Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: WMAoTqPAmtT7yxpBsvdFF/nkWa4FnUSJAI3ecs17xYg=
Subject key identifier: 26:FF:EE:6E:7C:06:4E:27:B2:44:89:B3:52:D4:06:B3:84:8A:A8:4C
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 0199228C3F6227C97F4C73E7DA6ED6F8615F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: GG2+50+XTke715mG3oNMDZHAp/RqYmbop6i4xvmZ8Ls=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3f:62:27:c9:7f:4c:73:e7:da:6e:d6:f8:61:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=26ffee6e7c064e27b24489b352d406b3848aa84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:c7:6d:56:c8:19:41:d5:fa:3a:f0:9f:56:
a2:cc:ea:74:24:9e:3c:e8:eb:21:af:55:20:93:5e:
8f:f1:10:61:64:2e:96:00:8c:ce:a4:73:c5:8d:a2:
8d:15:c0:5a:20:26:9c:be:69:31:1e:eb:be:bc:0a:
0a:8d:88:51:6e:0b:f0:2d:16:74:ff:fb:e3:09:b7:
62:09:3a:35:e9:10:55:3f:de:9f:b5:bd:f6:c0:be:
9b:e0:68:e6:07:af:b7:c4:23:50:ec:41:91:f8:0c:
0b:7e:ac:6d:09:7c:96:92:79:03:f3:5a:80:7a:af:
54:9a:62:0e:9f:f0:1e:a7:05:c3:2a:9f:cb:cc:b7:
a3:88:6f:c5:23:ad:bf:d7:bc:2a:ad:e1:c1:6a:32:
45:8b:71:09:d7:62:d5:a7:d1:0e:6a:12:34:45:67:
43:b2:00:ad:b0:dc:18:3b:1f:8b:8d:90:dd:de:f4:
ac:15:56:f2:2d:78:a5:5f:19:5b:dd:bc:af:79:15:
66:23:3b:88:92:21:98:78:03:9b:f0:fa:1c:fa:71:
f9:8c:63:a6:66:de:a8:5e:89:ef:98:58:51:c2:79:
94:9d:97:68:80:38:73:f8:60:01:4c:d6:9d:bd:70:
4b:38:92:29:63:53:f3:18:6c:bc:ef:74:22:a2:b1:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:EE:6E:7C:06:4E:27:B2:44:89:B3:52:D4:06:B3:84:8A:A8:4C
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7e:4f:61:56:3f:ac:eb:d1:00:fb:43:f9:d7:d0:0f:9e:e8:
43:dc:3c:8d:76:ca:d0:a9:96:b6:48:2b:f1:bf:d0:e9:f5:93:
1e:7a:d3:f6:c7:55:3e:a7:93:c5:53:a1:b9:34:8d:65:36:0c:
27:1b:82:35:c9:1b:f0:cf:37:28:2a:96:6e:ff:40:90:34:1d:
de:23:5e:4b:01:ed:1f:ad:3d:c4:e3:e1:51:57:80:01:eb:0c:
38:9c:e0:35:8f:97:fd:2e:79:53:6f:d6:52:25:c9:bd:d4:08:
b5:ff:1e:90:0b:00:55:fd:e5:21:77:87:7c:c2:b5:4d:be:34:
41:8b:b2:d9:c8:49:6a:09:b1:65:96:7f:b6:f5:38:31:98:f6:
84:7a:ba:da:82:d6:5b:b9:2f:b0:e2:bd:ef:c0:05:1d:4a:3d:
f4:86:21:7d:e2:1a:5b:ce:a8:55:69:8b:76:e0:93:e3:ca:89:
d7:53:a9:39:ec:5f:ee:96:90:49:dc:05:13:24:79:47:e4:f3:
ce:22:57:c0:8a:87:cf:17:ec:78:36:50:7f:ae:72:33:0a:64:
68:9a:07:dc:d2:c8:87:08:f5:67:1f:b5:15:2d:2f:a4:4b:91:
4a:7e:8a:e7:e1:03:75:24:fd:a1:e9:e7:82:d7:07:cc:ae:2d:
07:0a:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:01 2025 by rpki-client