Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: YH/RDSJR4AnvCahtlaSR9xyEg7cH2sCr3r3xjsN+t8s=
Subject key identifier: 2A:D9:2E:C1:BF:C5:A5:76:AF:EC:82:F2:19:0C:BA:C7:8F:F1:33:7B
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 0199221F0FB41A9CDBB480C6F487EEE24EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0E3B
Signing time: Sun 07 Sep 2025 03:01:24 +0000
Manifest this update: Sun 07 Sep 2025 03:01:24 +0000
Manifest next update: Mon 08 Sep 2025 03:01:24 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: Rr1a72qJRcoAQ84V/Qk8jy8dmzB/bZ2WCpB+UQGSMX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:0f:b4:1a:9c:db:b4:80:c6:f4:87:ee:e2:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: Sep 7 03:01:24 2025 GMT
Not After : Sep 8 03:01:24 2025 GMT
Subject: CN=2ad92ec1bfc5a576afec82f2190cbac78ff1337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:39:65:1d:c0:79:3a:e8:c7:97:23:ae:bd:
7e:8f:f1:98:b7:6a:7c:db:c0:cb:59:f0:73:71:d9:
84:c5:6e:1f:26:e1:5e:fe:be:b6:40:bd:5a:24:c6:
d9:ee:d7:18:0a:91:05:7d:9b:6a:5b:f8:00:1c:67:
1d:09:28:4f:68:c4:6d:f7:c6:b0:61:f2:d0:5d:ca:
32:43:d4:ff:d7:1d:5d:bd:66:8b:ea:4a:f1:f2:3f:
e3:d1:c7:49:a0:37:e2:b9:60:af:10:f4:64:97:b1:
73:35:38:03:60:aa:73:77:28:a2:bd:ff:7b:30:79:
e7:f7:a9:38:b5:f7:4b:55:64:2e:94:4a:5b:21:fb:
5c:eb:e8:10:2e:28:6a:36:53:4c:07:e7:fd:32:a1:
b7:64:c4:a1:7d:55:f9:49:fb:bb:1a:dc:53:e3:1b:
1f:ae:50:30:90:1c:c0:55:44:65:8b:14:db:65:2f:
8d:e4:1e:e9:cc:52:b1:55:41:53:fa:93:34:d6:95:
12:cf:ad:91:69:ae:db:a2:3c:ca:5e:68:0d:e1:47:
59:b6:59:61:26:9f:53:22:82:e7:7d:c7:c2:e0:9c:
c6:8a:a2:77:43:05:44:7d:18:ad:cc:9b:36:9a:04:
ca:9b:a3:2c:6e:47:4a:eb:26:e0:e9:de:f9:ce:39:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:2E:C1:BF:C5:A5:76:AF:EC:82:F2:19:0C:BA:C7:8F:F1:33:7B
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f2:6e:ab:c7:0d:ce:f9:8d:9c:0a:bc:42:52:e8:93:da:31:
d2:d3:ce:c3:32:ff:d2:f4:ae:a9:09:8e:a4:3f:ce:3b:43:f8:
1a:b9:f6:8c:b0:e1:f0:9e:dd:25:6a:6d:d6:6c:5e:ee:01:08:
85:57:80:4a:72:23:18:b2:73:e8:39:2b:5e:65:1f:9d:85:ac:
29:d3:1e:4f:24:07:4e:75:24:9d:42:53:fb:31:94:88:ad:3c:
b0:81:17:bd:40:41:7e:c4:09:67:de:ec:47:0e:42:c7:93:9e:
59:4a:87:8b:70:d3:cd:0b:8d:34:1a:09:9e:dd:d6:f0:6e:f0:
77:14:37:a3:58:24:fa:74:29:5b:1a:0e:81:17:ef:79:4a:60:
6f:78:15:e1:a1:31:1a:8e:28:71:99:01:97:2e:ea:b5:20:0d:
f7:fa:66:11:17:1c:5b:e3:26:40:58:1f:b2:37:a3:46:27:9f:
d1:46:37:44:7a:63:ac:03:2f:32:93:f8:51:49:0e:ab:b0:93:
c2:f0:fe:e0:1d:a9:12:1c:05:d5:33:7c:bf:e9:96:d7:63:42:
e0:c4:81:aa:1d:f2:da:b8:b1:be:3e:7b:7e:8e:3e:7c:55:ec:
01:31:50:df:e2:36:69:b7:ee:3e:13:0e:7c:ba:aa:96:aa:6e:
3b:27:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:44 2025 by rpki-client