Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: 8QKqfQsOU3k9KR+4ngFad2QcUDsfR0P6AvyvZSuDaio=
Subject key identifier: 5E:20:A0:42:E6:88:6B:C4:91:66:0D:34:24:63:95:1D:98:A9:86:70
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019873741B6519D15FA4E7846F0680AFF2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 04DD
Signing time: Mon 04 Aug 2025 05:00:45 +0000
Manifest this update: Mon 04 Aug 2025 05:00:45 +0000
Manifest next update: Tue 05 Aug 2025 05:00:45 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: MKDI1h8/zpjK/MNZg5rzvDX/6JZMVaR1xebxp+P0Z9g=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1b:65:19:d1:5f:a4:e7:84:6f:06:80:af:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Aug 4 05:00:45 2025 GMT
Not After : Aug 5 05:00:45 2025 GMT
Subject: CN=5e20a042e6886bc491660d342463951d98a98670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:f9:b5:8a:05:8d:ba:63:91:1d:94:29:be:
a6:46:ea:c0:d5:89:4b:5e:ed:4d:f7:37:c2:63:68:
26:49:8d:f8:29:07:01:ca:28:ce:0d:d5:6e:b2:b2:
03:e5:2c:13:a1:62:c9:ba:3f:64:a7:e8:74:f9:4c:
eb:e9:79:36:5a:ac:f0:73:71:5c:6b:87:cc:c4:d4:
8a:22:f1:3d:e2:c0:a2:1c:82:bc:73:b8:1b:bb:aa:
76:02:98:66:67:d3:38:95:e3:d9:c3:22:ae:d8:69:
22:a5:b9:2a:5f:70:13:62:1b:1b:1b:91:8c:09:69:
a4:5e:4d:47:f4:15:0c:a0:bd:6b:f2:91:e5:32:b9:
f3:81:5c:af:49:49:d8:a9:63:ac:fd:76:65:d6:d9:
7e:55:a7:50:9d:45:3b:e2:5f:70:a9:4d:37:b3:92:
3d:62:98:f7:b4:9e:bc:f6:f2:49:4e:6e:f3:e7:dc:
28:70:ee:1d:49:d4:c0:a7:4f:cb:f2:3b:00:a9:a4:
b8:07:49:e2:58:6e:54:3d:fd:a4:f4:0a:6d:10:58:
fb:12:35:20:0c:4b:27:fb:8e:65:c0:16:59:72:5b:
e2:8e:b6:f7:24:17:5d:6e:a1:be:60:64:a1:24:17:
95:4c:1e:8e:ab:10:22:ca:3e:f1:82:b1:3f:ba:fd:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:20:A0:42:E6:88:6B:C4:91:66:0D:34:24:63:95:1D:98:A9:86:70
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e2:1b:5d:53:9a:07:fb:c7:77:33:ee:86:02:3a:12:71:19:
c9:d6:a2:12:f0:72:bb:13:c1:56:86:a9:1b:5b:9c:f2:10:ba:
f7:a0:33:0f:ad:8e:ba:02:9b:1d:1b:50:e7:eb:9a:9b:6a:79:
6e:40:3d:56:c7:f6:7c:92:2d:65:c8:3e:36:c6:86:ee:ee:a7:
f9:86:f0:62:09:11:03:dc:1e:09:f2:f6:0a:bb:c5:db:f0:3c:
05:49:0b:b2:88:01:73:0d:d6:74:3d:f0:bf:77:3f:99:61:1f:
b8:d6:7d:28:00:af:e7:f4:11:e2:8f:43:ba:ed:c1:a3:cb:2b:
8b:39:4d:f8:e3:1f:7c:3a:9c:fd:79:f7:fd:03:8e:87:3b:3a:
a8:ee:3a:e3:4e:1a:06:c2:21:53:d2:5e:f0:43:ef:4e:a2:a7:
0b:50:f4:12:37:94:8e:5e:9e:98:b1:e3:4e:2a:24:d1:67:b2:
92:95:00:a3:31:0c:3d:4a:d3:3e:4d:01:37:12:f6:3a:eb:20:
fb:42:95:e7:6c:34:da:06:dc:f7:b4:be:a6:6c:26:a8:7c:a7:
58:26:aa:ab:ff:04:3c:92:53:8c:0f:29:cf:be:0a:d3:09:ea:
7a:ae:b9:bb:c1:68:20:4f:43:cb:34:5a:42:d3:71:db:84:26:
ea:83:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:57 2025 by rpki-client