Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: hPZw1p/lyBeI07giFN6vLFmwoD3X9WeZFGNJZrMspa0=
Subject key identifier: D0:6E:94:2C:87:9A:A7:8A:97:AA:61:A9:87:33:3D:C0:FF:47:3F:EE
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019A2930953E265C350E62CEF6C90147AFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 05:00:41 +0000
Manifest this update: Tue 28 Oct 2025 05:00:41 +0000
Manifest next update: Wed 29 Oct 2025 05:00:41 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: AmbiDtAh3KQvUGqZ9dOXPdMO4jYUTmBsO47xBokA4e8=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:95:3e:26:5c:35:0e:62:ce:f6:c9:01:47:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Oct 28 05:00:41 2025 GMT
Not After : Oct 29 05:00:41 2025 GMT
Subject: CN=d06e942c879aa78a97aa61a987333dc0ff473fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:fb:ef:7f:0d:ed:95:f0:29:5b:65:3a:80:
b4:d7:b0:6f:cd:90:34:d6:36:f9:7b:d5:22:55:ae:
42:bc:e1:2f:ae:69:a6:b9:3b:a2:b5:dc:42:e9:18:
27:4b:81:04:26:23:61:11:63:6b:6a:dc:e9:50:3b:
56:f4:0f:cd:45:27:c5:fb:5a:1b:b3:5d:aa:e3:4d:
3d:84:4c:4e:5d:a9:c4:5c:50:91:0b:a9:6e:64:63:
12:11:eb:07:47:05:da:1a:a4:04:f7:43:f1:0d:89:
44:24:a7:cb:4f:7b:ff:ca:75:9c:8e:70:f6:d1:46:
43:32:c7:99:ed:b0:14:13:94:57:d9:93:ca:4f:02:
f5:5d:fb:58:9b:d3:cc:29:81:d3:2e:54:da:0b:94:
39:62:b0:40:1f:14:38:11:7a:23:8f:92:a9:c0:1b:
1a:4a:ce:3a:a3:57:c4:0e:c7:7d:70:d5:59:1c:df:
eb:2a:d9:b3:bd:7e:fb:74:5a:bb:3d:50:ed:81:2c:
02:7d:3b:b0:a9:0a:c0:c2:76:a9:b8:f4:13:cb:fb:
03:49:af:e9:c2:52:28:2c:6c:d6:cf:7a:95:dd:4a:
a5:6e:aa:27:cb:7d:a1:b8:4f:8e:84:b1:f2:1a:fc:
f1:96:d4:7f:51:15:89:5c:c0:73:13:7e:b9:34:da:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:94:2C:87:9A:A7:8A:97:AA:61:A9:87:33:3D:C0:FF:47:3F:EE
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9e:3c:bf:38:8f:7c:42:ca:26:78:bd:56:2e:f2:e1:5a:a0:
56:59:52:01:3c:fd:c0:9d:f2:85:4d:7d:1f:c8:10:7a:f1:13:
df:c3:00:2d:21:a3:d3:fc:37:d4:06:5f:e8:da:b6:7c:dd:3d:
96:7f:54:5d:a4:96:9c:e1:a9:33:d9:1e:3d:e4:85:97:2f:b1:
2f:f9:02:31:e0:88:d5:ee:48:06:d9:b5:64:a3:7c:33:79:20:
20:b2:14:28:99:ce:a1:e3:15:9d:c6:44:60:25:3b:a3:d1:b9:
06:89:de:b7:a6:ed:89:c3:f6:80:aa:1a:f7:11:83:0b:3a:e7:
48:35:66:df:1a:a1:19:60:04:e6:bd:73:dc:8a:0a:c4:17:75:
0d:18:d7:cc:54:6b:e8:f6:88:34:d5:32:35:92:e6:04:e4:fa:
d3:38:14:a4:82:ed:5b:05:4d:80:1e:83:5a:0b:8f:a6:14:5d:
04:f8:49:78:50:b3:9c:4f:aa:72:cc:cd:ef:c4:17:d1:c8:44:
c5:30:b1:22:5e:80:ac:0d:0f:cc:02:e5:ff:5e:0a:7a:3c:c1:
0f:3b:d2:78:f2:b7:45:f8:d1:6d:0c:4c:2e:ab:c5:26:b8:05:
71:ff:7d:47:73:00:b2:e3:b6:ff:8e:03:38:bc:31:0b:7c:13:
b6:c7:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:41:14 2025 by rpki-client