Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: rapwK4Cjuayg7RWfyLwUq8jOWGozcOdW/j/WlodC8pg=
Subject key identifier: FD:A0:81:8B:AA:C0:A5:58:62:55:31:50:7D:9D:06:31:F3:72:D1:4C
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019960C705DCBBAD65C542C29F95DCEFDF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 1508
Signing time: Fri 19 Sep 2025 07:01:19 +0000
Manifest this update: Fri 19 Sep 2025 07:01:19 +0000
Manifest next update: Sat 20 Sep 2025 07:01:19 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: vq5RsPnWhDXm5gtYzxEznPU79tZCe0wKrhh9eHdRv7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c7:05:dc:bb:ad:65:c5:42:c2:9f:95:dc:ef:df:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Sep 19 07:01:19 2025 GMT
Not After : Sep 20 07:01:19 2025 GMT
Subject: CN=fda0818baac0a558625531507d9d0631f372d14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:48:07:dc:46:a0:76:1a:25:cf:c2:9c:19:
b5:40:76:39:0a:83:93:af:cc:ce:65:8f:e9:d3:93:
ca:5b:75:28:d4:20:fb:cb:3d:c9:5c:4a:e7:1f:70:
cf:f8:38:7f:a2:b9:5f:70:d0:62:b3:3c:1f:a1:fe:
e2:71:9d:99:3e:4d:43:6e:54:8c:60:e8:99:e5:77:
13:0a:21:2e:36:28:d3:3c:d6:99:f3:84:96:22:1e:
c3:66:0d:ef:48:e3:0f:b1:2b:7b:cb:c3:8a:2d:08:
f2:1d:c4:e0:d2:da:d6:7a:0a:f6:29:9d:81:41:a6:
5d:0e:ec:39:6f:6d:16:a8:af:c2:71:81:06:45:47:
7f:44:45:4d:2e:6b:a7:28:08:bb:ab:69:f4:84:f5:
83:07:5c:db:b7:57:1c:d8:39:03:f0:11:02:6a:a7:
84:b5:bc:8c:5d:21:0c:e2:d2:0e:d6:34:e9:12:13:
8a:72:19:d2:b4:9a:17:c6:4c:d9:8a:e2:50:a5:c4:
21:c0:bf:92:78:10:06:82:d4:75:93:47:6e:29:48:
53:59:f7:ab:89:ab:bc:aa:90:af:3c:71:65:9e:15:
b2:2b:74:75:0d:5d:07:65:84:20:16:3f:70:2f:1d:
db:c5:e4:f5:c5:16:59:be:8b:7d:0e:9a:8d:f6:2f:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:81:8B:AA:C0:A5:58:62:55:31:50:7D:9D:06:31:F3:72:D1:4C
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:66:b7:0d:07:2f:eb:bd:09:e5:37:47:74:01:7e:2f:f1:0b:
5c:ee:c1:53:53:91:35:33:1a:49:ed:a0:5d:84:72:43:40:6e:
93:c6:66:ba:90:a6:c2:d7:e0:49:f4:76:f6:dd:f0:79:92:7f:
48:bd:ce:46:18:81:c5:ae:92:03:55:43:c9:a7:24:87:d6:95:
e5:c4:0a:17:52:0d:a4:8e:8c:ce:fa:8d:00:0e:41:1b:5a:b5:
03:25:22:8d:0f:3b:8f:c8:e0:e8:a2:e0:17:55:e2:8f:61:b2:
51:ff:92:eb:c3:e1:ee:f0:e2:0f:5c:8b:a1:2e:6b:2f:cd:b9:
23:82:33:8a:35:5c:a3:55:a4:35:30:b1:d8:58:09:89:01:b9:
4f:68:f5:4d:6b:4a:4c:9a:a3:85:2c:55:2b:c3:b0:0a:e5:16:
8b:87:0a:d2:f2:0b:5f:86:29:ed:58:69:af:39:2c:b8:1d:91:
28:e7:3f:6a:db:e9:eb:cd:81:d4:1e:cb:a0:db:64:03:57:d4:
04:07:89:fc:39:93:49:28:38:bb:a1:e7:31:f8:a3:8e:f7:75:
28:c9:8c:58:52:2d:34:de:bf:92:06:ff:a6:36:49:cf:e9:bb:
07:9d:8c:7c:59:40:3d:3c:ea:cd:0c:97:9d:bb:93:6f:1b:f6:
f4:49:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:51:57 2025 by rpki-client