Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: 2jJWH9SiTL1dscZ6XF4V34cjEo/ZLFh9jSZ76pLg6xY=
Subject key identifier: B1:5F:EE:51:2E:5F:D2:D3:5C:DF:CD:30:51:71:9A:89:44:EF:06:B4
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 01976471C2C536A9480C5C52464A17D1C83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 14:01:06 +0000
Manifest this update: Thu 12 Jun 2025 14:01:06 +0000
Manifest next update: Fri 13 Jun 2025 14:01:06 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: dGQRwr+SPSPOETtnhy7l/vjaq5WK8k/QGNEQRpYdvXE=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:c2:c5:36:a9:48:0c:5c:52:46:4a:17:d1:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jun 12 14:01:06 2025 GMT
Not After : Jun 13 14:01:06 2025 GMT
Subject: CN=b15fee512e5fd2d35cdfcd3051719a8944ef06b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:48:b8:60:cd:7c:f9:27:88:ea:3b:2a:c9:
6e:9c:db:c5:d3:e8:6a:da:17:32:f9:9e:78:58:8f:
46:62:93:c0:ea:0a:14:b3:60:e1:70:84:17:fd:43:
30:e4:27:62:61:c9:d0:c2:fd:74:90:b1:f4:28:ce:
fe:ca:ce:58:cd:45:fa:40:0c:16:8e:ae:f6:98:19:
51:3d:1e:28:2f:07:fc:02:72:00:0e:31:be:97:f3:
91:2a:39:6d:ce:a3:c0:9f:de:c2:f4:be:1b:57:8f:
76:d5:45:60:a5:5f:3a:f6:52:84:c3:b5:11:8b:2c:
16:36:6c:f0:5b:c6:d7:f5:34:1e:05:fa:82:8f:81:
f1:04:df:fc:0f:d7:f7:b8:14:2d:64:5f:24:ad:5d:
45:70:ea:e3:e7:bf:20:4b:48:95:1f:fb:66:82:27:
42:0c:8e:60:25:a9:c4:03:0e:3f:d5:65:da:f6:e2:
f3:ca:94:89:bd:71:7a:cf:90:05:c7:2f:fa:94:a7:
31:49:74:4b:45:e7:a4:b2:41:11:24:7a:81:a8:0d:
fb:7b:5c:59:d4:45:a8:b7:78:e6:86:05:47:80:3c:
04:0a:d2:69:c3:dc:86:02:45:ee:84:dd:e7:0f:d0:
15:0a:a1:ea:44:66:35:3a:b2:6f:63:0b:84:88:a6:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:EE:51:2E:5F:D2:D3:5C:DF:CD:30:51:71:9A:89:44:EF:06:B4
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:97:56:74:0b:38:fd:ce:07:92:4f:c7:96:b6:df:ee:7f:
03:16:83:31:a7:c5:22:cb:e9:83:3e:39:47:7d:7a:62:35:a7:
73:aa:32:39:d6:db:3c:ed:eb:9d:b4:0f:18:ef:56:81:df:ab:
bf:11:b1:4b:54:05:df:0c:74:12:5e:e4:49:aa:a5:8d:20:11:
5d:ab:d0:ea:1d:32:c0:2b:2c:84:c4:06:56:9f:39:08:40:30:
9b:70:51:d9:f5:c0:8d:2b:56:48:b7:10:f4:80:99:ed:35:56:
8d:0b:99:c1:a4:4d:1c:f6:d5:0f:3f:3e:6d:4e:5b:60:bd:bb:
b1:d0:1d:46:75:76:7a:88:cb:24:b0:e5:73:e6:60:0e:87:a5:
da:c8:58:a5:4f:c0:8a:00:90:87:fe:ee:9c:46:95:f2:74:a7:
ae:a2:82:98:73:85:48:86:83:71:d3:ae:39:92:79:54:b8:dc:
b9:e9:cf:4d:2b:9d:c0:02:68:42:2e:c3:e1:5b:86:92:95:ce:
47:79:d4:c0:9d:01:87:48:3e:17:19:76:dc:85:38:f0:84:ef:
f0:e5:2a:d1:80:d3:29:31:42:02:50:8a:63:9f:05:8d:52:f3:
8e:2d:fb:94:ac:1d:49:c3:14:e9:2d:86:35:ef:59:e8:9f:19:
a0:b3:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:31:26 2025 by rpki-client