Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: JcPNoJ4iW/HCY2LF1q8wGXizlS0Q7+qKgXbuFbfeWvg=
Subject key identifier: 0A:02:5F:C3:06:B0:0D:66:13:46:CD:10:B9:0A:20:A3:C9:DE:D6:C6
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 019A21E4D7BA6A5E7FFA5BDF16385DDDE66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1425
Signing time: Sun 26 Oct 2025 19:00:36 +0000
Manifest this update: Sun 26 Oct 2025 19:00:36 +0000
Manifest next update: Mon 27 Oct 2025 19:00:36 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: TWvikKsEys2J0fO+Q82NCKBcScI0gF1hErz27IPvgqc=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:d7:ba:6a:5e:7f:fa:5b:df:16:38:5d:dd:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Oct 26 19:00:36 2025 GMT
Not After : Oct 27 19:00:36 2025 GMT
Subject: CN=0a025fc306b00d661346cd10b90a20a3c9ded6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:b5:5c:31:2d:27:a3:d2:be:19:3d:e3:30:
e9:c0:be:41:ff:33:ee:b2:05:b1:01:80:1d:aa:40:
71:0d:f0:37:37:09:50:0b:e7:d7:c4:b4:99:3a:3d:
d5:c8:ca:06:99:04:fe:67:0f:d3:d2:11:f2:c1:51:
0f:4e:58:2f:6b:5d:36:2b:ec:89:45:e4:cb:ad:b0:
80:98:ae:c9:a2:29:13:a8:c4:91:e0:bb:3f:fc:ef:
cc:07:69:6f:61:3a:9b:b4:73:1b:e9:da:ec:f7:5d:
ab:03:8f:9b:64:8a:e1:78:11:e2:f8:96:92:63:b1:
64:42:37:16:85:e5:cd:d7:6f:0b:da:7f:8e:08:82:
d8:f4:9a:1f:d2:28:8a:5d:21:e6:05:09:e2:08:e6:
07:47:64:ba:68:d4:e5:c3:5a:52:91:77:c9:21:b3:
d8:6a:a0:45:8e:30:43:94:f9:1b:81:4b:07:df:13:
87:c3:ef:8a:28:0b:1a:b4:10:75:46:86:f3:2a:73:
96:7a:91:a5:2c:2a:b0:33:70:1a:f7:d2:f0:87:7a:
31:20:22:4e:0d:e7:4e:b1:72:8e:3b:82:c0:46:13:
2f:63:1a:bb:84:cf:80:55:d4:2a:ba:e4:d8:93:00:
1d:15:63:f6:07:9f:7b:c6:f1:c3:13:c1:4b:e6:59:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:5F:C3:06:B0:0D:66:13:46:CD:10:B9:0A:20:A3:C9:DE:D6:C6
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:65:43:c1:9c:be:38:05:e6:57:c0:d9:ec:ce:49:86:3c:b8:
55:f4:ec:55:b4:52:c4:de:3e:79:d0:3e:cf:19:8f:ea:bb:df:
24:74:63:fa:9a:77:a1:73:dd:b1:c5:3a:09:8c:55:9f:29:01:
50:72:0f:b2:cf:cf:2e:13:c6:da:76:0f:59:c9:70:c3:a4:44:
f1:29:dd:9b:e9:ad:7e:16:49:b1:a5:40:47:a3:64:e1:7d:c9:
c2:a0:54:6f:53:a4:e0:9e:14:7a:ab:df:58:dd:9b:cc:87:9e:
41:2f:ac:4c:87:ea:57:f9:e8:38:4e:ed:00:13:4b:48:83:c2:
f2:24:e1:f6:68:c6:80:8d:7b:3a:56:22:d9:68:57:69:86:d7:
8c:eb:58:e3:ac:b9:cf:00:13:9e:c1:df:3d:6d:bb:45:1b:a5:
fa:9a:6c:43:ed:c5:05:b1:02:9f:37:16:ac:b4:7b:7c:ef:82:
f5:7d:1f:e0:7d:ba:24:bd:11:df:34:3d:26:51:a1:85:62:6a:
bb:97:0e:9f:2e:35:39:8f:b5:8a:93:c7:4a:02:92:b4:1b:f6:
01:b9:95:6c:11:a8:04:99:cd:13:80:b6:e3:b9:83:2c:0a:10:
dd:c1:16:d7:43:be:ca:4d:d1:b1:20:4e:31:a4:e3:14:ca:ee:
2a:b6:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:41 2025 by rpki-client