Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: mqk5ST27R8mW9iXfbjnkvt+7h1ex81FZpZbzSzAxr98=
Subject key identifier: 30:9A:1F:87:A7:8A:BF:59:10:D3:64:1B:CD:DE:1E:16:B3:18:3B:73
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019923A0BA0BA20EC2DAD513DC7028B2F620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0EE5
Signing time: Sun 07 Sep 2025 10:02:39 +0000
Manifest this update: Sun 07 Sep 2025 10:02:39 +0000
Manifest next update: Mon 08 Sep 2025 10:02:39 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: X/71Kp+2OOBfNad5n0cAQHA2Ykb8GC2bQE6Tcr/Mezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ba:0b:a2:0e:c2:da:d5:13:dc:70:28:b2:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Sep 7 10:02:39 2025 GMT
Not After : Sep 8 10:02:39 2025 GMT
Subject: CN=309a1f87a78abf5910d3641bcdde1e16b3183b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:d0:24:4c:e2:04:c7:81:f1:22:dc:31:ca:
3b:6a:e7:ff:c9:6b:e7:be:37:0e:6a:63:47:2f:1a:
f3:ce:c5:ed:a7:0a:df:30:b2:a0:19:90:64:79:64:
c1:a5:db:8d:30:6d:97:a8:67:bc:bd:17:0e:9b:a8:
1d:ef:73:d7:8a:d5:82:87:3a:c1:73:bd:bc:a0:0b:
2a:09:1e:b0:1c:a4:0e:12:5c:50:8f:be:ee:09:78:
e4:35:03:1b:49:05:2e:65:0d:88:8d:a5:f3:f3:56:
1d:11:1d:1d:b4:79:d0:cf:0c:d7:98:c6:3b:43:83:
cd:ac:a4:c8:0b:50:36:e0:18:66:3e:e8:37:e4:d5:
21:59:be:e9:ce:90:38:fb:1e:f4:93:8a:05:a5:e1:
1e:5f:ed:45:3b:7a:40:b0:b4:26:b6:ec:97:9b:55:
a7:71:a9:44:61:8e:b5:94:20:6c:9b:2b:92:26:17:
5c:7e:1a:32:68:cf:95:30:7e:09:35:b6:df:85:54:
4f:47:78:4d:cd:90:74:dc:d3:1d:9a:84:6d:0d:51:
62:94:6c:61:b7:03:21:7e:06:5e:03:7a:68:75:13:
2f:da:de:7a:c7:f8:53:e2:c5:ff:13:3a:8f:4a:54:
94:7d:76:39:8a:6c:82:01:3b:32:c1:aa:8b:f0:de:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:1F:87:A7:8A:BF:59:10:D3:64:1B:CD:DE:1E:16:B3:18:3B:73
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:18:79:a7:3f:cb:d2:ee:8d:2c:b0:7e:fb:ba:9b:36:3f:e8:
e1:bf:bf:4e:5e:d0:aa:14:fc:2e:41:c3:b0:ba:6f:7d:8a:96:
81:c0:eb:2e:4d:52:cb:72:c4:8a:69:0f:6b:6d:2c:94:8a:8e:
c9:af:76:e4:69:c5:91:b1:b2:cb:31:ac:41:1d:0f:a6:e0:f8:
c4:62:ab:34:b4:68:bd:56:24:11:20:ed:fa:72:b8:a8:75:2a:
fe:f3:55:a4:e1:7a:d3:d9:a6:d6:93:0b:ef:fa:be:19:81:87:
c1:f6:21:e2:53:74:df:a8:12:f2:d5:91:5a:2f:98:45:51:fe:
1a:e8:6f:d8:3d:13:c1:7c:3e:fe:00:4d:2e:12:04:bf:3b:81:
e2:25:7b:c1:01:b1:9d:58:6a:fe:e9:eb:5a:13:dc:0e:af:9d:
fa:88:57:f1:6d:4e:e1:59:31:59:9b:61:d2:0b:a5:53:b8:ab:
b8:be:d3:1f:92:e2:d6:16:96:77:5c:26:69:74:61:f3:cc:60:
37:78:17:c5:ce:fb:64:8d:4b:4f:0d:81:10:4d:46:b8:0a:77:
00:2a:27:70:68:d9:47:c8:31:7a:f1:cd:33:68:58:84:a2:ba:
71:d7:9b:fc:05:f4:fd:2d:c1:e8:3f:36:b7:53:71:ce:9a:9e:
82:64:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:00:32 2025 by rpki-client