Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: +1F7w2YqoFEE8AnrJBnN/TGQqUTll0cWeqeOHieoplA=
Subject key identifier: EE:FC:6D:F3:64:8E:58:24:B1:FB:44:4F:85:78:17:C0:15:54:C8:B3
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 019A20D1EEF788A02FF4E1FD6F22BB6895FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 02C5
Signing time: Sun 26 Oct 2025 14:00:20 +0000
Manifest this update: Sun 26 Oct 2025 14:00:20 +0000
Manifest next update: Mon 27 Oct 2025 14:00:20 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: b8Ibi+XQKky/Jm6DzmlFKuwQPXGmVZfThU9VuEMBLLE=)
2: QCjl4a-9vegdBZsLVvWX0ydUgGY.roa (hash: wA/gZkPE3yxDP3RHjNK9FN3A1qfwH3nLJskDkbvV8q4=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d1:ee:f7:88:a0:2f:f4:e1:fd:6f:22:bb:68:95:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Oct 26 14:00:20 2025 GMT
Not After : Oct 27 14:00:20 2025 GMT
Subject: CN=eefc6df3648e5824b1fb444f857817c01554c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:a4:c2:95:17:c7:32:6c:b8:1f:46:21:f8:
ab:5f:ac:97:16:4b:eb:44:97:94:c4:77:64:f7:32:
a8:00:d2:16:77:a1:0e:2a:82:7f:c1:ae:1e:5d:a2:
32:05:9c:b4:ca:c9:71:87:b0:07:78:0a:54:64:ef:
7c:61:89:f0:76:22:0e:37:44:38:cf:42:6c:3d:07:
85:18:93:f7:50:22:a8:bc:e7:aa:c2:0c:46:55:3a:
b6:0a:c5:bc:a6:dc:16:28:2c:aa:6c:f4:77:9d:0a:
29:7b:f2:e0:6c:77:56:24:71:81:c6:7e:0a:3b:3e:
e9:12:06:12:70:1f:e1:7a:6d:b9:8e:33:6a:d9:8d:
85:39:de:7f:59:c2:61:ba:9a:77:de:ba:53:d9:84:
1b:b9:2a:03:f3:e7:3e:30:72:84:eb:e1:13:56:bd:
3e:ea:0b:0c:08:ff:5d:bf:56:6d:5d:19:44:ae:5a:
ee:aa:6e:9f:87:a9:ed:b1:ff:44:6d:97:6e:ed:b0:
d2:d1:90:e9:66:9e:7f:54:24:87:df:f6:79:e8:f3:
19:33:09:ab:c7:79:9b:03:07:64:8b:ce:63:57:1b:
d7:df:3b:bf:f7:be:78:77:94:21:49:db:28:03:77:
0c:15:44:13:87:7c:b7:18:19:d9:c0:bf:1f:19:a6:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:6D:F3:64:8E:58:24:B1:FB:44:4F:85:78:17:C0:15:54:C8:B3
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8e:cf:08:bb:35:41:6e:1b:b0:23:30:ce:c5:59:be:15:6d:
b6:a6:e2:a9:2f:c1:b3:7b:ee:32:83:5b:4c:53:f4:cb:3e:64:
01:74:a9:09:88:60:aa:1c:68:d6:5b:91:d6:bf:2f:86:e4:18:
ec:42:b8:fe:f2:4d:53:0b:19:de:5f:f6:f3:71:c2:1c:8f:0f:
69:92:ed:2d:c8:06:08:51:22:80:27:02:ce:c0:f5:f0:fe:47:
57:86:6d:03:39:a6:cd:09:24:7f:b3:c8:f3:70:9d:29:a6:ef:
88:a4:96:29:db:06:e0:31:98:ea:14:76:a0:3b:79:c2:37:d1:
48:70:df:62:92:ed:00:f5:0c:b0:63:f0:9f:ff:e7:02:9b:e3:
ea:1d:2e:d4:7e:e3:b3:f4:54:32:62:a1:3e:c7:31:98:b1:8e:
60:4c:de:f8:f5:d7:80:b7:30:f5:5a:31:a9:17:6e:0a:af:bb:
4f:1d:3b:4a:ec:73:d5:ce:24:56:d6:36:8c:0e:8d:7d:b1:97:
22:59:c3:43:7f:6d:29:e3:54:34:b6:18:0d:c9:8f:cb:13:7e:
0a:2d:65:c4:6e:6a:d3:ff:5f:87:f0:8c:9a:6e:91:1b:bc:eb:
73:cf:a4:87:77:c1:e1:49:f5:5c:fb:78:71:d7:8b:ef:35:63:
cf:bb:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:24 2025 by rpki-client