
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier: aNfMNAPksPnxpayWzWNmIh0z2QPFHWOHooJ/kHR4ufM=
Subject key identifier: FE:EC:38:25:B6:95:5A:AD:0B:2B:AC:60:1F:28:C1:8B:A5:D9:3D:39
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial: 019A53081E65A50612E451CCFE4D33F649E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:32 +0000
Manifest this update: Wed 05 Nov 2025 08:00:32 +0000
Manifest next update: Thu 06 Nov 2025 08:00:32 +0000
Files and hashes: 1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=)
2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: AG8FWf+93fJAM/ZlrIsK6cKqLHktX4Ls+RQkQnQK1Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:1e:65:a5:06:12:e4:51:cc:fe:4d:33:f6:49:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Validity
Not Before: Nov 5 08:00:32 2025 GMT
Not After : Nov 6 08:00:32 2025 GMT
Subject: CN=feec3825b6955aad0b2bac601f28c18ba5d93d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:e2:96:b8:af:ac:24:aa:d8:66:b7:ab:9d:
b4:29:52:bd:19:b6:83:4c:4f:73:d0:ae:b9:52:88:
df:d7:c1:a7:05:3b:c1:8b:bc:09:e1:c7:95:3b:4b:
fe:ab:35:6a:d1:46:b5:f0:32:d4:2a:25:9a:cd:6f:
f3:ec:0c:7d:ad:69:5b:3c:33:f6:9f:c5:c6:4a:53:
0c:97:e8:9e:d7:66:27:49:29:46:99:75:85:7a:05:
bf:69:b7:c2:8d:ef:38:df:c4:dd:ea:a7:7c:6b:55:
37:ba:c0:64:ea:74:50:f5:75:6e:da:be:09:2e:be:
60:4c:bd:1c:7c:30:31:88:8f:de:1a:f7:0e:72:f6:
e3:2f:bf:cf:ce:25:21:57:d3:ec:af:ad:e6:7b:3d:
7e:95:25:4f:a7:0b:02:67:97:4e:cf:5f:14:83:04:
1a:41:31:8f:5b:cf:01:ac:1a:ed:37:51:24:0f:cc:
3a:7b:4e:7b:fe:35:bc:e4:cd:1c:1c:d2:86:41:f3:
33:fa:2f:c5:63:01:57:43:b2:b4:0e:83:c6:cb:79:
48:12:78:60:f6:89:3f:0f:bf:65:d5:ee:d6:84:4e:
72:92:12:56:58:c9:d8:8b:a8:c6:bc:bc:4f:44:a4:
83:75:ec:0c:1d:92:b7:b1:9c:1a:8c:e0:f2:d7:b4:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:38:25:B6:95:5A:AD:0B:2B:AC:60:1F:28:C1:8B:A5:D9:3D:39
X509v3 Authority Key Identifier:
keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:69:59:18:20:ba:e1:9c:c4:59:d5:4c:4a:8b:9e:2e:ed:6c:
f8:50:df:5b:ef:e8:79:ca:15:78:14:27:e5:da:61:e6:25:05:
2b:1a:ad:e3:0a:bc:8c:0c:e7:51:f4:6d:f1:c2:14:a6:a6:68:
60:8c:76:e8:03:a7:06:aa:a7:c0:bc:2f:97:ea:63:5b:48:86:
b2:0a:67:2b:ad:82:6b:04:53:a0:c9:57:1e:01:8e:10:e7:95:
42:b6:1c:e7:89:1c:27:4e:6e:6d:35:92:63:83:95:3e:72:58:
0c:7a:a7:dc:b4:4b:2d:d8:92:70:f4:f9:5c:94:03:1e:a8:3b:
26:9b:7a:77:b7:e1:44:ec:9e:03:45:06:17:f1:50:0e:b6:65:
f6:b6:e6:0f:9d:75:bf:3a:bf:e8:71:41:4d:2e:78:a5:77:a7:
46:37:bd:8f:36:41:f6:2f:73:2c:e3:6c:58:68:5a:bc:55:a5:
37:59:cd:da:e7:e7:31:d3:7b:14:37:b2:d4:13:d5:05:cc:3c:
10:ba:72:75:09:17:48:4a:8c:4c:91:96:f1:6a:aa:f1:f6:22:
58:5f:48:b8:37:a8:20:06:ef:da:e5:6e:12:29:30:2e:30:d1:
6b:6b:2d:18:c6:6c:8e:6d:4d:7f:a4:48:a6:ba:5a:59:e0:1c:
c0:70:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:15:30 2025 by rpki-client