Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: Z4+Lx7U9NS2K1SJet9vIrYpaX6abYFuuHosRX1VUgYE=
Subject key identifier: DD:C6:C1:D9:24:22:13:FE:10:14:9E:00:DB:35:E1:F8:B4:8D:43:B7
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 0199240CFB1A79925792AE58A75A9DE13B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 07B4
Signing time: Sun 07 Sep 2025 12:00:54 +0000
Manifest this update: Sun 07 Sep 2025 12:00:54 +0000
Manifest next update: Mon 08 Sep 2025 12:00:54 +0000
Files and hashes: 1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: qGleqaSbsIy8/1nYfrp7RO7eaOFFaCXe+WG0XxVT/tU=)
3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:fb:1a:79:92:57:92:ae:58:a7:5a:9d:e1:3b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Sep 7 12:00:54 2025 GMT
Not After : Sep 8 12:00:54 2025 GMT
Subject: CN=ddc6c1d9242213fe10149e00db35e1f8b48d43b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:06:cd:f2:99:ba:e1:55:ec:14:1f:97:29:
f2:d6:74:be:56:ac:8e:f4:1e:22:8a:fc:28:04:ce:
a9:92:58:ae:e4:ff:ec:01:bf:1c:ce:80:bc:63:b0:
12:86:d8:db:ce:5e:1a:8c:e9:b9:39:06:ef:e1:ca:
d9:ed:8a:d7:7b:9f:0a:f3:ee:17:a2:f6:8e:15:a4:
d6:c7:28:0e:78:1b:5b:df:f9:9b:ac:e6:db:b8:c5:
7e:e1:b8:7f:55:3e:32:33:21:b8:39:36:f0:2d:08:
02:52:6c:f5:35:7b:aa:60:22:71:8c:4f:c5:ea:af:
f9:8a:81:4b:6e:91:8a:f1:a3:b4:8d:80:98:ae:3d:
59:ff:94:a4:24:6d:b7:fc:26:cc:30:3e:ec:f8:c6:
25:51:88:c9:f1:cd:f8:09:b0:df:8d:7f:7e:53:ce:
4d:00:6b:f0:54:b8:12:f5:99:c1:39:97:dc:6f:19:
2e:29:11:d8:52:ce:6a:d9:04:c6:0f:52:ba:80:e9:
a2:76:64:6b:0e:62:b3:da:c2:69:b8:b3:91:cd:78:
25:60:e4:50:44:fc:48:25:98:0b:af:ff:4b:57:a7:
1c:7e:ca:b4:89:61:ed:b7:ae:24:59:4e:d3:a8:0b:
92:09:4a:af:ec:e7:36:12:9c:c1:51:c5:6c:ea:46:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:C1:D9:24:22:13:FE:10:14:9E:00:DB:35:E1:F8:B4:8D:43:B7
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:19:96:de:78:95:c2:89:84:50:1e:96:c6:1a:9c:14:cd:17:
5f:69:6f:9a:7f:6f:8f:c5:a2:fa:94:76:c0:6f:e4:b8:65:1e:
35:87:7a:f6:1d:0c:1a:82:ee:69:a7:5b:ef:d6:aa:49:93:f3:
8c:3f:c2:b0:23:d4:10:df:b4:9f:28:55:3c:b2:ff:a5:82:50:
ff:20:ef:46:bb:3f:a7:9b:07:f7:2c:68:30:99:91:1a:3e:ce:
3e:e8:af:8c:4d:56:e3:bf:02:44:99:a8:52:bf:74:20:c3:bb:
72:17:fd:38:6f:45:6c:99:99:31:31:62:d0:30:29:f8:5d:71:
71:b0:42:30:7d:19:44:0f:87:00:5e:26:2c:b4:87:47:19:d3:
1d:ca:f7:21:f0:dd:9b:d2:1f:ae:cb:aa:11:1e:f2:47:c8:7a:
8f:14:bb:5a:99:94:dc:76:8e:60:ab:a8:15:34:07:5c:43:24:
fa:1c:21:65:e3:78:86:3f:1c:b8:97:81:a6:a1:69:36:2c:c3:
4b:54:42:2a:68:35:a7:14:a6:38:6d:80:6c:24:7f:b6:c3:58:
ff:24:e0:5e:c7:d2:be:68:5b:6d:3b:34:9c:1b:e3:65:fd:ef:
86:11:53:3b:67:e2:b1:f8:77:93:6e:26:13:e1:1a:62:35:df:
3d:70:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:21:17 2025 by rpki-client