Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: 9I8UjEtbRq7kWQTZsSUTwroiZAGE1V8XjK/dl41rtJ8=
Subject key identifier: CC:50:B6:F2:06:A4:9F:D6:64:81:15:AB:D2:0B:A3:41:25:CA:B6:D6
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0198936D02EF499B528300F0047D3C546EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 04DD
Signing time: Sun 10 Aug 2025 10:00:51 +0000
Manifest this update: Sun 10 Aug 2025 10:00:51 +0000
Manifest next update: Mon 11 Aug 2025 10:00:51 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: AIdGMEye2Rh55kccMaDuQ+qdgTxKacTdfS/6Y5mgRUo=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:02:ef:49:9b:52:83:00:f0:04:7d:3c:54:6e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Aug 10 10:00:51 2025 GMT
Not After : Aug 11 10:00:51 2025 GMT
Subject: CN=cc50b6f206a49fd6648115abd20ba34125cab6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:a6:c6:a0:66:ba:81:e0:97:a3:5b:ca:1f:
06:fc:56:66:02:00:0e:ab:0c:51:3a:71:66:57:57:
6b:6d:ad:ed:a0:c4:fc:8e:91:c9:6d:31:16:93:a0:
bd:a3:3b:03:e5:93:55:ca:39:e1:b3:a5:a1:0e:19:
93:6f:41:26:f5:12:01:c3:64:27:d2:e7:6a:a5:5d:
13:15:10:9a:b5:bc:01:c6:70:af:49:8a:af:ca:fb:
6f:28:f6:ed:d5:5c:86:bf:8e:53:e4:f6:4e:62:28:
79:e6:7a:cc:3b:50:47:ba:23:43:20:aa:60:85:9b:
4d:da:6f:b9:41:24:5a:84:ae:07:69:aa:a4:04:f4:
13:84:33:1e:c2:8c:91:da:e0:62:9c:b1:ec:69:4e:
d7:5c:4c:2a:5e:61:7b:94:ad:d0:ef:e5:21:ca:17:
0a:47:e0:a6:6e:20:11:74:f8:48:5b:1f:42:84:2f:
99:b7:8c:03:0d:c0:17:72:de:2f:35:c4:df:61:24:
c8:cb:5d:4a:4d:8c:25:ca:d6:e0:85:2f:76:1b:63:
5b:57:97:15:42:22:eb:8e:ed:d3:2b:26:04:d6:13:
b5:74:1c:30:2b:e6:80:ad:23:3b:24:b0:b1:96:d8:
10:19:70:19:74:19:b2:47:68:d8:6f:4f:07:4a:9f:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:50:B6:F2:06:A4:9F:D6:64:81:15:AB:D2:0B:A3:41:25:CA:B6:D6
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:72:13:88:21:5c:89:0e:af:af:c0:a7:3c:ce:d3:aa:2a:bb:
b5:09:26:b4:20:8a:3b:44:96:7d:4d:b6:e3:16:78:5c:2b:4f:
6c:5e:e4:7c:e3:2c:cc:de:09:be:fc:7a:ef:fd:15:69:77:7e:
1f:5f:ec:38:11:02:d5:26:ac:eb:bc:6d:a8:2f:d5:e1:54:ea:
9e:43:95:d8:2e:90:90:9b:10:b0:df:d4:72:8d:af:6d:63:bc:
37:ef:e9:a9:fb:b4:71:df:1e:05:e6:1a:b5:3a:de:db:83:df:
3c:b7:d6:8d:a7:1c:0c:dd:bb:df:6b:8e:24:07:3d:01:22:e5:
d7:c9:2a:6f:a1:79:81:c7:27:18:d6:46:51:7b:a6:60:0b:cf:
0e:c6:80:94:f6:1f:d6:a9:f2:d3:b8:19:1a:9c:21:ce:63:68:
c2:f0:ae:b6:20:f5:32:b9:af:29:16:ea:79:a4:57:71:18:9e:
e2:d5:5a:cc:21:cf:0c:5e:b5:66:d7:76:38:d3:35:fe:76:8f:
6f:af:ce:d6:77:9b:18:e7:36:a8:d3:7f:78:7f:63:8b:f7:e0:
1f:86:05:e7:00:e1:f0:f6:99:64:4c:1d:2c:03:b6:3e:a6:44:
e3:c4:d2:1c:23:26:34:44:0b:20:e6:e8:cf:d2:1d:40:6a:58:
72:d8:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:38 2025 by rpki-client