Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: A05CFN5HYH3nlWpLupKsxpGwE2Gmnhn6I0Nstuzy1ww=
Subject key identifier: 28:99:63:85:D5:3F:1C:4C:1F:D7:3B:1B:36:25:EB:12:3A:B5:9B:7E
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 019A714A134F408B828321016774B9355EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: EB
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: 35Y5x7f2Ysbh8+IIfzJ6edMOOJDFO13Fi9b6xsNkkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:13:4f:40:8b:82:83:21:01:67:74:b9:35:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=28996385d53f1c4c1fd73b1b3625eb123ab59b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:de:42:a6:6f:b1:37:1f:8d:ce:c0:dd:5a:2c:
22:e3:a6:50:b9:14:de:cb:c2:5c:1a:81:21:d2:43:
9b:dd:96:e5:e0:b4:b8:d3:fa:ec:74:e9:82:90:e1:
38:52:ff:0f:9e:10:0a:d3:31:de:2b:ca:db:57:e5:
a9:39:ba:a9:96:83:68:4b:68:71:90:fa:88:76:df:
fc:37:7d:f5:f9:c0:83:ae:58:b4:2e:e3:69:b5:6b:
8a:7b:d9:ee:58:d3:74:1e:64:ea:cd:85:04:3d:62:
ba:20:38:8b:30:17:ee:fc:ad:96:2f:e8:bc:1d:22:
1e:c0:27:0a:a5:23:76:6c:15:14:43:ba:1a:b7:a3:
f2:44:b6:70:5f:7e:87:0c:7f:42:27:fc:2e:06:88:
64:c7:b4:03:18:1b:d3:8d:30:56:c2:08:24:70:3b:
22:21:2a:78:3c:9d:e0:01:83:6e:17:78:73:74:87:
60:74:03:37:9f:4c:03:1a:17:fa:3f:19:f2:92:61:
a0:f2:a3:4e:67:fc:ec:94:21:44:09:81:f5:d0:b5:
25:44:6d:5e:72:c7:40:e0:c6:08:ba:98:95:97:82:
37:a0:4f:38:3b:f6:51:da:24:5a:52:9c:ad:cd:17:
5a:ab:ae:9f:c7:c5:5e:10:12:97:f0:72:f5:d2:c2:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:63:85:D5:3F:1C:4C:1F:D7:3B:1B:36:25:EB:12:3A:B5:9B:7E
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:a4:4a:be:08:6a:75:60:22:28:32:e4:3d:c1:61:b9:a8:
b2:b7:6c:4a:42:c0:20:f2:73:90:d0:ac:f9:94:a0:10:2c:cd:
76:a6:85:4d:57:55:e1:5a:75:f4:3a:52:87:89:06:bd:b8:72:
fc:08:ea:18:a1:13:c6:01:67:9b:91:36:a7:92:09:14:5b:ce:
26:7e:7e:97:4a:82:58:2b:af:be:d8:ee:56:6c:e8:be:a0:96:
9d:ea:1e:00:73:b7:4a:49:bf:9c:89:19:3b:39:c7:36:b6:02:
ad:15:d3:f1:34:2e:32:cb:90:f2:6d:b0:51:9a:93:29:24:e4:
10:48:46:24:e2:60:b7:6d:1b:b5:b7:12:65:17:59:87:5c:8e:
e0:23:f5:6d:1b:87:52:e1:1c:f6:30:6a:ee:db:d2:7b:31:9d:
ea:45:a0:ee:eb:3c:0b:ac:71:32:ac:4d:54:fb:94:c3:3c:68:
bc:39:d8:eb:c8:84:92:bb:df:55:af:90:96:6c:47:ac:40:22:
4c:de:f7:94:3f:20:2d:32:4d:1f:8c:34:47:36:fb:d5:41:56:
22:ff:1e:61:15:05:c1:0a:16:3d:f9:e1:76:e3:49:fa:9e:11:
3e:ad:81:32:8e:75:44:c8:c0:fc:22:c9:bb:dd:cf:7a:42:d2:
e4:86:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client