Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: 3IUl4UlHHrUu5VDwtfeqNmCtwjUoKKRawF4qmthR0Is=
Subject key identifier: D1:8E:E9:37:22:24:E6:93:0F:B2:87:45:FE:F7:FF:E1:EA:06:DA:F1
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019A5187F358EF24A91EBA1C831AFED7B899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0DEF
Signing time: Wed 05 Nov 2025 01:00:55 +0000
Manifest this update: Wed 05 Nov 2025 01:00:55 +0000
Manifest next update: Thu 06 Nov 2025 01:00:55 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: nv1Zop/WP0dWdkzI+c970UUzUn+e5GnjiyJrW8OKIos=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:f3:58:ef:24:a9:1e:ba:1c:83:1a:fe:d7:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Nov 5 01:00:55 2025 GMT
Not After : Nov 6 01:00:55 2025 GMT
Subject: CN=d18ee9372224e6930fb28745fef7ffe1ea06daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:27:fd:6d:21:66:38:e6:d3:ab:42:53:a1:
26:98:84:94:33:44:3b:b9:8c:bf:9d:46:f7:93:a2:
03:62:4f:79:8d:47:ef:13:79:86:d4:8c:d0:ba:54:
dc:e1:60:2d:91:5b:fc:a0:a3:ce:c6:d5:13:3a:5f:
fd:f7:0c:45:f2:4a:01:26:be:42:f6:b6:fa:73:fd:
b6:a0:de:01:21:d7:c4:b5:c7:8f:05:a9:65:27:53:
32:cd:f3:07:06:d8:c2:63:a6:7e:5d:b8:80:76:89:
8a:3f:40:e6:1d:94:1d:30:ed:09:39:aa:fd:ae:a2:
01:6b:f8:cf:57:4b:f4:0e:33:f0:9d:f7:1d:fd:8d:
d7:b3:5d:fd:26:ee:ed:3e:d7:86:eb:0e:53:8a:02:
65:61:81:76:71:55:7d:ab:c2:db:fa:ca:d1:ae:aa:
0c:6a:5d:1d:b0:4b:cb:56:ab:17:87:46:e2:36:f3:
ec:9e:7d:3f:e2:fb:b7:8b:99:15:2c:a8:8b:20:63:
87:5c:c7:51:8e:74:fd:ce:5a:c6:fa:60:d9:1b:5c:
c8:33:1e:e6:40:fd:ee:11:3f:54:a4:ec:29:3b:1a:
46:66:72:d0:83:6f:85:1f:bb:a9:59:4c:c4:21:81:
f8:d7:75:6c:09:ba:73:84:85:08:19:68:40:5e:e4:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:E9:37:22:24:E6:93:0F:B2:87:45:FE:F7:FF:E1:EA:06:DA:F1
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8f:ab:3a:f5:5c:7b:4d:02:62:85:15:f9:40:b1:d0:45:fe:
e6:0d:ba:4b:86:2d:e3:35:b5:d2:a2:19:d6:de:3d:56:79:ac:
2e:8a:a0:80:9b:69:dc:de:cd:3e:22:61:0c:25:09:f8:5c:f1:
e2:24:ab:ba:cc:51:b0:50:7a:1d:0e:eb:80:8d:f8:a9:5b:38:
67:49:4d:c6:f7:3c:ad:29:3b:22:4b:c7:65:e1:b6:22:e6:8e:
08:20:bd:69:a7:54:56:35:6e:b1:bc:46:9a:b9:c2:45:1b:44:
ad:9b:08:02:c4:5d:90:ab:ec:c7:af:9c:de:6c:a1:d4:e4:6c:
b4:f4:cf:5d:72:ac:04:89:de:cf:98:84:85:23:d1:b1:43:bc:
a6:25:9d:70:f2:3f:00:0c:68:6f:39:e8:01:c0:e4:5e:58:f0:
70:c7:69:a7:fc:32:eb:32:d1:b8:f7:db:0c:8f:ba:b5:f9:5c:
85:c7:f4:4a:1a:f0:cc:a7:53:a4:ac:ca:16:53:19:69:2f:5f:
53:28:e2:59:fa:83:cf:49:a7:61:d6:d6:b6:0f:c6:4f:4f:c9:
ce:21:46:6b:7e:0f:bc:26:0e:12:cc:69:a1:77:3a:80:89:4c:
77:9f:43:ad:37:3c:3b:6b:2f:5c:70:3e:aa:03:e8:b8:de:96:
b0:ed:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:05 2025 by rpki-client