Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: ijd14prZsUmFwJ9r8idN1LkOB+hWrtEl2BLaSb7FQ1g=
Subject key identifier: 9C:DE:6E:8D:26:62:2E:EB:EA:0A:B4:0C:AB:DA:AC:CC:B9:9E:D4:24
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019A05FF54238ADA50F24F09A98322548F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 080D
Signing time: Tue 21 Oct 2025 09:00:10 +0000
Manifest this update: Tue 21 Oct 2025 09:00:10 +0000
Manifest next update: Wed 22 Oct 2025 09:00:10 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: K7TuVCYIuDQPhBTr9yv7TaFt9YLSZppjdiqWsCuAgp0=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:54:23:8a:da:50:f2:4f:09:a9:83:22:54:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Oct 21 09:00:10 2025 GMT
Not After : Oct 22 09:00:10 2025 GMT
Subject: CN=9cde6e8d26622eebea0ab40cabdaacccb99ed424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:00:74:dc:7d:38:8b:88:46:41:1c:f0:10:
24:2a:db:fc:fa:d3:de:21:c8:72:26:ef:70:a5:a6:
32:73:c0:33:ca:44:af:06:3b:ac:b7:99:12:72:95:
53:fd:90:c5:42:00:77:1d:62:c7:ed:72:a5:70:bd:
38:25:16:c4:fa:0f:45:07:9c:ab:14:6b:3d:4d:b3:
cc:5c:e4:e9:31:74:40:84:bf:15:62:03:e3:3d:c9:
7b:bb:5f:d6:a0:67:44:45:b7:6e:cb:4d:bb:06:cd:
be:0f:28:c6:e7:6b:74:8c:8b:4b:41:40:9d:85:c6:
46:22:ec:5f:a4:71:9a:cb:07:44:f2:81:7a:5c:05:
25:20:83:f3:6f:c1:42:98:4b:82:2a:2b:e6:07:51:
82:f1:10:60:b3:71:d2:bd:29:20:77:dc:6d:ee:32:
2e:ef:ea:02:fd:de:c7:f7:54:0b:64:26:a4:65:55:
4d:e7:02:b0:20:b5:14:47:4d:cd:d3:de:a1:8b:ad:
c4:be:c9:3b:52:60:77:3f:90:d7:ab:94:82:26:8d:
b2:02:b8:6c:64:07:ae:fe:25:4d:8f:9d:86:7e:2f:
54:0e:04:1a:6c:c0:89:94:8b:e7:29:9b:51:63:65:
f1:49:be:38:a1:fc:b6:63:e8:95:b5:24:d9:dd:23:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:6E:8D:26:62:2E:EB:EA:0A:B4:0C:AB:DA:AC:CC:B9:9E:D4:24
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c1:48:fc:31:80:36:be:0f:ae:1f:0d:b0:8e:67:7e:db:fa:
93:ee:97:d8:02:bc:90:ce:8e:93:99:d4:52:c8:e0:f0:cc:5e:
66:50:2b:6b:a8:2e:04:12:ca:cd:d2:d7:1f:0f:22:6f:c3:d0:
ae:65:7c:5c:8a:3c:79:ab:8c:50:50:18:23:0c:14:89:bd:69:
64:c5:38:7c:f6:ad:17:b3:0d:f0:20:13:e1:18:36:a9:d4:e7:
ca:b0:2d:ab:8d:3c:d0:71:19:b3:b5:bb:29:2a:17:74:bd:8b:
67:82:ad:f9:e5:26:3e:c4:9d:6a:cd:33:4a:10:b7:09:36:3d:
05:fc:b7:95:bd:40:f3:27:23:28:79:76:7d:a5:eb:ad:c7:92:
95:75:b3:87:63:a9:cd:7b:6e:ea:81:a7:ed:11:34:46:5d:31:
cf:77:85:39:06:6f:ba:5a:9e:65:8e:94:56:4b:52:96:5f:15:
30:fa:93:a8:db:89:df:3e:77:78:3f:3d:93:cc:da:a0:4b:af:
ed:e9:99:e0:a8:d8:fb:4a:69:d2:9b:b4:90:68:a1:f8:e9:ba:
95:8f:75:d7:13:b8:1d:98:b8:01:3a:9c:b3:70:33:db:69:3c:
b7:0f:39:4e:0d:66:ab:60:62:22:77:fb:0f:f1:10:6d:75:78:
cf:93:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:12:31 2025 by rpki-client