Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File: GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier: z2RQ5fi/FMpmM6n62GCm/OqAqrDHEuii0e2tN5PoN4Q=
Subject key identifier: 3E:3D:87:51:34:18:CE:8C:59:8F:1A:91:3E:B6:3B:E7:26:BD:88:E2
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial: 019923313D21F9E44F1DBEB46D76A19E76DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number: 122F
Signing time: Sun 07 Sep 2025 08:00:53 +0000
Manifest this update: Sun 07 Sep 2025 08:00:53 +0000
Manifest next update: Mon 08 Sep 2025 08:00:53 +0000
Files and hashes: 1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: ZnNaX0PIw7x1o2Hd3ib3YP8T58e6xLMvfjEOw/x1sfA=)
2: PfFy3e8LNIXwxdL8OuYhM9z12Ws.roa (hash: 8+uM2+g15li/FppVigQneM82V/zGTOIgt52B/js9MAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:3d:21:f9:e4:4f:1d:be:b4:6d:76:a1:9e:76:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
Validity
Not Before: Sep 7 08:00:53 2025 GMT
Not After : Sep 8 08:00:53 2025 GMT
Subject: CN=3e3d87513418ce8c598f1a913eb63be726bd88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:ed:47:70:2c:74:32:2b:d2:1b:d6:60:62:
79:1d:15:fe:75:16:5e:38:f3:b9:36:02:52:ad:55:
f8:42:2c:e8:d3:28:95:21:14:8b:1f:d3:63:a8:1f:
91:ba:b9:7d:c0:0a:ef:59:d3:d3:8f:42:4d:2d:85:
52:e6:eb:7c:e7:79:ec:3b:28:0c:d3:2e:48:b6:cc:
de:58:09:48:cb:27:98:87:fd:27:d2:e6:5f:4f:86:
d3:2f:a2:0f:73:02:b4:23:09:e0:a9:f5:2f:8e:4a:
3b:2f:74:46:6c:4a:29:7d:df:40:cf:7d:9a:3d:1d:
88:17:0e:35:53:9b:62:51:d6:14:3b:07:26:88:b5:
cf:c0:d5:32:f8:f3:69:62:4d:61:64:24:b7:ff:56:
7a:1e:c2:f9:02:f2:48:9c:af:c1:f6:13:45:fd:bb:
ea:0b:da:cf:67:bd:33:a2:8b:a6:25:fa:51:3f:65:
e3:33:ec:40:7d:f6:2a:51:33:6d:e3:03:8e:be:af:
17:6f:32:d2:89:01:55:07:cc:f4:dd:62:56:84:6c:
02:be:67:28:5b:82:77:c1:26:8e:a4:54:34:68:aa:
72:21:d3:e7:87:0b:4a:0a:1f:d3:61:76:4f:33:34:
94:d6:2f:9a:33:1f:6d:a7:10:80:0a:82:bb:1e:d4:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:87:51:34:18:CE:8C:59:8F:1A:91:3E:B6:3B:E7:26:BD:88:E2
X509v3 Authority Key Identifier:
keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6c:79:bd:b9:e8:f4:3e:a3:0d:d5:e4:4c:ee:09:4c:ce:d0:
aa:f6:98:f2:32:f3:cd:21:57:b6:9a:dd:ab:6d:33:e5:07:02:
29:2e:3d:7c:9b:f5:ee:7e:24:06:9c:5f:68:03:eb:6e:af:24:
0b:76:76:09:df:ad:a9:b6:7c:23:a2:82:89:ea:e3:0e:fc:7d:
ee:c6:3d:87:7a:05:bf:0b:ef:9f:cd:13:40:b6:81:10:08:ba:
f2:0e:0e:40:13:24:e0:62:76:ae:4d:54:9e:72:d7:46:df:83:
d4:f3:12:69:a0:e4:fa:c0:eb:73:6b:2e:b8:1f:4a:ef:ed:e0:
13:5e:dc:c3:ce:18:b0:e4:d3:57:8f:93:40:bc:41:f9:84:32:
a1:d5:94:38:54:30:2e:9a:6f:b4:2c:0a:eb:19:68:90:40:77:
9f:84:4d:8f:af:12:d7:19:a7:e0:81:b3:9d:b9:06:fc:32:ab:
91:2a:39:f4:7e:eb:a1:af:98:45:f9:94:10:b2:8b:a2:6a:eb:
68:5e:94:bf:cf:f9:f9:d8:25:8b:60:c4:31:b7:78:57:c8:ce:
d1:e0:15:56:5d:49:0c:5b:c2:39:35:ff:58:dc:cc:7d:a8:77:
94:3a:d9:ba:fe:11:2f:c1:dc:e9:6c:4f:c9:40:e9:6a:5d:6e:
07:0e:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:37 2025 by rpki-client