Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: FB5SAbD/eEF03/nfTEhCyL3hvzdd9P1eSxKq/zR6ceE=
Subject key identifier: EC:0B:C3:51:3D:88:2F:D8:E2:48:8E:E0:7C:92:80:EC:AA:FA:AB:8D
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 019A7293B06F27FE7B9933FDCBC7C668719A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 11:01:12 +0000
Manifest this update: Tue 11 Nov 2025 11:01:12 +0000
Manifest next update: Wed 12 Nov 2025 11:01:12 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: CCW23hY0kcIIV0JzPpPvplQVwvCpevWrQLlqsIttMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b0:6f:27:fe:7b:99:33:fd:cb:c7:c6:68:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Nov 11 11:01:12 2025 GMT
Not After : Nov 12 11:01:12 2025 GMT
Subject: CN=ec0bc3513d882fd8e2488ee07c9280ecaafaab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:c7:3a:dd:87:d1:fe:fa:c9:37:4d:69:02:
04:9c:ef:3a:f5:de:c5:dd:c8:b6:2d:43:7f:e0:28:
1a:84:32:01:15:88:b1:3a:20:4b:37:2b:6b:29:e2:
04:c4:2b:28:a4:5c:95:a6:ac:f6:83:fd:3d:92:66:
00:e3:d7:c2:c6:d3:30:2e:f1:61:ae:e8:ed:42:0c:
91:b2:08:f9:52:9a:54:5f:e3:3d:cd:2d:17:63:9b:
f5:89:3e:22:71:e6:80:0e:30:1e:84:6e:0c:90:ae:
ac:90:34:0a:05:a1:43:6f:71:26:c1:9d:33:bb:2b:
21:3d:44:b5:a6:bd:0c:1b:d4:9d:7e:0e:80:bf:6e:
9d:08:88:c9:28:00:78:05:08:df:53:2b:bb:71:e5:
00:07:bb:63:fc:eb:d9:a2:3b:92:ca:86:96:c3:04:
af:3c:df:06:a8:b1:c3:7f:fa:90:81:ff:ec:b8:05:
33:1d:47:04:e7:d6:6d:02:5d:6d:16:d4:ee:82:be:
0c:bd:66:48:24:94:d0:30:73:a8:73:72:76:d4:94:
3b:bf:e7:85:8a:05:fc:dc:ba:94:cf:50:97:a3:eb:
63:20:3c:f8:fc:09:62:25:7e:fd:19:55:ea:59:2c:
34:fd:d9:a5:af:90:14:27:b6:a9:13:f5:08:e0:b5:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:C3:51:3D:88:2F:D8:E2:48:8E:E0:7C:92:80:EC:AA:FA:AB:8D
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f0:60:5a:c8:68:5a:fc:4f:ef:bd:a9:9e:9b:0e:da:49:59:
b2:24:ba:ea:63:9a:e0:e4:f3:12:4b:b5:5b:ee:23:3e:ca:68:
fc:1e:f4:a1:f2:2b:96:ed:26:62:b8:88:a0:99:6c:c9:1c:d2:
4f:c3:19:20:78:73:13:68:e0:99:79:82:63:e4:c8:de:0a:ec:
2e:44:e0:ad:c8:f9:37:97:fb:19:c9:e7:84:fc:de:73:fc:c0:
66:d1:d7:c2:cb:ca:0f:d8:5a:94:d9:d7:b7:1f:5a:c5:45:3d:
7e:3b:05:e7:d9:9d:08:4d:e7:67:68:fe:f7:1e:ae:38:e6:37:
5c:b2:b5:80:d9:d7:ec:c1:8b:27:5b:78:e6:49:09:ea:ef:4c:
86:56:d3:7f:a4:63:13:c9:8c:ab:a3:38:03:26:6c:2a:85:c1:
f3:48:28:87:21:24:65:8d:04:be:20:e2:91:8c:e3:8e:15:3e:
f0:26:74:78:13:14:ac:46:b8:16:c9:4a:52:16:16:89:4a:e3:
75:d4:be:71:af:c5:09:f5:d3:29:df:96:39:86:74:64:a4:49:
37:9d:b9:d9:50:38:e6:4f:c3:0e:57:3c:15:ca:6d:16:d6:eb:
1f:3a:d9:95:58:35:1e:06:ed:0e:92:27:67:b9:c7:a1:1f:93:
11:70:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:17 2025 by rpki-client