Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier: 5poK2Vt05kqcnB3PdY1R1ZEAw2UYRHxAbcx5hNslpu8=
Subject key identifier: 55:D5:9D:3A:BB:FB:48:67:74:0D:5C:C1:32:C5:DD:D2:80:89:29:FE
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 019A72934EF809C71E24A6E409302D6B5C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=)
2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: tEbBOOLIP90AmD2t9LutPWcPFamMUbSKqY/FL0qFPJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4e:f8:09:c7:1e:24:a6:e4:09:30:2d:6b:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=55d59d3abbfb4867740d5cc132c5ddd2808929fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:d4:dc:0c:02:34:ce:a7:31:9d:aa:16:7b:
ae:e9:9a:60:08:9e:4e:eb:fe:16:d8:6a:a6:57:3a:
75:7e:c5:5c:92:4a:e7:b0:3b:9a:45:be:c0:d4:21:
45:55:d6:72:31:7a:8f:ab:e6:4d:f0:07:3c:73:18:
80:27:67:1e:21:c5:fa:e0:c1:33:ff:06:91:29:e5:
65:36:8c:9b:30:46:16:fc:61:ef:79:ee:0e:d4:4f:
6e:33:b5:6a:b7:21:3a:8b:0c:26:e0:c2:f3:00:5f:
ed:25:36:bf:e5:d6:12:66:77:14:83:62:87:a3:f4:
4d:4a:2a:28:00:69:b6:52:ea:32:23:25:38:bd:44:
e9:cd:d1:0f:b6:5e:4d:65:f2:5f:5d:72:32:d5:a1:
fc:05:a2:83:c8:12:3c:97:ff:8c:52:54:68:73:d0:
10:8a:6f:d8:be:c7:eb:b1:f8:af:64:7f:82:f5:87:
f8:51:48:c5:18:92:51:33:85:21:6f:d6:e5:42:15:
5f:1a:94:fa:ff:4e:3d:32:f2:05:dd:45:da:9f:1e:
f9:61:99:71:1b:2c:f4:3d:4e:41:61:cd:d2:46:31:
29:1d:61:7f:bd:c5:1a:23:9d:12:fd:6a:3e:3e:6e:
9f:b9:54:07:eb:5e:50:8a:58:cc:67:7e:29:2f:f5:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:9D:3A:BB:FB:48:67:74:0D:5C:C1:32:C5:DD:D2:80:89:29:FE
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:3b:16:c3:b9:ec:7a:27:03:aa:92:34:14:67:a4:40:42:
20:ab:71:63:33:60:13:22:25:ea:39:c7:9f:3d:3f:fc:2b:ba:
a3:41:bb:40:2c:3f:c9:fb:b1:0b:88:2d:60:f8:11:65:37:9f:
92:9b:0d:cc:b3:0b:d8:54:2b:ac:84:bf:dc:fc:fa:e8:44:14:
45:7d:f0:74:f0:ac:17:6a:b4:e3:af:be:37:75:06:74:83:4d:
35:3e:ec:0b:02:bd:a4:0a:8b:8c:56:8b:e2:91:a1:89:51:1d:
ab:4a:5d:57:5b:3b:1b:f7:11:91:b0:95:67:38:1f:f5:e8:61:
17:f5:d2:c0:93:6a:b5:23:b8:14:f4:0e:b2:c4:4a:b2:44:3d:
f7:27:8a:b1:fc:da:53:a6:17:f2:da:f0:ec:83:e8:11:fd:7d:
71:eb:d2:9d:1a:b5:b7:16:c6:68:d6:73:74:ee:1e:eb:ef:b8:
40:f2:3b:e8:d3:ed:c1:66:a7:35:44:ab:32:2c:d6:ef:0b:2d:
37:f6:d1:1a:2d:15:12:88:22:70:9d:79:65:b8:02:69:81:97:
de:aa:74:5a:84:7d:a2:87:9a:85:59:6f:93:eb:76:4d:7f:4b:
84:6a:94:08:82:c5:fe:ce:7b:3c:53:f2:fa:a9:a6:e6:b5:02:
81:bb:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:00 2025 by rpki-client