Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: iYvr59eugMZ3YFg5i7ng5XMRhUMA5yeFuU+nNXRGNIc=
Subject key identifier: 03:45:28:3C:D3:E6:9E:41:D6:90:0A:57:42:F5:0B:21:2B:11:4D:BE
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 019A4DAAD60C6467F12AF75475E48316CA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 07:00:32 +0000
Manifest this update: Tue 04 Nov 2025 07:00:32 +0000
Manifest next update: Wed 05 Nov 2025 07:00:32 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: xYcKzYdHWQuVK+/KUf8yha/42mC3UjXBfgOQ5yA6Xbs=)
2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d6:0c:64:67:f1:2a:f7:54:75:e4:83:16:ca:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Nov 4 07:00:32 2025 GMT
Not After : Nov 5 07:00:32 2025 GMT
Subject: CN=0345283cd3e69e41d6900a5742f50b212b114dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:fc:00:15:25:05:c4:09:1d:6d:15:45:8e:
dd:3e:5f:91:30:c4:32:15:f6:5e:af:62:b7:a4:e1:
23:3c:5e:d3:d8:0d:1f:ad:89:3b:77:81:b3:34:4a:
03:ac:b8:58:6c:44:66:74:e0:b5:11:03:f5:77:0c:
3b:20:83:99:7f:88:52:2b:45:73:cf:83:56:51:b8:
8b:10:8d:2b:b4:ab:74:33:4a:d9:31:24:6e:1b:14:
2b:24:18:7b:dd:23:e7:19:b5:02:98:59:30:4c:11:
3a:02:66:15:fa:26:55:82:92:64:46:0d:9b:d9:ad:
e5:b9:e4:0f:63:b4:6a:11:87:81:ed:80:33:80:83:
24:30:e6:83:28:32:db:b9:1b:89:01:dd:95:3f:3a:
a8:1d:9e:1f:c0:93:e6:fd:96:a3:95:2c:e9:ca:60:
32:77:d0:dc:37:a6:e9:bd:2b:e9:9c:00:01:39:08:
c7:f9:da:87:69:c9:1f:bc:09:03:d2:92:f8:28:d4:
2a:64:88:92:a4:91:e3:cf:41:b1:21:9d:2d:24:80:
62:3a:5c:f6:53:c6:65:b4:0c:86:dc:70:95:50:18:
e4:d2:3e:64:91:73:9a:eb:66:2e:1d:c4:73:7e:8e:
c5:6e:04:4a:7c:b0:44:8f:2a:61:2b:17:72:c3:37:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:28:3C:D3:E6:9E:41:D6:90:0A:57:42:F5:0B:21:2B:11:4D:BE
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:a0:54:e2:32:33:fc:eb:17:6c:04:a4:9e:91:e4:28:da:
1e:e9:65:eb:28:a8:0a:71:7d:8a:0f:f2:e4:eb:c1:10:77:14:
76:63:d7:0f:e1:5f:92:fe:b2:d0:21:de:38:2e:75:a3:e8:03:
95:85:a4:f5:80:a1:fc:3d:50:78:7c:c1:9f:23:80:ba:bf:74:
67:d0:95:64:be:f8:77:ac:af:ef:a4:05:12:c9:19:c2:6e:a9:
0b:25:16:dc:83:15:5f:b0:15:20:25:a5:0f:02:83:88:91:3b:
19:93:17:d0:c1:43:82:2a:a5:f2:56:3d:b4:42:1e:f3:f7:f3:
43:9b:7d:8a:34:72:90:ef:70:51:d8:06:31:ce:be:da:e3:48:
49:89:c4:c1:d8:1c:c4:5f:59:0f:6f:00:4d:c5:23:ba:5c:eb:
ac:93:0f:1e:9b:47:bf:57:26:a4:4f:26:af:22:4a:f1:69:12:
d7:d7:df:8b:6b:71:db:64:71:77:2a:12:bb:3e:ee:4c:ab:75:
b7:0b:37:c3:73:66:ad:40:92:08:89:99:a4:c7:c7:b9:ab:18:
fd:62:35:70:22:c6:4a:8f:3b:9c:41:5e:d5:aa:27:99:8c:48:
1c:45:53:ab:07:e4:7b:25:0c:e4:e6:e4:dc:5e:43:02:26:cc:
6a:ba:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:14 2025 by rpki-client