Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File: GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier: SRmPcxDbkBCs7y+IKBBGU/vS7YNCddr7bY4ulqMutW4=
Subject key identifier: D3:18:14:C0:49:57:94:2C:46:5C:9C:5D:D8:2F:E4:BC:9C:1A:45:58
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial: 019746300C3189E6084210E07C0B76B3652A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number: 1138
Signing time: Fri 06 Jun 2025 17:00:43 +0000
Manifest this update: Fri 06 Jun 2025 17:00:43 +0000
Manifest next update: Sat 07 Jun 2025 17:00:43 +0000
Files and hashes: 1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: GAK2KJOUYpvZEwbFhsOPFS7Pc+1urG/qHvVdiZkY43M=)
2: PfFy3e8LNIXwxdL8OuYhM9z12Ws.roa (hash: 8+uM2+g15li/FppVigQneM82V/zGTOIgt52B/js9MAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:0c:31:89:e6:08:42:10:e0:7c:0b:76:b3:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
Validity
Not Before: Jun 6 17:00:43 2025 GMT
Not After : Jun 7 17:00:43 2025 GMT
Subject: CN=d31814c04957942c465c9c5dd82fe4bc9c1a4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:80:c9:d6:36:e4:b0:c5:67:62:64:80:fb:
83:9f:25:a4:a3:10:c9:b3:63:0e:d5:4a:4d:b7:7b:
1d:c1:1d:66:15:c8:e4:ea:45:62:1a:3e:98:40:0d:
7a:53:46:40:d4:85:02:8c:7d:62:28:7f:2a:93:3e:
e0:1e:6e:69:a3:0f:7f:b2:22:46:d9:68:cd:7a:4b:
63:78:1e:36:19:ba:0b:10:c3:1a:46:12:7d:d8:28:
7d:66:89:ee:8e:3b:62:66:b6:89:a8:58:61:9b:82:
8f:8c:ba:98:98:93:7c:6c:73:25:73:bb:a3:5b:2f:
17:20:4f:ba:09:e3:9f:36:b9:78:6b:0a:70:46:c6:
f2:4f:08:a8:07:ac:b3:ed:70:ae:fd:61:82:63:f5:
e1:af:40:4e:58:ce:1d:42:4b:9f:fc:63:6e:84:0e:
f7:26:ff:5f:9e:94:86:b0:53:74:7d:ef:c5:f9:fe:
bc:34:7f:22:cb:e4:94:92:51:c7:95:d3:fa:2a:99:
74:0c:f9:29:f8:69:ab:df:1d:b0:e8:61:ad:46:13:
ea:cc:82:f6:a2:78:f2:1f:0a:81:c9:29:ea:3e:66:
16:23:54:41:10:9a:67:6b:2f:b3:d1:a6:a9:6c:d2:
f4:b9:e9:c3:7f:70:a0:5d:e7:d0:02:5c:52:99:31:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:14:C0:49:57:94:2C:46:5C:9C:5D:D8:2F:E4:BC:9C:1A:45:58
X509v3 Authority Key Identifier:
keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d0:be:14:1e:30:4d:c9:19:d1:75:7d:68:0b:9d:eb:56:a2:
54:a3:63:0a:39:6f:10:fe:cf:d0:f4:90:87:68:b6:a4:d4:ff:
55:0f:b3:bf:e7:81:6c:46:36:70:79:18:35:64:43:63:a3:6f:
a7:6a:3d:95:97:86:2d:38:c6:4f:62:7c:ba:2a:35:6a:58:e7:
83:d7:0c:3c:6f:dc:b0:b5:b8:12:ec:ac:9c:e9:ef:92:b6:88:
25:59:e5:26:89:9e:5d:e7:2d:6d:85:2c:38:76:2e:99:3d:e6:
85:be:18:48:00:d1:7b:0a:7a:47:2b:d8:03:74:28:97:5a:8b:
28:68:1f:ce:61:32:c2:73:5b:c7:9e:17:54:71:d0:8c:65:a1:
bd:71:e4:9b:39:89:66:43:86:86:a6:6d:f0:fc:e8:00:8c:31:
ba:9e:52:ad:2a:51:64:8c:fb:cc:2c:38:df:ec:34:03:e3:25:
48:e4:16:5b:07:c9:b1:98:d9:ad:5f:9b:65:ed:7f:47:25:1f:
7a:46:4a:39:05:ad:a2:b9:9c:dc:fb:5f:53:32:10:79:0a:7a:
9d:f0:e7:4e:4a:8f:4f:25:df:f8:07:53:17:7c:b6:ae:2d:57:
60:3d:52:d2:82:a7:fb:47:b3:0c:93:80:77:00:4c:05:0a:4a:
45:36:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:38 2025 by rpki-client