Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: uSVzud5GdhK2cx63igIyosDLdWrDl0zY28rSgB8J5hk=
Subject key identifier: 56:28:FC:2B:BF:09:0A:32:DD:2F:E4:95:7E:1F:15:84:3B:0A:CA:B6
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 01984A09B49471AB38F0541E5463A9BE9939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 04:00:06 +0000
Manifest this update: Sun 27 Jul 2025 04:00:06 +0000
Manifest next update: Mon 28 Jul 2025 04:00:06 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: yzmzUtuweWsox07pwTTldodVtlMR7Lc8sA4HN+W3T4g=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b4:94:71:ab:38:f0:54:1e:54:63:a9:be:99:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Jul 27 04:00:06 2025 GMT
Not After : Jul 28 04:00:06 2025 GMT
Subject: CN=5628fc2bbf090a32dd2fe4957e1f15843b0acab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:64:0c:e0:ac:ce:30:15:92:32:68:aa:a7:
a7:0d:dc:d4:2b:25:02:24:4b:a7:8b:9b:c0:95:e8:
e1:12:e2:45:76:64:07:a8:f1:99:0b:4a:b5:ab:a8:
b6:a3:2e:ff:97:fe:f6:f4:41:3f:53:e4:18:e7:33:
a2:dd:30:86:6e:32:28:14:59:47:fe:9b:2c:9f:c9:
64:df:4e:91:a0:33:b5:95:b9:5a:9c:94:fe:ba:77:
b2:1e:06:ac:d9:d2:e8:f0:db:de:1e:d1:bf:38:25:
ed:b8:7c:4f:d5:32:d2:26:c6:9c:cc:1d:1d:c7:34:
3c:3a:a2:50:e2:6a:0a:ac:84:98:7e:44:02:79:4b:
61:72:70:2e:32:7c:a5:91:31:a9:56:67:e1:2f:d7:
82:20:62:0f:79:91:ea:09:3c:1e:de:74:26:c7:b0:
92:e2:4e:0f:43:c0:21:7b:10:56:33:0f:c4:7b:4e:
fd:f1:f0:e1:e6:f4:c4:5e:06:6e:52:15:13:45:62:
f4:9d:9c:a8:e6:f0:33:37:d0:cf:e8:3a:83:36:05:
cb:13:0a:e4:e3:06:9b:0e:8e:9b:91:2b:aa:b2:49:
82:d9:78:d2:7d:21:65:04:0c:87:e0:43:76:45:dc:
41:04:65:91:bb:a8:b6:bf:db:d6:3d:29:32:3f:0b:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:28:FC:2B:BF:09:0A:32:DD:2F:E4:95:7E:1F:15:84:3B:0A:CA:B6
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:4b:37:76:90:d8:fd:47:c2:c4:bc:d5:97:78:0a:96:1c:
0d:08:e1:e7:d9:16:c9:98:b3:4f:63:99:b2:b5:e5:d9:66:ad:
e9:68:60:f8:9f:b7:c6:28:4d:69:ef:01:6f:4b:27:37:91:0a:
bd:3e:3a:ac:ac:86:00:84:cf:2f:58:61:27:51:e6:1d:97:ea:
88:e1:c8:d7:78:50:64:5d:b5:d2:e2:98:89:25:ff:e8:d7:42:
a4:d0:64:3f:d5:70:ae:cf:c4:f7:4b:a9:81:f7:78:af:f3:1e:
95:d8:d2:9f:a3:7a:a1:d5:57:2a:14:92:91:20:89:8a:c0:49:
dc:58:3e:41:e6:79:7b:9b:94:db:11:4a:1e:f2:40:7c:c0:2c:
cf:db:98:0d:65:c9:de:52:73:8e:44:8e:2a:9d:49:82:f1:ff:
79:db:fd:3e:6e:f8:24:22:e7:b5:9a:22:04:f7:8e:5c:b0:63:
01:43:7b:2e:e2:30:51:1a:7d:1e:2e:44:1f:60:83:8f:01:18:
d5:98:13:ac:04:d1:67:4c:a7:4b:ea:3c:82:62:67:28:cb:37:
9f:8c:61:55:38:9a:01:d0:ac:89:05:dc:a7:a1:06:ff:bf:f7:
15:4e:8c:56:01:ea:fc:38:7f:bf:19:e3:69:8c:fb:ab:fa:48:
54:44:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:38 2025 by rpki-client