Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: ZpEcpb2h0j0qOl1L1VZ3++JFS9aV8ew1CyXoWGYYWlw=
Subject key identifier: 64:C8:3D:81:4A:66:59:B3:83:FF:1D:99:70:D5:C6:72:F3:79:F5:96
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019750457E9685406F4807030AE6692B80D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0DF3
Signing time: Sun 08 Jun 2025 16:00:20 +0000
Manifest this update: Sun 08 Jun 2025 16:00:20 +0000
Manifest next update: Mon 09 Jun 2025 16:00:20 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: heCwqjI8rZdgBG+SecrObcSYgqM1/GI5szYfrc+IKGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:7e:96:85:40:6f:48:07:03:0a:e6:69:2b:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Jun 8 16:00:20 2025 GMT
Not After : Jun 9 16:00:20 2025 GMT
Subject: CN=64c83d814a6659b383ff1d9970d5c672f379f596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:42:c4:29:74:ef:e8:cb:43:ed:88:9d:fc:
12:c5:a3:13:ec:49:6f:48:ae:9b:64:05:53:4a:a1:
8f:6b:7e:5c:ce:35:cb:b6:2d:dc:68:1a:bf:89:8f:
81:8d:48:5e:81:57:ee:99:76:c5:1f:fa:a0:0a:9f:
23:ac:f8:6b:bb:08:c2:6a:0a:88:18:50:91:c8:80:
58:a6:50:3e:8f:ae:10:d3:5d:93:64:b1:80:3c:38:
19:95:4d:32:e5:15:7f:88:27:33:d1:d4:91:0f:b7:
75:e4:a4:02:86:06:67:ab:3d:89:b5:59:f7:4d:8f:
6f:c4:5e:80:64:40:e5:e3:64:4e:10:46:b2:0e:7c:
2b:bb:b9:9a:f3:18:21:75:9b:76:b0:07:95:8b:eb:
03:ad:96:94:50:e2:c9:31:08:75:66:4b:d8:18:5f:
6d:34:2e:2e:0d:79:6f:a5:0a:c1:75:80:b6:a7:e3:
af:0f:12:bf:f2:c8:74:29:be:c6:cb:fc:64:ec:ae:
04:6f:a6:21:ae:75:ee:83:e2:d0:c8:24:e1:31:ca:
d8:91:6f:f4:a3:a8:ea:7e:1a:9c:64:94:f3:d4:87:
20:ac:64:d8:a4:a9:2a:fa:26:a6:06:4b:6e:9d:fe:
64:57:c0:5a:92:8c:64:5a:46:c9:ab:03:3b:68:ef:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:3D:81:4A:66:59:B3:83:FF:1D:99:70:D5:C6:72:F3:79:F5:96
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:36:d4:79:d0:f0:19:fc:2c:10:7d:08:c0:26:e5:bf:bd:47:
a6:67:0b:f8:33:fc:f1:48:3a:10:3d:18:8c:47:5b:1a:82:af:
b0:b6:1b:3e:d6:42:df:22:36:05:6f:81:c0:7b:b5:8d:e7:e9:
98:a1:77:ed:89:68:ce:bf:ea:61:a7:1a:3a:59:31:17:54:5c:
ed:b5:7d:95:02:df:c5:0c:88:d8:12:9e:23:f0:6d:0e:86:6a:
26:f5:f8:7e:74:01:ac:c7:d0:f5:a5:c0:59:79:81:da:cc:e4:
df:c2:6f:d5:f4:53:84:98:17:4e:e0:ce:14:c4:12:51:a7:5a:
7a:b0:fc:f9:fb:3f:14:73:1b:e1:6f:e6:80:78:d2:5b:c2:a5:
68:ee:93:53:f7:86:bc:a0:3e:18:ce:81:3f:e3:b1:fb:c2:8b:
68:e7:28:a9:dc:22:84:ca:f7:de:7c:66:24:f9:4f:23:16:6a:
cf:ef:13:4d:d0:62:ec:a6:0c:18:9a:b0:5e:69:f2:24:16:35:
71:43:dc:54:68:61:9c:2d:a4:e4:12:6e:64:f6:1f:49:d6:69:
cc:3a:d6:01:f8:b2:33:53:4e:cf:a3:07:3f:1a:24:71:bc:d1:
9d:7c:f3:0a:3e:e9:88:a1:d1:fa:44:27:a0:d5:28:c6:14:3c:
7f:22:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:37:51 2025 by rpki-client