Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: /O/dGf3fot6EBrYcad2MdtgLzTss+qbBc5mzI+oq8gg=
Subject key identifier: 24:26:92:CE:04:2D:89:14:E3:FE:C3:6B:8E:D8:7E:6C:19:CA:EA:07
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019A4EF53F59B0D3B3E05A101B04CAF33A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 125E
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: JG9bLbjM4UeWJ1+qKEJTtboVdN3CaVx9uDImr949aJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3f:59:b0:d3:b3:e0:5a:10:1b:04:ca:f3:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=242692ce042d8914e3fec36b8ed87e6c19caea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:72:81:a8:ab:2f:8b:ce:56:61:23:8a:55:
79:41:0f:8c:be:df:38:79:d4:a5:aa:09:45:55:ef:
b7:23:7d:bf:d7:0a:fc:dd:ed:89:05:40:6c:45:ca:
1d:d4:f1:4e:28:59:0b:38:f8:4d:37:90:9a:dd:1a:
c7:9c:b1:76:a8:a2:d7:15:18:d2:a9:0c:8d:8a:10:
2e:61:72:33:20:97:41:43:6d:b5:1e:8c:17:d7:3b:
d6:9a:33:51:b3:c9:7f:79:73:1a:b6:97:30:cf:f2:
a6:a4:cc:18:61:a1:3e:6d:e1:84:88:7d:6c:8f:d7:
ca:6e:13:8c:56:3b:6f:1a:46:d6:a1:ce:7c:e2:11:
06:64:15:8e:62:d7:63:dd:6f:e2:a2:55:62:6c:a1:
2f:2d:84:96:92:d3:66:87:22:95:8b:47:b3:82:0f:
c1:92:f1:8e:5b:35:3e:51:84:e3:8e:7d:fa:fb:ad:
2c:33:41:ea:43:54:37:6d:50:f2:ac:9d:8f:dd:96:
f5:9d:18:26:82:29:47:62:30:5c:7c:3a:ed:d4:30:
5d:5c:5f:fa:89:e5:1d:94:99:cb:ed:5d:e0:2b:17:
5c:45:c8:4e:49:88:45:3d:68:00:49:78:4b:52:1a:
db:60:8b:b9:5c:7f:d0:04:93:d6:9b:27:a0:90:64:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:26:92:CE:04:2D:89:14:E3:FE:C3:6B:8E:D8:7E:6C:19:CA:EA:07
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:2d:64:f2:67:be:f9:6a:ab:cc:fb:37:b6:db:7d:38:0a:
52:36:98:8e:df:38:f4:56:88:c3:97:44:9d:f9:43:cd:e3:e7:
31:00:8c:e2:50:8d:aa:5b:a7:28:8e:67:84:38:d7:ef:39:96:
fe:ab:14:14:08:c5:37:46:b1:42:b1:31:f8:09:ed:cd:5a:01:
79:33:8f:e8:26:4e:2e:78:bf:63:4c:db:15:2c:37:d7:48:40:
61:fa:fd:b5:3b:42:73:a9:48:7b:b1:d9:ee:e8:9f:29:6c:5c:
84:a7:57:53:7f:f4:73:b9:c5:96:1e:f8:c7:55:d5:b5:b7:75:
9d:c2:88:f0:32:23:8f:aa:8e:11:5a:74:7e:14:ef:f7:17:d0:
9b:81:13:12:dd:98:77:49:26:4e:95:47:09:69:04:5d:ac:16:
86:3f:4d:2d:ab:ff:66:35:1a:d0:82:8d:56:30:2a:55:15:4c:
eb:1e:0a:2a:f4:4e:1b:71:e8:80:c9:d4:24:57:5d:cd:93:6d:
9e:5d:b6:65:81:59:fe:1e:0b:10:c1:41:38:62:74:41:90:0e:
a3:b7:8a:b9:e9:a4:11:a9:22:fa:9e:f3:30:e1:65:52:75:89:
10:ec:d4:25:e8:00:1a:43:03:fd:ea:17:f3:6e:c3:5b:3c:f6:
1a:6d:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:26:31 2025 by rpki-client