Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: GglS222PcQukvVMkkGxeNbC+HEoiUAovzOQweI2q8yo=
Subject key identifier: C9:C5:32:4D:6B:08:4B:57:66:AA:F4:F0:5E:69:51:36:D0:41:A0:FE
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019754FE1CF454FABACBD3C007A569C92CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 14:00:29 +0000
Manifest this update: Mon 09 Jun 2025 14:00:29 +0000
Manifest next update: Tue 10 Jun 2025 14:00:29 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: KGkJ0IlNDzZtU6IfNdmet6U4f964Zx0e1WYNhCLelhU=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:1c:f4:54:fa:ba:cb:d3:c0:07:a5:69:c9:2c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jun 9 14:00:29 2025 GMT
Not After : Jun 10 14:00:29 2025 GMT
Subject: CN=c9c5324d6b084b5766aaf4f05e695136d041a0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:68:4c:ce:fe:1b:7a:c6:35:ae:89:d4:c6:
55:5d:96:9c:17:b4:3f:f2:de:7e:5e:63:c4:6e:92:
41:e4:04:c8:6d:16:c3:e9:6a:be:0f:82:30:f4:7f:
73:8c:79:43:b5:43:66:42:c8:34:95:5f:23:bb:30:
86:58:d8:c0:02:79:7d:c1:3f:47:0a:51:51:ca:38:
2e:ef:ee:39:e2:f2:6a:f0:a7:3d:6c:c0:82:26:c0:
30:b4:f2:1e:aa:a8:cd:46:ac:41:b5:77:17:20:53:
98:99:11:1a:73:f1:af:ee:e6:f1:eb:9a:e7:f1:0f:
5b:59:e7:37:98:09:b6:75:14:43:e2:15:21:15:ba:
44:e8:c6:f9:f1:1f:03:03:2a:20:f2:4e:92:81:38:
98:65:01:4f:08:a5:ae:46:35:2f:f6:78:bb:d1:9c:
74:a6:d0:36:27:4b:e9:f6:fa:58:35:72:f0:11:dc:
4d:f8:42:57:ac:f2:20:d6:a4:e1:8e:84:11:08:30:
ed:05:7a:c7:1a:9a:d6:10:52:c1:9b:65:a4:1d:c1:
d7:3c:c3:ce:06:67:03:ad:47:a5:0e:22:a4:bd:68:
ca:30:0e:4a:8d:18:f9:06:1f:fa:57:3f:c6:41:f9:
c7:f6:1f:8e:9b:fd:bc:7c:00:41:93:79:dc:63:2b:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:32:4D:6B:08:4B:57:66:AA:F4:F0:5E:69:51:36:D0:41:A0:FE
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b5:a1:a7:99:72:0c:82:7d:6b:d7:46:99:a7:d6:6c:3c:92:
5b:5d:fd:91:15:fb:45:56:9d:0d:4d:bb:1b:ce:e9:bd:ec:6f:
41:47:73:ce:22:30:4c:8a:70:72:55:38:f6:ff:2e:c7:26:b0:
3a:cf:52:09:ca:92:3c:6f:36:62:d1:25:0e:59:ff:c7:67:77:
f4:81:15:4f:bd:63:ea:85:94:8d:2e:8a:31:35:c2:03:80:95:
80:3c:b2:3b:fc:9f:90:38:60:72:bb:21:4e:d5:10:49:b5:3f:
3c:5a:ca:e6:9f:5a:45:0f:05:1b:f3:7e:c6:b2:bb:60:7f:6f:
9d:17:12:fe:6f:d0:2c:12:1b:1d:96:7d:2a:ae:93:0e:a3:87:
d9:19:2b:87:07:64:d8:1b:3a:4c:cf:f3:69:96:fa:39:d7:ad:
46:95:3c:3a:f9:55:17:eb:23:39:ac:46:0c:84:6f:ac:dd:40:
c7:ae:29:74:7f:ce:23:af:3d:9a:82:c4:9c:3b:c2:b9:71:68:
9b:35:4c:91:02:07:03:93:77:a3:21:64:89:60:9b:2d:ed:f8:
fc:1d:19:ad:31:66:61:9e:06:39:55:1a:62:6b:e2:90:aa:83:
9a:90:cc:1b:22:05:1f:f0:46:cc:69:2f:6c:e0:51:eb:7f:62:
47:a8:b0:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/hz0VPq6y9PAB6VpySzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjUwNjA5MTQwMDI5WhcNMjUwNjEwMTQwMDI5WjAzMTEwLwYDVQQD
EyhjOWM1MzI0ZDZiMDg0YjU3NjZhYWY0ZjA1ZTY5NTEzNmQwNDFhMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuloTM7+G3rGNa6J1MZVXZacF7Q/
8t5+XmPEbpJB5ATIbRbD6Wq+D4Iw9H9zjHlDtUNmQsg0lV8juzCGWNjAAnl9wT9H
ClFRyjgu7+454vJq8Kc9bMCCJsAwtPIeqqjNRqxBtXcXIFOYmREac/Gv7ubx65rn
8Q9bWec3mAm2dRRD4hUhFbpE6Mb58R8DAyog8k6SgTiYZQFPCKWuRjUv9ni70Zx0
ptA2J0vp9vpYNXLwEdxN+EJXrPIg1qThjoQRCDDtBXrHGprWEFLBm2WkHcHXPMPO
BmcDrUelDiKkvWjKMA5KjRj5Bh/6Vz/GQfnH9h+Om/28fABBk3ncYys/HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnFMk1rCEtXZqr08F5pUTbQQaD+MB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrWhp5ly
DIJ9a9dGmafWbDySW139kRX7RVadDU27G87pvexvQUdzziIwTIpwclU49v8uxyaw
Os9SCcqSPG82YtElDln/x2d39IEVT71j6oWUjS6KMTXCA4CVgDyyO/yfkDhgcrsh
TtUQSbU/PFrK5p9aRQ8FG/N+xrK7YH9vnRcS/m/QLBIbHZZ9Kq6TDqOH2Rkrhwdk
2Bs6TM/zaZb6OdetRpU8OvlVF+sjOaxGDIRvrN1Ax64pdH/OI689moLEnDvCuXFo
mzVMkQIHA5N3oyFkiWCbLe34/B0ZrTFmYZ4GOVUaYmvikKqDmpDMGyIFH/BGzGkv
bOBR639iR6iwqg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:51:51 2025 by rpki-client