Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: LFFfLTOLlbg6DJIIa9+wKHHe78IJCrCC0cAwb3AZaUA=
Subject key identifier: B0:82:D2:2A:8E:90:59:F5:05:57:86:AD:7C:D8:A0:B4:69:8E:52:09
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019A25F88A778C000A96F0FB69745E2F8760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 05BE
Signing time: Mon 27 Oct 2025 14:00:36 +0000
Manifest this update: Mon 27 Oct 2025 14:00:36 +0000
Manifest next update: Tue 28 Oct 2025 14:00:36 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: aIxekTLJ5383eTvj4NfWxLjLsAi4Xi6Bo3k7gyrBHs4=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:8a:77:8c:00:0a:96:f0:fb:69:74:5e:2f:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Oct 27 14:00:36 2025 GMT
Not After : Oct 28 14:00:36 2025 GMT
Subject: CN=b082d22a8e9059f5055786ad7cd8a0b4698e5209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:68:91:ed:ae:11:3e:57:12:3b:75:2b:9e:
34:3b:97:bb:1c:8e:97:00:49:e9:95:a3:ec:52:d8:
31:64:5c:12:f5:52:b3:cc:64:92:5a:06:67:91:18:
6d:63:a7:d8:67:39:5b:85:8a:28:14:1e:08:00:84:
8a:3d:9c:fa:57:c2:0c:c0:23:8b:66:23:00:56:47:
09:f3:43:a8:5f:b0:47:69:e7:b9:73:d6:70:8d:a8:
e3:1e:a8:85:f9:55:e8:13:07:7c:79:43:7a:1d:bd:
bc:92:74:a1:ca:50:b9:4f:45:02:5f:6c:c7:9a:06:
2e:c5:d3:5d:8c:10:fc:ce:17:a0:99:26:0c:42:a7:
61:2c:66:ec:d6:2f:ac:2d:2c:fb:57:16:8e:11:bc:
f3:43:6a:4a:91:e6:bd:9f:c4:ab:7e:99:c3:42:66:
d2:08:af:f6:3b:d2:ae:c7:f7:0f:ec:8b:dd:dc:49:
d6:dd:2d:eb:7a:f0:0a:fe:66:ac:1b:a2:c6:dd:ee:
34:19:a7:d1:cd:d2:35:66:33:0d:8a:1c:78:11:21:
90:1e:e9:4f:b5:9c:f1:7c:b1:7d:31:6e:6c:b4:61:
24:cd:17:68:8d:23:48:2d:1b:12:ea:b4:d7:be:42:
17:d1:99:fa:2a:93:36:b7:8f:48:2e:14:f8:be:a9:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:D2:2A:8E:90:59:F5:05:57:86:AD:7C:D8:A0:B4:69:8E:52:09
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c9:8c:a3:0f:0f:d1:b6:00:e0:d0:8f:22:8c:06:1e:70:57:
36:41:fb:9e:1e:bc:d5:d6:68:ab:a7:24:ca:35:72:51:cc:9b:
de:65:39:8c:17:a3:73:ed:92:12:9d:62:86:17:8c:79:74:9e:
36:de:42:39:f6:98:9c:bf:a5:63:f2:cf:68:ae:9b:ed:a2:32:
7d:c0:b7:09:5b:fa:bb:0c:63:ef:9f:88:2e:60:9d:ed:00:ee:
9e:eb:b6:ff:db:2a:b7:81:b9:03:ff:8b:26:a7:c7:24:6b:19:
d9:c6:af:3e:9a:95:2c:af:fe:d4:8f:07:1d:10:df:ac:f2:87:
0e:99:3a:f4:51:96:00:e4:9c:ba:ee:6b:82:82:f1:41:93:15:
3e:e0:73:bc:53:77:ab:a1:ef:8c:96:e4:82:df:7e:d7:f4:2b:
88:b8:0a:08:f3:aa:f6:29:0c:aa:f6:76:9b:19:b8:2d:70:e6:
7a:7c:ef:cd:52:b5:f8:44:ec:bc:53:21:b7:3c:ed:57:69:3c:
0f:ad:4e:96:1c:a6:ba:e2:8f:af:d2:61:a2:84:f4:c6:8b:c6:
ad:a9:f7:1a:2a:0d:da:20:06:70:b6:83:bd:f6:1e:43:60:27:
0a:4e:3e:46:72:6c:ca:65:80:a8:ab:65:0a:f7:8b:0a:fb:dc:
1a:a6:8d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+Ip3jAAKlvD7aXReL4dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl
NDI1MTAwHhcNMjUxMDI3MTQwMDM2WhcNMjUxMDI4MTQwMDM2WjAzMTEwLwYDVQQD
EyhiMDgyZDIyYThlOTA1OWY1MDU1Nzg2YWQ3Y2Q4YTBiNDY5OGU1MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp5oke2uET5XEjt1K540O5e7HI6X
AEnplaPsUtgxZFwS9VKzzGSSWgZnkRhtY6fYZzlbhYooFB4IAISKPZz6V8IMwCOL
ZiMAVkcJ80OoX7BHaee5c9ZwjajjHqiF+VXoEwd8eUN6Hb28knShylC5T0UCX2zH
mgYuxdNdjBD8zhegmSYMQqdhLGbs1i+sLSz7VxaOEbzzQ2pKkea9n8SrfpnDQmbS
CK/2O9Kux/cP7Ivd3EnW3S3revAK/masG6LG3e40GafRzdI1ZjMNihx4ESGQHulP
tZzxfLF9MW5stGEkzRdojSNILRsS6rTXvkIX0Zn6KpM2t49ILhT4vqnwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCC0iqOkFn1BVeGrXzYoLRpjlIJMB8GA1UdIwQY
MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt
ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz
LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcmMow8P
0bYA4NCPIowGHnBXNkH7nh681dZoq6ckyjVyUcyb3mU5jBejc+2SEp1ihheMeXSe
Nt5COfaYnL+lY/LPaK6b7aIyfcC3CVv6uwxj75+ILmCd7QDunuu2/9sqt4G5A/+L
JqfHJGsZ2cavPpqVLK/+1I8HHRDfrPKHDpk69FGWAOScuu5rgoLxQZMVPuBzvFN3
q6HvjJbkgt9+1/QriLgKCPOq9ikMqvZ2mxm4LXDmenzvzVK1+ETsvFMhtzztV2k8
D61OlhymuuKPr9JhooT0xovGran3GioN2iAGcLaDvfYeQ2AnCk4+RnJsymWAqKtl
CveLCvvcGqaNbA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:03 2025 by rpki-client