Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: UoNxsMh3qHfL4cCeyjk835cFzk7AdI2Dt2fV6VhzpYo=
Subject key identifier: 29:F4:F2:F2:AA:9C:54:2B:12:3E:D5:22:C3:A6:12:03:BD:5F:44:AD
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019A71B93DFDEB9EBE80AA278FAA8AA9F7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0DC8
Signing time: Tue 11 Nov 2025 07:02:36 +0000
Manifest this update: Tue 11 Nov 2025 07:02:36 +0000
Manifest next update: Wed 12 Nov 2025 07:02:36 +0000
Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: iRl4DCiO+kdcRR5L8Hw8VrVBoGN6mgX4yD3F7scJG1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3d:fd:eb:9e:be:80:aa:27:8f:aa:8a:a9:f7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Nov 11 07:02:36 2025 GMT
Not After : Nov 12 07:02:36 2025 GMT
Subject: CN=29f4f2f2aa9c542b123ed522c3a61203bd5f44ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:41:5e:40:27:39:cf:2b:8f:3e:4b:de:7b:
f6:30:a8:a7:78:eb:27:f4:62:8b:26:3f:88:1a:9f:
1e:ce:19:4b:0e:40:5f:3b:bf:cc:87:22:7d:40:21:
55:c4:e4:d9:18:f0:70:90:cf:07:db:a6:d7:a6:bc:
7c:5d:64:ad:f0:de:6a:e5:f0:2a:a1:b0:8f:89:87:
fd:25:8f:15:61:2d:e6:d7:32:36:7d:20:38:32:0f:
57:ff:6e:12:ec:34:c9:6c:76:3f:c8:09:24:35:40:
5d:b7:ea:2d:5f:91:86:99:05:e7:fa:21:be:a6:4e:
0d:6b:f1:52:47:2b:c8:66:ad:43:36:28:2c:2f:b5:
a9:2c:c7:ce:1e:4f:de:bd:40:79:a1:9f:c5:d0:f9:
a5:3d:9e:3b:7a:e3:a3:3a:1c:45:01:92:26:62:88:
a1:2a:1d:ac:03:77:d8:44:db:de:e7:2b:90:60:67:
68:35:8b:f8:9c:b3:1b:a0:77:cf:98:94:36:ed:6b:
43:c7:db:6b:19:c2:0b:ea:d9:90:f2:2a:0b:01:3e:
75:0d:18:d2:2a:da:1e:98:33:41:e9:9c:3e:bd:74:
18:03:0f:d5:7a:1e:56:fc:f3:b0:ad:7d:82:e1:d7:
05:25:b3:5a:3a:ec:60:e2:da:aa:82:af:22:19:4c:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F4:F2:F2:AA:9C:54:2B:12:3E:D5:22:C3:A6:12:03:BD:5F:44:AD
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:04:c9:31:0e:cd:e2:3b:f1:01:85:7d:a5:ba:a7:6e:c7:
21:3d:e5:c3:e2:63:40:3a:9f:ad:b8:7e:ec:3f:67:ab:40:80:
a6:88:32:17:ed:20:3d:30:a4:47:4b:04:9f:70:9d:f7:e2:39:
79:e2:4b:8b:86:c5:52:27:5c:28:19:bf:06:bb:45:25:10:51:
b6:6b:be:44:71:96:9b:a6:79:23:0c:ba:32:b8:f9:e9:88:90:
d0:05:4a:9e:69:eb:ec:35:5f:92:cf:ae:e6:28:69:a5:0b:d1:
74:25:de:e0:74:25:9c:9f:a9:36:7a:ad:5a:75:dc:9c:ec:1f:
34:d8:35:12:58:51:29:fe:26:0d:2d:de:60:67:19:42:4d:47:
3c:aa:d4:54:29:dc:5d:02:d7:71:64:a5:eb:8f:7e:cc:a5:59:
47:a5:fe:12:84:99:e2:dd:fd:d9:9a:30:b5:ab:93:ae:5d:75:
90:10:21:8d:f0:1e:d7:6a:f0:06:15:ae:73:02:13:e1:e9:1f:
5d:db:58:01:37:02:eb:55:78:89:e8:e0:cf:da:1a:60:68:3e:
49:31:52:14:ed:37:e5:d1:fb:81:0e:7a:37:90:de:6d:41:d2:
80:ec:28:fe:de:b9:3a:ca:a8:44:79:e0:76:dc:a6:ab:06:7a:
a5:45:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:48 2025 by rpki-client