:9f:5c:6c:
a4:c8:49:d6:52:93:6b:37:b5:d2:c1:a3:4a:a8:2e:c2:89:02:
2d:2e:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:06 2025 by rpki-client