Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: WtsKD6nX4fG7JDkHnCi5QU0mrad9VBUq13oxtb3QaNE=
Subject key identifier: 03:2A:6D:36:7A:EC:CA:5D:34:05:F4:8B:F2:38:72:C7:BA:9A:30:67
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019A73A6A0CEC44CFD20CCD9C59C5510D87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 06B6
Signing time: Tue 11 Nov 2025 16:01:31 +0000
Manifest this update: Tue 11 Nov 2025 16:01:31 +0000
Manifest next update: Wed 12 Nov 2025 16:01:31 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: cLmo1Nefucs3/ovGZEGU0AMcV//Pf0iL9Ma4/1ozE7o=)
2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:a0:ce:c4:4c:fd:20:cc:d9:c5:9c:55:10:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Nov 11 16:01:31 2025 GMT
Not After : Nov 12 16:01:31 2025 GMT
Subject: CN=032a6d367aecca5d3405f48bf23872c7ba9a3067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:69:c0:4f:b0:45:ee:e1:73:9f:05:d9:b2:
3f:85:87:4f:8b:9b:3a:48:63:f7:f5:0c:4f:7f:f1:
15:f6:49:68:20:9d:ce:af:c8:60:24:07:3a:31:e5:
0b:f1:4f:61:27:91:84:27:a1:28:cd:48:25:bf:dd:
1c:b3:2b:65:76:a4:12:b3:a6:3e:6b:d0:0f:19:e3:
c5:3f:75:e2:a8:b6:aa:37:22:5b:4d:d0:81:b7:c1:
d0:da:b6:af:26:e3:74:13:f6:c5:c4:06:31:9a:c0:
9a:48:3e:77:d1:63:0d:e4:93:c4:aa:3d:23:c6:2c:
c7:27:f9:5b:ac:73:d1:78:77:e1:97:d2:0d:16:fe:
40:69:2b:c9:5e:fb:2f:e3:1c:db:11:f6:5d:01:fa:
df:5f:47:d5:d2:49:42:4f:47:54:d9:b5:c3:f0:bf:
17:6b:61:fa:84:f8:f9:8a:5c:ee:fa:5a:3e:63:61:
dd:03:01:41:55:7e:e2:ab:11:17:14:84:ee:7d:94:
f4:16:91:72:27:df:a8:ea:6a:c1:e3:e2:44:1a:ad:
77:3a:66:b6:f1:99:62:3e:ab:b0:5b:98:dd:ef:cf:
50:11:13:9c:a8:d5:ce:d4:8e:f9:0e:34:8a:b1:c3:
7e:8e:68:b1:90:f3:56:f5:e9:0a:f9:85:e6:eb:fa:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2A:6D:36:7A:EC:CA:5D:34:05:F4:8B:F2:38:72:C7:BA:9A:30:67
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:22:ca:5c:8b:a7:66:e3:26:1d:b4:ec:41:09:92:70:2c:8b:
9b:32:b5:a8:d4:06:9f:85:76:05:12:a3:e4:e2:6f:cf:74:41:
43:19:89:3e:ef:f0:46:79:86:75:14:98:1e:d5:39:d8:02:c0:
fa:5c:4d:52:be:6a:6b:b4:fd:cb:3f:07:d9:e6:46:4d:1d:21:
6b:0d:d9:1f:05:20:6c:2f:36:90:32:0c:40:ff:e0:52:5b:60:
72:d0:5f:50:33:6a:49:d8:a1:74:7f:8e:c4:c6:39:8a:64:f7:
6e:36:08:c7:f4:34:70:8a:78:4a:90:0e:5b:97:98:d5:d8:0f:
90:9a:47:a6:a2:86:ca:e9:bb:e8:8e:a2:cd:b6:a6:97:fb:bf:
e6:b0:49:65:71:27:26:61:b2:c0:34:65:b3:4b:da:13:dd:b2:
65:c7:30:fd:16:79:15:9f:76:b6:41:43:32:29:fe:18:55:66:
38:ab:07:66:4a:59:3d:1f:6a:b7:2a:ab:e8:61:d6:ba:cc:39:
32:70:11:6e:07:c5:d4:10:c4:93:7b:f0:af:74:1e:02:be:26:
64:d8:57:eb:65:f9:0b:44:2f:45:b5:90:c5:a9:8c:ad:0a:6a:
2e:30:21:b8:55:3b:87:02:27:09:d6:ff:4f:22:55:25:ca:c0:
0d:9b:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:17 2025 by rpki-client