Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: upL8dWte6GwmKw4PtVEIy+weDM7JQZxGSZM12zu77cE=
Subject key identifier: A9:A0:85:4B:D5:FA:0F:8D:D1:F2:3C:4B:7D:9A:03:B0:D6:A1:92:7E
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019922553CD57682C445A4DAA0EA47FC09E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 0527
Signing time: Sun 07 Sep 2025 04:00:35 +0000
Manifest this update: Sun 07 Sep 2025 04:00:35 +0000
Manifest next update: Mon 08 Sep 2025 04:00:35 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: 6rq5szG2QrP/VqcTu9EbN9yZAO4Lglh22+o56UG+V+s=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:3c:d5:76:82:c4:45:a4:da:a0:ea:47:fc:09:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Sep 7 04:00:35 2025 GMT
Not After : Sep 8 04:00:35 2025 GMT
Subject: CN=a9a0854bd5fa0f8dd1f23c4b7d9a03b0d6a1927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:ce:c2:25:98:10:e1:c2:65:1a:ea:cf:9c:
77:43:b0:b3:8d:df:8a:a4:9e:9f:e1:ab:0d:3a:4f:
02:87:60:15:ff:fd:a0:05:1e:b0:9a:f2:f7:aa:af:
9e:cb:c9:77:6a:3d:b3:63:39:c6:b5:55:22:0b:c0:
4a:e6:c9:0b:ec:7b:c2:02:d4:c8:61:e1:eb:c9:28:
41:ba:59:6e:32:60:74:cf:d0:c4:9e:3b:f6:4a:82:
7f:eb:6a:2e:57:e4:0e:cb:6e:6d:ba:4a:c9:70:e6:
82:27:90:42:e5:8b:e3:7c:4e:92:dd:7d:6e:5a:42:
c9:40:58:6d:70:30:d9:82:1d:43:71:a9:66:dd:ab:
7f:4d:32:dc:b5:20:6c:dc:56:d4:26:ef:29:4f:97:
f8:24:bb:49:33:96:12:5e:93:85:e7:3f:7f:45:63:
c3:bc:f5:7f:0e:1b:77:7e:de:2c:17:47:ad:12:ac:
91:3e:e3:38:af:34:57:38:45:6e:cd:4d:be:2a:95:
fb:6c:ec:99:22:5f:33:70:f7:2c:cd:9b:d1:99:8e:
48:15:22:e3:31:e5:fb:14:72:f8:37:9a:d6:eb:83:
a5:64:cd:3f:86:53:ba:21:9b:c0:6f:66:f6:d1:0a:
9b:cb:0d:cb:42:4e:d5:ef:f9:d6:5f:79:de:a1:28:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:85:4B:D5:FA:0F:8D:D1:F2:3C:4B:7D:9A:03:B0:D6:A1:92:7E
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:11:78:f3:0f:d1:dc:66:a9:70:f3:bb:27:11:3f:4d:35:2d:
a3:26:05:ad:87:f8:71:b5:57:dd:ed:cb:01:55:d3:ad:a7:ff:
48:e3:08:bd:69:db:65:fe:e5:1a:5e:40:fb:e7:ae:ce:1c:e6:
d4:4e:b9:35:55:17:8c:33:46:5b:f5:0a:b6:75:bf:96:2b:c2:
04:4b:b1:b4:95:cc:c1:60:2a:e0:72:8d:3a:0b:2e:8e:9e:e3:
5e:93:11:88:d0:f2:a5:cb:75:79:36:61:c6:ca:63:97:07:27:
72:a2:18:bb:88:d9:d8:76:f0:a9:c5:b4:30:f1:98:15:e9:08:
5a:e2:0c:4f:cb:86:23:80:c7:b4:04:4c:4e:f4:62:51:65:59:
fa:37:c6:5b:e9:01:b8:f9:b0:aa:48:99:c0:a0:ab:e8:f3:12:
f2:c3:63:6a:6e:81:a1:17:7e:2c:3c:79:f9:6c:78:95:51:39:
73:17:f8:00:9d:ec:f7:48:16:7f:d5:d7:46:67:30:78:0d:ca:
c3:54:50:bc:38:e1:91:d5:67:35:c9:e9:58:96:4f:01:80:4b:
eb:1a:12:d5:88:21:be:f0:81:c1:c2:f7:3c:2a:56:04:83:fb:
9f:cc:f8:6c:6b:8e:e0:0b:3a:b0:12:5d:b3:52:28:40:28:63:
c8:ae:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:26 2025 by rpki-client