Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: /W2AuizqWqXVqQjdoEjc1vnPjGpGc8CEvP/D/E5SDN4=
Subject key identifier: CB:C2:60:27:60:63:73:DC:7A:2F:C3:AC:70:30:13:AE:4F:DA:03:C5
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019A4C988C5A83CFEEFA5C51AEEEEF508181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 05D2
Signing time: Tue 04 Nov 2025 02:00:57 +0000
Manifest this update: Tue 04 Nov 2025 02:00:57 +0000
Manifest next update: Wed 05 Nov 2025 02:00:57 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: /9PMiafcXsRmdmSyDIpgZwhKy5TLwPj3v8NLUhUycHU=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:8c:5a:83:cf:ee:fa:5c:51:ae:ee:ef:50:81:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Nov 4 02:00:57 2025 GMT
Not After : Nov 5 02:00:57 2025 GMT
Subject: CN=cbc26027606373dc7a2fc3ac703013ae4fda03c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:6d:1d:4a:6c:28:49:eb:ca:16:16:87:2c:
22:12:8b:8d:79:62:76:d9:05:a8:0a:5a:a3:c3:d1:
6f:c2:0b:30:dc:bc:f0:fe:b8:46:4f:33:b1:cc:d2:
0e:33:2a:96:a2:33:71:b9:e3:63:4f:7e:c6:2f:f8:
5f:af:fc:79:9c:00:95:2a:f5:e4:12:a2:6a:65:77:
30:91:f2:9b:e4:8b:19:0b:62:b1:71:96:f2:4f:3b:
68:3d:8b:0a:d0:46:3f:0e:26:e6:c7:20:ae:c1:84:
03:c6:1c:66:57:10:0f:51:82:1e:fa:4d:bc:9e:a8:
dd:af:5a:18:dd:bd:1f:29:f5:53:f2:cf:71:cf:98:
54:d4:c0:29:c7:c6:6c:ab:91:69:ec:a4:2d:81:b5:
0b:17:f2:e9:5a:7a:35:c5:93:ba:6e:37:36:6b:af:
cc:95:b0:b8:d5:b4:01:31:5d:7c:71:fc:91:30:45:
e6:d8:7e:57:62:e2:56:f8:eb:e3:59:35:37:ee:2b:
33:9f:0e:46:46:a5:6a:d9:c8:89:01:7d:1d:08:f6:
7a:72:73:25:0d:aa:21:a8:b2:19:99:c5:7f:4d:13:
69:7b:69:00:f2:15:de:7d:5e:e5:00:7d:23:b3:17:
e9:4e:a0:f5:ce:da:72:c7:f2:06:f0:50:f8:c2:9d:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:60:27:60:63:73:DC:7A:2F:C3:AC:70:30:13:AE:4F:DA:03:C5
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:1f:f0:6f:1e:1c:97:f9:1f:75:f1:2c:71:46:56:3e:cb:
33:d4:6b:89:f4:d8:2a:04:41:f4:82:4d:8b:52:9d:f4:9b:46:
56:ff:58:d7:77:8d:cf:65:b7:2d:d6:40:30:91:5b:91:1d:39:
18:7a:72:43:54:30:8d:72:80:50:20:18:47:a3:80:0f:25:0f:
f3:46:fb:0b:38:a7:a3:6d:3c:a7:cc:39:95:0b:f2:05:89:eb:
6c:6f:72:8c:69:6f:ce:36:6b:23:de:95:25:17:ec:df:c0:c3:
dc:76:41:4b:47:d7:a0:23:b0:9a:e7:09:fb:6d:d2:5d:c6:d1:
05:07:eb:2b:6c:92:5b:f2:e8:74:4e:7a:56:d1:3f:a4:6e:d7:
cc:a5:d9:b8:60:c6:e5:a2:a1:af:31:47:3f:d8:11:e8:12:9c:
41:81:55:5b:ec:99:44:04:84:4a:44:22:3e:22:a8:ce:23:e3:
87:68:4f:0d:3b:aa:b4:46:6a:88:11:11:70:eb:33:b1:b5:10:
16:71:2c:69:7a:7c:10:4e:00:47:11:c4:fe:2c:07:16:dc:ff:
9e:bc:66:b3:b1:72:bc:12:22:1f:3d:7c:88:7b:63:4b:9c:c4:
07:79:54:cd:9a:4f:72:0a:52:c3:c5:c3:1a:1e:2e:b8:ed:a6:
83:16:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:03 2025 by rpki-client