Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: 5JnFEqoaonhtGllwdlobN1cTTyDpabssRoPPtXGt6rU=
Subject key identifier: AE:92:08:F6:B2:35:1B:6A:5D:A3:16:60:0C:15:03:A8:8B:FE:FD:B2
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019A4D739AF61AE622528F2311EE990ED1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0832
Signing time: Tue 04 Nov 2025 06:00:13 +0000
Manifest this update: Tue 04 Nov 2025 06:00:13 +0000
Manifest next update: Wed 05 Nov 2025 06:00:13 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: 4We8n6cVcJqLnENjY1kQhMGD08AjmPPZ0HI8ztmK228=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9a:f6:1a:e6:22:52:8f:23:11:ee:99:0e:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Nov 4 06:00:13 2025 GMT
Not After : Nov 5 06:00:13 2025 GMT
Subject: CN=ae9208f6b2351b6a5da316600c1503a88bfefdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:9b:32:f0:73:42:05:bf:36:b0:b0:1c:4e:
c5:cc:a0:87:52:54:21:ac:79:02:a8:46:1c:e7:fc:
1f:6a:6c:bd:e9:43:67:1d:a3:72:f7:19:34:e8:b3:
80:b4:c6:f0:20:88:4b:17:3f:1e:e1:eb:bb:66:8e:
b6:41:a8:8d:97:df:21:66:0b:de:a3:c6:3b:37:e8:
25:fb:69:41:86:ca:09:b8:9f:c8:59:ee:66:f8:93:
dd:eb:35:40:b6:a3:c9:59:d8:b6:37:03:12:4b:a4:
1a:5b:00:88:cc:67:8f:42:c9:cd:5f:b2:72:76:d7:
67:71:be:b7:b1:e4:34:b4:c4:7c:40:dd:43:61:61:
db:86:a3:cc:48:1f:e5:e9:40:23:49:e1:29:ca:43:
54:36:37:3e:da:ad:ba:60:0c:2c:4a:4f:fa:15:9f:
78:ba:09:ab:0b:a7:93:ed:34:ed:93:2c:31:99:11:
90:f8:6a:b9:8d:a8:81:54:e4:28:32:8b:8e:c3:f5:
dc:bf:f3:7c:f3:63:2c:6c:51:2c:39:35:fd:67:77:
ce:f9:28:b0:4e:b0:be:6d:da:ca:5c:85:ee:53:73:
a4:68:5e:71:10:fc:38:1c:c0:79:9a:7d:dc:51:82:
c6:73:83:65:09:80:01:4c:a4:41:88:32:9b:06:9e:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:08:F6:B2:35:1B:6A:5D:A3:16:60:0C:15:03:A8:8B:FE:FD:B2
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a1:4b:0e:0f:44:fb:82:33:62:26:ac:a4:c6:c5:c1:8c:b5:
1b:31:ee:5e:96:0d:cc:1b:6e:73:a7:b8:67:f8:d5:53:cb:fa:
3d:68:33:e6:b7:08:95:6d:1a:28:84:e8:48:dd:d7:b6:6e:a1:
35:10:d8:7b:f3:94:bb:cf:b4:b0:bc:ca:8d:fd:d1:00:49:be:
58:89:2b:e1:ee:ed:fd:d0:71:59:a8:2a:0b:28:7a:58:b0:9b:
2a:59:8b:28:e7:6d:38:bd:49:ab:af:9b:cf:ca:8f:62:ea:25:
3f:76:64:4f:45:fe:af:65:09:96:98:b4:ac:18:15:c4:47:43:
55:21:95:07:41:0e:39:51:8c:9a:e8:8a:37:37:51:38:8e:40:
9f:b2:a2:a0:0c:a4:7a:96:85:dc:36:1d:b9:ed:f7:e1:77:d9:
45:b9:d0:a9:83:07:2d:98:d7:61:eb:e1:31:05:dc:9b:74:ed:
51:b1:a0:45:bd:79:aa:fe:43:b0:df:04:d8:93:fa:ba:86:72:
01:78:04:9c:dc:47:ac:94:29:a2:fb:fb:84:1c:e7:a8:33:b3:
fe:96:ca:e1:74:85:2e:b1:82:e6:95:c3:2c:a7:95:be:96:be:
b3:55:73:23:8e:1c:46:14:42:0b:e5:28:dc:df:62:81:f0:99:
56:14:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:19 2025 by rpki-client