Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: 3iriwg7En3h88apdX8UFVT8Gt1tfO+0hWrXuLmIvBRo=
Subject key identifier: B3:FF:87:65:8B:E6:4C:6E:A9:44:4B:13:B5:68:82:5D:E0:E7:F7:1F
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 01974A0C7EE81D2F3E0DF123EA7D82A1C019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 0443
Signing time: Sat 07 Jun 2025 11:00:22 +0000
Manifest this update: Sat 07 Jun 2025 11:00:22 +0000
Manifest next update: Sun 08 Jun 2025 11:00:22 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: hzaXtSUVQluxa3j8vj2MId0hgbEZVsNBFra7UuKrpEs=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:7e:e8:1d:2f:3e:0d:f1:23:ea:7d:82:a1:c0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Jun 7 11:00:22 2025 GMT
Not After : Jun 8 11:00:22 2025 GMT
Subject: CN=b3ff87658be64c6ea9444b13b568825de0e7f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:ef:b8:b9:9e:11:24:6e:72:fc:1d:86:f4:
14:c4:2f:6e:ae:7a:52:34:05:bf:98:3b:27:c0:83:
75:14:13:c1:92:d5:5e:c1:49:52:fb:5e:13:65:52:
7f:d7:e8:7e:9c:d6:c7:b9:cc:dc:d8:9f:46:f3:95:
3e:aa:bb:16:bf:c6:f2:e6:0d:90:19:05:a9:f4:c5:
a7:fa:d0:e3:6b:30:2e:64:1b:79:15:db:40:92:e9:
af:a6:ed:60:de:dd:e2:14:ec:52:ff:ce:56:76:32:
7e:16:1e:b7:24:5e:04:70:95:c4:8b:16:4a:17:40:
90:6f:2b:2d:88:69:38:13:05:54:e3:48:3b:07:dc:
ae:22:96:52:f3:9e:d8:8d:8d:d5:3c:a6:68:4f:ab:
e2:d7:4e:08:91:68:41:9a:9c:85:11:c9:bd:28:39:
f9:2d:7d:b0:60:bc:94:d8:35:18:af:f4:2b:08:5a:
0a:f5:08:8c:79:28:97:f1:8c:e2:51:76:88:6b:74:
8a:f9:be:02:04:9c:2e:84:2e:fc:e5:81:4c:47:03:
3a:97:8d:5e:a7:f0:55:5c:08:cf:c2:3c:72:5f:1e:
47:90:66:e0:37:45:60:3d:d5:dc:92:0c:12:40:62:
1b:5b:51:04:27:6e:d1:41:4e:07:fa:76:4b:3e:29:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:87:65:8B:E6:4C:6E:A9:44:4B:13:B5:68:82:5D:E0:E7:F7:1F
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7b:1e:96:00:da:ac:98:15:d6:8b:3f:17:f0:0a:c4:67:9c:
fb:1e:06:c5:41:01:51:ec:d9:35:99:57:f2:49:74:99:dc:56:
da:24:9b:21:dd:38:5b:6e:f6:6c:7c:80:39:d1:c4:ea:c5:d3:
b3:a2:89:6b:4a:12:7a:20:51:bd:26:53:e5:cc:5b:87:ad:61:
a3:a1:23:95:57:46:dc:3b:cb:1e:d9:b6:b6:a1:84:e2:2e:e5:
01:06:7a:a8:3d:90:bd:e5:f4:74:3c:f4:d7:9a:47:14:3d:4d:
f3:b8:e5:d4:b9:5e:b3:21:6e:bb:10:41:06:8f:83:ac:b3:a5:
a4:80:da:5a:3f:10:87:a6:36:b2:4f:2a:d6:df:6d:b1:b0:65:
be:07:e9:07:8b:41:06:24:a2:76:7d:94:78:78:02:4c:3e:1e:
1d:a5:62:1b:02:2a:b8:03:ac:5f:a9:56:65:93:ab:63:eb:cb:
07:63:99:38:46:c2:cf:d3:c8:6d:3f:aa:9c:18:ea:a6:19:d3:
65:76:27:1e:67:6e:60:7b:52:db:13:a7:93:23:eb:4f:1e:15:
75:6f:4c:72:07:55:9b:6c:b4:55:3c:9b:cb:4c:3e:d0:0c:b6:
a4:91:6f:15:22:9b:dc:95:61:9d:5a:27:16:5f:89:32:4b:0c:
82:55:a9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDH7oHS8+DfEj6n2CocAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl
NDI1MTAwHhcNMjUwNjA3MTEwMDIyWhcNMjUwNjA4MTEwMDIyWjAzMTEwLwYDVQQD
EyhiM2ZmODc2NThiZTY0YzZlYTk0NDRiMTNiNTY4ODI1ZGUwZTdmNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshHvuLmeESRucvwdhvQUxC9urnpS
NAW/mDsnwIN1FBPBktVewUlS+14TZVJ/1+h+nNbHuczc2J9G85U+qrsWv8by5g2Q
GQWp9MWn+tDjazAuZBt5FdtAkumvpu1g3t3iFOxS/85WdjJ+Fh63JF4EcJXEixZK
F0CQbystiGk4EwVU40g7B9yuIpZS857YjY3VPKZoT6vi104IkWhBmpyFEcm9KDn5
LX2wYLyU2DUYr/QrCFoK9QiMeSiX8YziUXaIa3SK+b4CBJwuhC785YFMRwM6l41e
p/BVXAjPwjxyXx5HkGbgN0VgPdXckgwSQGIbW1EEJ27RQU4H+nZLPimQ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP/h2WL5kxuqURLE7Vogl3g5/cfMB8GA1UdIwQY
MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt
ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz
LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnselgDa
rJgV1os/F/AKxGec+x4GxUEBUezZNZlX8kl0mdxW2iSbId04W272bHyAOdHE6sXT
s6KJa0oSeiBRvSZT5cxbh61ho6EjlVdG3DvLHtm2tqGE4i7lAQZ6qD2QveX0dDz0
15pHFD1N87jl1LlesyFuuxBBBo+DrLOlpIDaWj8Qh6Y2sk8q1t9tsbBlvgfpB4tB
BiSidn2UeHgCTD4eHaViGwIquAOsX6lWZZOrY+vLB2OZOEbCz9PIbT+qnBjqphnT
ZXYnHmduYHtS2xOnkyPrTx4VdW9McgdVm2y0VTyby0w+0Ay2pJFvFSKb3JVhnVon
Fl+JMksMglWpGw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:17 2025 by rpki-client