Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: /+2CyrWv2xQ8MOcEA4pES4WCs36eIYfVeknNVP7lDsg=
Subject key identifier: 30:1C:B0:16:A7:3E:8A:C1:DB:86:04:43:1F:EA:06:D9:8B:C9:74:6A
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 019A53080F1970FA36732EEE1663760FDC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 02DF
Signing time: Wed 05 Nov 2025 08:00:28 +0000
Manifest this update: Wed 05 Nov 2025 08:00:28 +0000
Manifest next update: Thu 06 Nov 2025 08:00:28 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: e2v1HudiMuZKRAlOGH+X+Js0iRvscfKJyqY6yMBadmg=)
2: QCjl4a-9vegdBZsLVvWX0ydUgGY.roa (hash: wA/gZkPE3yxDP3RHjNK9FN3A1qfwH3nLJskDkbvV8q4=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:0f:19:70:fa:36:73:2e:ee:16:63:76:0f:dc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Nov 5 08:00:28 2025 GMT
Not After : Nov 6 08:00:28 2025 GMT
Subject: CN=301cb016a73e8ac1db8604431fea06d98bc9746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:b4:bc:89:a2:43:bd:f1:83:4c:77:dc:41:
86:2e:1f:eb:36:92:25:62:4d:5c:de:b5:59:cf:f6:
7d:3e:bb:f8:c0:46:66:15:f0:2f:ac:2a:14:4c:20:
84:77:3b:75:08:3d:e3:60:93:1b:cd:02:9f:d0:3e:
72:ed:48:50:82:7e:04:ee:b5:c2:f7:62:94:66:09:
8a:e5:11:10:18:ab:97:1e:cc:77:56:e0:34:bb:ee:
4f:95:d7:09:96:19:ac:50:b1:9e:59:1f:39:6a:6e:
18:cd:c0:38:07:44:1e:87:d1:20:87:0e:e5:6a:fd:
a0:e1:4b:aa:bf:1e:b8:75:f7:5c:63:42:9c:68:5e:
a6:f5:ca:39:b3:29:36:8e:e8:51:63:43:86:fa:a5:
86:ad:81:a0:c4:85:22:71:67:96:e2:55:7d:89:e1:
c8:e1:57:2c:c7:74:9e:83:9f:a7:3d:86:f3:59:61:
60:76:43:3d:81:2e:ca:b8:79:94:f9:c0:00:af:59:
6f:a2:de:25:e1:f0:24:58:e8:da:6f:1c:97:14:54:
bb:0d:04:97:49:f7:6d:61:f0:65:4a:6c:6f:eb:31:
ce:02:d7:c8:ca:b2:41:54:e9:7d:df:a4:e1:4d:6a:
7c:a0:76:16:35:6d:e2:0f:e3:b9:04:09:49:a9:c6:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:B0:16:A7:3E:8A:C1:DB:86:04:43:1F:EA:06:D9:8B:C9:74:6A
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:f7:13:6e:4b:eb:d6:f8:09:5c:6c:64:a5:be:41:3e:21:
9c:cd:9a:0e:5c:39:c0:e4:63:01:62:7d:f2:6c:21:75:a7:39:
53:05:f7:bf:8e:d6:57:5f:45:08:b0:ce:05:e7:d0:cd:ea:6d:
66:85:39:15:90:f6:e3:d0:1b:d8:af:e5:4c:bd:b2:44:eb:d8:
21:b0:2d:cc:f6:4a:6a:1b:35:85:2b:c1:37:7a:36:63:b2:b3:
7d:bd:40:b4:12:f8:46:81:db:05:f0:ce:28:d7:7a:f9:57:17:
be:17:f0:dc:60:d8:df:58:2a:f1:9d:3e:13:b4:76:c4:08:e1:
8a:15:6c:c9:7e:7f:14:91:88:3a:32:7e:67:ed:56:0a:f2:f2:
60:01:bf:62:cc:5c:a4:d7:a3:76:a2:17:e8:cf:d6:7a:e3:73:
99:e7:a5:bd:4c:74:80:4f:b4:4a:e5:1d:f0:a1:34:6a:09:0e:
80:b8:f4:2a:f8:d7:53:3e:2a:2a:8b:90:83:ca:84:77:ce:a5:
22:ec:98:ea:ca:ce:c9:f3:62:cf:0a:b7:19:c0:8d:87:d9:bf:
e9:83:b9:47:1a:db:33:ef:59:8e:74:04:50:17:01:0e:73:8b:
da:9c:83:a4:f4:32:27:8e:ed:6f:58:07:fa:ed:55:84:d7:38:
d4:d6:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:52 2025 by rpki-client