
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: qvbd2K1XNlrMGAdPSMYm4Kj7BY845hrrMO/+pte4kls=
Subject key identifier: C7:2D:FA:95:C7:70:95:27:FA:63:6D:0C:12:50:B8:1E:4E:48:CF:FE
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 01993537A4A5EE6CC2E07820FAA86E995F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 024B
Signing time: Wed 10 Sep 2025 20:01:02 +0000
Manifest this update: Wed 10 Sep 2025 20:01:02 +0000
Manifest next update: Thu 11 Sep 2025 20:01:02 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: TFjDQeVdAQiB4oUKm1S+o7gg3hjYXoMMpZoj2H/1Dy8=)
2: QCjl4a-9vegdBZsLVvWX0ydUgGY.roa (hash: wA/gZkPE3yxDP3RHjNK9FN3A1qfwH3nLJskDkbvV8q4=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:a4:a5:ee:6c:c2:e0:78:20:fa:a8:6e:99:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Sep 10 20:01:02 2025 GMT
Not After : Sep 11 20:01:02 2025 GMT
Subject: CN=c72dfa95c7709527fa636d0c1250b81e4e48cffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:88:08:9e:ba:45:69:b4:03:99:98:cc:de:
fb:4a:8d:cd:6b:6c:f2:60:7a:45:e4:1c:01:37:d6:
b7:ee:9f:14:47:87:dc:52:ce:95:c3:76:1b:c7:66:
d0:a7:b8:2b:31:c5:85:b7:42:4e:e3:d8:79:8b:66:
24:74:b0:15:5a:ca:c7:54:a0:9a:ab:b2:2d:89:6d:
dc:f2:8d:52:cf:cd:0a:81:56:97:1c:de:a3:5e:ca:
1f:67:16:bc:e4:cb:7e:cc:7b:c3:b9:57:cf:0b:1e:
a6:0c:2a:05:a8:0f:e5:f0:8e:04:ad:33:5f:59:42:
31:2e:aa:04:7a:83:15:b9:4c:11:a6:67:c2:97:b5:
32:9c:77:51:94:e4:97:d5:de:b4:bc:19:5f:1e:60:
1e:6a:76:83:50:da:4c:6d:b9:32:b0:00:f3:d2:15:
38:f8:6b:c4:c0:4a:ee:b2:0c:8b:72:04:25:b8:b2:
f6:fb:87:a2:ca:2e:c5:08:0a:9e:10:df:93:e1:7a:
65:41:83:2b:21:dd:d3:20:3a:4d:f7:b6:d4:59:37:
a0:f5:67:d5:ca:0c:4a:65:99:4c:78:08:dd:85:b7:
57:69:7a:dc:a6:5d:81:b5:d8:da:87:8d:32:42:12:
bd:48:9a:01:e8:57:14:47:4e:79:ec:3f:4f:ec:87:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2D:FA:95:C7:70:95:27:FA:63:6D:0C:12:50:B8:1E:4E:48:CF:FE
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b2:ca:f2:8f:60:77:d7:6e:9c:58:b2:1f:b2:31:2c:1d:42:
79:40:ba:fe:c2:a7:df:84:21:58:33:30:d1:3d:ba:39:f0:77:
38:a1:f5:a9:63:c3:60:11:22:61:cf:34:a1:c4:f5:48:29:f9:
5e:58:45:48:21:d0:7d:51:ed:6a:cc:e4:91:f1:11:d7:13:b3:
1d:f5:d4:3d:f9:22:d3:f3:d5:9a:08:34:8f:79:10:ef:db:15:
e0:64:73:e6:7d:39:fc:f5:e1:01:9b:72:c9:19:73:67:77:b2:
8e:c9:98:52:04:02:a8:dc:11:1f:6d:1a:a8:9d:db:99:b9:68:
f4:fe:8c:94:37:75:cf:33:8c:04:b3:67:44:b1:66:cd:ca:df:
2a:18:33:eb:5e:a2:2f:21:82:85:75:5c:ef:05:45:69:d7:a7:
bb:49:51:33:2d:f6:da:b1:bd:0a:39:e8:d0:4d:50:12:28:3a:
6c:9b:51:65:b4:3b:83:f6:d1:70:c6:df:1a:bb:56:e8:58:3c:
48:42:f1:7e:69:4e:c7:54:8a:24:f3:ad:77:a8:05:02:5e:b2:
db:74:07:bf:9d:72:6a:d9:75:a4:94:02:8c:f9:d5:01:7c:d4:
d9:12:52:ce:a0:94:a9:cb:cd:a3:97:96:f6:74:62:a3:0b:fe:
09:67:0a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N6Sl7mzC4Hgg+qhumV8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjJjZjgwN2E1NmI3NzFhNWY0MmNjMTg5YWYyZDYzMWVi
NWFhZWMwHhcNMjUwOTEwMjAwMTAyWhcNMjUwOTExMjAwMTAyWjAzMTEwLwYDVQQD
EyhjNzJkZmE5NWM3NzA5NTI3ZmE2MzZkMGMxMjUwYjgxZTRlNDhjZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUmICJ66RWm0A5mYzN77So3Na2zy
YHpF5BwBN9a37p8UR4fcUs6Vw3Ybx2bQp7grMcWFt0JO49h5i2YkdLAVWsrHVKCa
q7ItiW3c8o1Sz80KgVaXHN6jXsofZxa85Mt+zHvDuVfPCx6mDCoFqA/l8I4ErTNf
WUIxLqoEeoMVuUwRpmfCl7UynHdRlOSX1d60vBlfHmAeanaDUNpMbbkysADz0hU4
+GvEwErusgyLcgQluLL2+4eiyi7FCAqeEN+T4XplQYMrId3TIDpN97bUWTeg9WfV
ygxKZZlMeAjdhbdXaXrcpl2Btdjah40yQhK9SJoB6FcUR0557D9P7IdB0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMct+pXHcJUn+mNtDBJQuB5OSM/+MB8GA1UdIwQY
MBaAFNBiz4B6VrdxpfQswYmvLWMetarsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQt
MWRkNWZhYTA2YjBhLzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQtMWRkNWZhYTA2YjBh
LzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLLK8o9g
d9dunFiyH7IxLB1CeUC6/sKn34QhWDMw0T26OfB3OKH1qWPDYBEiYc80ocT1SCn5
XlhFSCHQfVHtaszkkfER1xOzHfXUPfki0/PVmgg0j3kQ79sV4GRz5n05/PXhAZty
yRlzZ3eyjsmYUgQCqNwRH20aqJ3bmblo9P6MlDd1zzOMBLNnRLFmzcrfKhgz616i
LyGChXVc7wVFadenu0lRMy322rG9Cjno0E1QEig6bJtRZbQ7g/bRcMbfGrtW6Fg8
SELxfmlOx1SKJPOtd6gFAl6y23QHv51yatl1pJQCjPnVAXzU2RJSzqCUqcvNo5eW
9nRiowv+CWcK3w==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:11:12 2025 by rpki-client