Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: +2zvYQEizGCCzPLCM5218EyWCWpkzlnX/TCr3XMMt/E=
Subject key identifier: DF:69:21:32:F8:D9:25:F8:41:47:11:B6:F3:D5:4C:99:0C:DB:94:6A
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019A71B78202CBA1D8DDC1B81EFD404029AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0F92
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: s748eo9aRrbryXp/gW9lEubzQ/dAc8aDp/1JYiQTuEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:82:02:cb:a1:d8:dd:c1:b8:1e:fd:40:40:29:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=df692132f8d925f8414711b6f3d54c990cdb946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:ac:87:63:09:5b:db:c8:a7:8b:93:43:75:
93:bb:c1:0c:08:40:7e:c8:16:e6:6a:50:dc:8e:fa:
fb:42:83:97:06:63:1e:e8:4b:32:9b:de:99:31:91:
10:32:ed:f1:ff:e5:5b:48:65:f3:a8:21:a5:2d:3f:
5c:a4:1e:86:d7:e3:14:1a:40:f0:d9:d8:f5:bc:0e:
e3:4b:ee:4c:e2:b5:9a:b9:cd:06:ea:2f:60:53:18:
fa:4f:c6:e9:32:10:e1:26:be:5e:7e:dc:00:4d:67:
6c:22:06:78:af:e7:c5:0e:f0:a2:c7:c0:27:98:fc:
8d:9e:9c:ba:ec:c3:d9:bd:2a:42:c3:b7:05:c0:06:
1d:2e:16:a4:39:89:28:11:b6:12:75:ea:e6:da:da:
f8:c3:1f:90:05:c0:95:c8:a2:8d:77:4d:d4:ab:b6:
b2:07:73:17:dc:9b:6d:c4:f0:f3:5d:bc:77:04:e4:
fa:05:f3:de:5d:ac:3f:dd:42:34:21:48:56:87:f5:
34:2f:5e:47:2f:28:f4:2e:02:33:63:bb:93:50:33:
dc:08:35:d9:dc:09:fc:18:63:cf:6c:57:44:a1:ee:
cf:19:3f:c5:e0:4e:37:8b:c6:9e:43:11:06:b3:b4:
13:f0:70:6d:89:ae:59:87:40:67:af:89:b4:20:85:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:69:21:32:F8:D9:25:F8:41:47:11:B6:F3:D5:4C:99:0C:DB:94:6A
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:df:8f:09:78:77:fb:50:eb:45:a1:20:be:1f:76:94:9d:65:
4c:e7:46:73:d4:08:c4:df:fc:ce:e5:87:eb:1f:a7:2b:64:04:
9c:86:1c:30:15:22:d4:be:cd:41:59:1e:c1:93:72:8f:13:fb:
65:04:46:98:5a:22:77:0a:6a:cd:8c:65:9c:66:7c:af:c1:34:
e9:56:b4:79:90:e7:2c:2d:bb:b4:78:3f:3d:79:75:6c:34:40:
d6:4c:81:74:c2:ce:0e:d9:62:fe:23:51:ff:17:08:62:cc:c1:
8b:c5:5e:ac:b0:68:c6:78:17:20:f0:2e:f3:34:fd:51:5b:58:
c5:4d:16:7e:96:c2:26:33:2b:3a:12:f9:8d:20:50:3d:05:03:
44:c2:59:1a:67:ed:de:98:ef:af:f9:5e:e1:36:d5:e4:f7:72:
8b:4c:04:fe:03:3a:8b:21:b5:4f:f1:cb:bf:67:40:e0:7d:08:
0a:af:07:2d:11:c3:2e:d3:06:9d:e9:5b:2c:cc:5f:80:2b:fd:
84:4c:09:94:d3:f1:4f:13:0a:70:ae:b9:85:e9:d2:50:8c:9d:
fa:ab:67:c9:c6:3d:3c:1d:a9:ec:2f:f4:d1:5b:f4:63:ce:6c:
9e:91:37:8e:fe:85:d4:bc:29:40:6b:78:57:a4:77:60:04:32:
71:72:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:35 2025 by rpki-client