Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: EqbCCjBBySaqCuI740knwiYp6Vavo6DQDvy2vn3b04w=
Subject key identifier: DD:02:F6:65:EF:BE:8B:F9:C0:55:7D:43:02:C6:74:F7:E5:76:C2:01
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 01987C406CE948691CECF2ECA3668D6736E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0CFC
Signing time: Tue 05 Aug 2025 22:00:53 +0000
Manifest this update: Tue 05 Aug 2025 22:00:53 +0000
Manifest next update: Wed 06 Aug 2025 22:00:53 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: Y29toQoDw/fQ1AEY1Y9U8sFV3zjiKdP1TDDBZkEcmnc=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:6c:e9:48:69:1c:ec:f2:ec:a3:66:8d:67:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Aug 5 22:00:53 2025 GMT
Not After : Aug 6 22:00:53 2025 GMT
Subject: CN=dd02f665efbe8bf9c0557d4302c674f7e576c201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:d9:7a:bd:8e:f2:90:03:0e:fa:ff:6b:82:
bc:3e:e8:72:7c:25:29:d3:2e:6a:0d:fa:2f:b5:bc:
5a:7b:40:bd:2d:2e:5a:cb:64:73:89:97:cb:4b:dd:
91:b9:fe:11:9c:f4:82:81:0f:55:f4:b3:51:18:48:
6a:e3:a2:a1:c1:32:d9:cf:f1:54:a1:e0:0b:fe:92:
88:b6:bb:40:24:73:21:58:37:bf:57:94:cd:7c:a7:
d5:2e:54:f8:a5:24:86:c1:8c:64:86:ab:4a:72:11:
90:89:21:2a:8e:99:9d:82:01:6f:37:bc:68:8d:40:
1d:a9:c4:25:c9:45:21:86:a5:65:fe:ff:13:59:81:
bb:94:f7:8c:e3:47:48:ec:9e:c8:d6:a0:c7:3a:d9:
20:71:59:b4:a7:da:1b:91:75:f2:5e:01:db:1c:be:
4e:f2:75:93:94:41:bf:fb:19:1f:31:6e:5a:aa:c9:
a9:68:e9:34:36:85:ca:51:6d:c2:69:95:3e:19:d6:
2f:d8:2f:b6:9b:03:3c:ca:02:63:56:81:fb:9a:ed:
43:28:84:fa:8f:40:41:f3:a7:0f:73:dd:9c:3e:0c:
ae:ec:87:c0:bb:5b:87:67:9a:33:6f:cb:02:d1:ec:
ee:83:45:12:e9:ae:75:36:77:bd:34:3b:cf:91:e6:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:F6:65:EF:BE:8B:F9:C0:55:7D:43:02:C6:74:F7:E5:76:C2:01
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bd:95:2e:70:d1:25:ca:14:d9:c7:f3:69:ea:57:d8:a2:08:
1c:6a:c8:24:48:56:31:54:c4:81:0e:f2:c4:30:98:07:44:31:
ea:9b:0d:59:18:e3:23:2a:1c:de:7e:cd:1a:25:52:6a:5e:d6:
d7:2b:db:5c:f6:d3:29:f3:48:b5:7c:bd:46:49:97:a9:12:95:
e8:48:0a:bd:0d:97:c7:15:93:e4:3a:53:16:87:ae:0e:d9:9f:
7b:8f:e8:fe:e2:d5:62:e7:b6:9d:1d:c6:2c:87:85:bd:ad:fc:
21:21:40:98:7f:3e:9a:f6:06:3b:12:1a:30:02:dc:f2:92:0d:
52:5c:10:2a:9a:66:ac:1a:1d:1a:a4:16:b4:eb:d7:58:64:82:
3a:d3:b0:eb:4f:eb:ec:a6:d9:2e:60:38:bd:54:4f:0a:e9:81:
26:07:11:53:43:41:57:0a:5b:96:7b:6c:ac:ee:62:39:bf:f2:
e4:6b:2a:7c:bd:ad:4a:b4:d5:f0:7d:7b:8f:1e:b8:e1:96:15:
7b:4b:8f:a0:87:1a:54:5c:77:29:98:78:ca:db:f4:38:91:bd:
e4:7d:f0:ab:6e:d9:e2:af:db:e1:0e:3a:ce:1a:a7:8d:43:f8:
54:bc:70:7a:48:93:58:11:1f:b1:bb:9a:f6:a5:62:e8:09:45:
ac:37:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:17 2025 by rpki-client