Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: hOLYbPK1R7TmBfRRnLEliIfcBlWErHQHiuBIQrumolI=
Subject key identifier: EB:35:D3:D7:88:2B:4E:48:FD:5F:CC:AE:98:35:95:3C:D5:80:D3:2B
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 019926D7A2461D852BECE68068ABA4D42131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 13A3
Signing time: Mon 08 Sep 2025 01:01:29 +0000
Manifest this update: Mon 08 Sep 2025 01:01:29 +0000
Manifest next update: Tue 09 Sep 2025 01:01:29 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: nke0jmVxEUNIs3RxG6AcOQryE1bkNpMOSk+TMVVmfVs=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:a2:46:1d:85:2b:ec:e6:80:68:ab:a4:d4:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Sep 8 01:01:29 2025 GMT
Not After : Sep 9 01:01:29 2025 GMT
Subject: CN=eb35d3d7882b4e48fd5fccae9835953cd580d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:67:dd:98:f2:fb:a1:9f:54:46:47:f9:5d:
6b:ad:33:e0:f8:13:40:aa:ff:56:5e:2b:3a:3b:b8:
35:26:41:cb:3c:39:68:ef:73:ad:c1:e0:de:67:b5:
73:69:af:6b:f4:ca:f1:c9:12:aa:f7:04:82:81:36:
cf:54:19:a1:9b:9a:19:0e:85:8d:a9:2c:bb:aa:c8:
d9:ff:4a:b8:dd:54:03:bb:80:47:09:39:33:86:62:
57:ca:24:f9:c8:f7:86:56:b3:20:fb:01:d2:2e:d4:
af:fd:f5:9c:bd:0f:1c:de:aa:d4:4a:49:22:8c:f4:
8b:a5:19:bb:1f:c1:b4:3a:cf:44:43:13:ac:0e:4e:
35:06:f2:3b:d0:6e:94:f1:63:59:8b:75:fe:be:ee:
be:93:02:b5:1b:18:26:18:a4:73:0e:c5:79:fe:df:
3a:4c:ad:b3:8a:b4:f5:29:0f:80:5d:e8:e9:4b:f3:
2c:77:da:12:de:bf:aa:88:23:84:0f:cd:d7:9a:f6:
7e:b7:f5:85:75:98:1a:d6:98:b7:a1:95:2e:79:10:
51:02:7d:46:44:4b:c1:97:be:7d:7c:de:e2:d4:ee:
a6:a3:6b:67:79:bc:38:86:e0:82:25:98:3a:00:56:
a4:d6:ed:01:50:2f:fe:d0:a8:da:5f:39:02:bb:ec:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:D3:D7:88:2B:4E:48:FD:5F:CC:AE:98:35:95:3C:D5:80:D3:2B
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:ad:76:35:02:0e:72:41:74:03:d5:8c:9f:85:92:81:b1:
6f:ee:00:48:1e:9a:8d:73:df:f6:0a:c5:dc:d2:af:49:54:ec:
14:0e:88:e0:91:e3:7a:f5:52:52:17:be:1a:7d:03:4d:5e:db:
58:6a:58:c9:ff:11:1c:3a:e4:49:15:0f:10:60:ad:0e:e0:5b:
74:a2:1c:e6:a5:c2:07:3c:10:87:10:7b:21:64:00:82:3d:b3:
c9:ca:b6:58:1d:50:14:ba:69:b5:99:cc:0f:94:89:63:f6:1b:
57:e1:45:d3:4a:04:04:91:a9:70:2a:dc:d8:a9:b9:74:30:18:
d7:06:18:7b:33:27:61:61:cf:bb:41:e3:f5:93:a9:e5:39:f0:
30:9f:a9:56:3a:90:78:b8:b3:ca:36:9f:66:fa:61:25:6f:14:
4a:e0:9b:aa:30:cd:52:2a:dc:56:ee:b8:95:ad:6d:0e:cf:a5:
80:94:e5:e0:c6:43:d4:70:49:fa:ca:9b:d6:a7:fc:1d:d2:7f:
80:e2:75:8f:28:2a:84:f3:ef:47:98:af:b9:0d:cb:89:aa:1e:
c1:0d:6d:7d:98:2a:b4:5c:3a:96:b7:83:e3:7a:9d:39:2e:b5:
6c:68:62:9e:a0:22:82:f0:f6:e3:60:9d:f6:b2:26:a6:a3:82:
e4:97:09:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkm16JGHYUr7OaAaKuk1CExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwOTA4MDEwMTI5WhcNMjUwOTA5MDEwMTI5WjAzMTEwLwYDVQQD
EyhlYjM1ZDNkNzg4MmI0ZTQ4ZmQ1ZmNjYWU5ODM1OTUzY2Q1ODBkMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwRn3Zjy+6GfVEZH+V1rrTPg+BNA
qv9WXis6O7g1JkHLPDlo73OtweDeZ7Vzaa9r9MrxyRKq9wSCgTbPVBmhm5oZDoWN
qSy7qsjZ/0q43VQDu4BHCTkzhmJXyiT5yPeGVrMg+wHSLtSv/fWcvQ8c3qrUSkki
jPSLpRm7H8G0Os9EQxOsDk41BvI70G6U8WNZi3X+vu6+kwK1GxgmGKRzDsV5/t86
TK2zirT1KQ+AXejpS/Msd9oS3r+qiCOED83XmvZ+t/WFdZga1pi3oZUueRBRAn1G
REvBl759fN7i1O6mo2tnebw4huCCJZg6AFak1u0BUC/+0KjaXzkCu+yKjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs109eIK05I/V/Mrpg1lTzVgNMrMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeytdjUC
DnJBdAPVjJ+FkoGxb+4ASB6ajXPf9grF3NKvSVTsFA6I4JHjevVSUhe+Gn0DTV7b
WGpYyf8RHDrkSRUPEGCtDuBbdKIc5qXCBzwQhxB7IWQAgj2zycq2WB1QFLpptZnM
D5SJY/YbV+FF00oEBJGpcCrc2Km5dDAY1wYYezMnYWHPu0Hj9ZOp5TnwMJ+pVjqQ
eLizyjafZvphJW8USuCbqjDNUircVu64la1tDs+lgJTl4MZD1HBJ+sqb1qf8HdJ/
gOJ1jygqhPPvR5ivuQ3LiaoewQ1tfZgqtFw6lreD43qdOS61bGhinqAigvD242Cd
9rImpqOC5JcJUw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:12:21 2025 by rpki-client