Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: HfsxNLceIYY83W4GYCda+VKIY2Wfn5ZKvjWs92YtgJw=
Subject key identifier: 0F:20:9E:D5:BF:FD:40:A2:8E:38:74:1C:50:C0:46:39:F1:86:3F:D7
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019A4C616AAB26BA6DCEA0A11BB2AEFD5E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 1582
Signing time: Tue 04 Nov 2025 01:00:43 +0000
Manifest this update: Tue 04 Nov 2025 01:00:43 +0000
Manifest next update: Wed 05 Nov 2025 01:00:43 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: 80yAkjjxIBf9QRRpQgZ2xMyCgIfGYjv5AMEsiCWRVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:6a:ab:26:ba:6d:ce:a0:a1:1b:b2:ae:fd:5e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Nov 4 01:00:43 2025 GMT
Not After : Nov 5 01:00:43 2025 GMT
Subject: CN=0f209ed5bffd40a28e38741c50c04639f1863fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:68:c2:b7:af:07:f6:6f:77:6a:c6:dc:18:
1f:31:40:47:67:53:e8:b7:5e:e5:82:11:7d:01:de:
c4:e4:8e:f0:f6:69:48:4b:36:45:4f:3c:05:6a:e7:
1b:8c:b0:df:a0:46:9e:a9:ed:54:76:5a:86:14:dd:
41:67:e6:c2:c2:a8:04:20:48:d8:ad:af:56:e2:40:
a1:ff:70:ba:e7:91:3d:e6:8d:51:b5:a0:36:c1:b3:
01:9c:b3:07:8e:25:4a:11:83:2b:05:b1:26:c0:3e:
d1:f1:26:45:e6:75:40:d9:7c:da:7f:68:bc:64:7d:
1d:f9:89:d1:74:ee:e7:ad:4e:e7:21:75:e3:51:43:
c6:8e:cd:3d:b5:ce:f9:48:0e:7f:8e:7c:7b:d3:ce:
8e:dc:bb:cb:44:dd:03:44:bb:14:0f:e5:e4:4e:b4:
13:f5:52:ad:98:44:a0:c9:92:02:8f:b2:0a:e0:10:
7c:77:f7:6d:6d:7a:ba:d2:38:58:be:a5:64:04:30:
a6:4d:d2:38:7e:30:32:31:cb:24:29:0f:fb:25:de:
7a:1d:f8:22:85:a0:1b:9c:6f:0e:23:73:0a:2f:ce:
bf:76:24:23:5e:ec:75:3c:20:7f:b0:b4:35:21:81:
e7:15:76:c5:c1:15:55:06:35:ec:1c:7e:0c:b1:e3:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:9E:D5:BF:FD:40:A2:8E:38:74:1C:50:C0:46:39:F1:86:3F:D7
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:72:f1:2f:f3:7c:d7:33:29:f3:01:41:e6:2f:f3:86:56:
2e:20:d9:bc:fb:76:d1:e7:82:49:4e:41:c7:70:ff:2a:0a:5c:
7d:5b:b9:b6:2d:b4:55:9b:d0:9a:a0:9e:95:4d:bb:94:66:14:
2f:f9:27:bf:b3:a6:57:20:1a:d7:88:c7:51:24:04:1a:0b:68:
96:5e:b7:c8:e4:19:1b:a2:1a:05:0f:fe:96:e0:af:12:be:40:
48:b0:2b:a6:62:ec:ab:39:bb:1d:71:b2:9f:8f:f0:54:b1:de:
0d:d3:91:30:36:2a:37:4c:6c:53:6b:05:c2:81:8d:2e:7e:67:
ca:4d:02:b2:98:da:51:5b:69:42:99:7b:10:99:b1:dc:3b:fe:
3e:11:52:0d:aa:bc:bd:8b:86:0d:c2:60:8a:a7:73:04:af:22:
54:11:20:84:21:fd:ec:37:d7:e2:73:2a:1b:e4:8e:02:08:54:
4c:1f:35:83:2a:87:6c:d6:76:a1:9f:aa:92:43:74:34:44:59:
23:bc:ee:ac:62:f2:d5:2f:a3:ce:9f:7d:02:4a:0b:a4:a5:59:
21:9c:5b:f4:8b:3b:5f:34:cc:fe:0f:43:e6:dd:f7:e7:32:59:
ba:21:1e:c1:1a:ea:77:70:88:8e:77:65:04:44:6e:34:40:21:
24:23:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:25:23 2025 by rpki-client