Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier: nEGppnyExObDKc3LyC7KsEbid6xlGrwhL2TLBgy32Ec=
Subject key identifier: 1B:F4:DE:6D:D1:61:31:8B:BF:12:FD:94:9F:39:9C:09:45:D1:69:5F
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial: 019A1B0743C69269C60BBFAA6140BC629B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 11:00:52 +0000
Manifest this update: Sat 25 Oct 2025 11:00:52 +0000
Manifest next update: Sun 26 Oct 2025 11:00:52 +0000
Files and hashes: 1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=)
2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: GzlZOyB9XKD9DFRkbUG7Ci15U3gT5eYY1EZkKZoupes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:07:43:c6:92:69:c6:0b:bf:aa:61:40:bc:62:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Validity
Not Before: Oct 25 11:00:52 2025 GMT
Not After : Oct 26 11:00:52 2025 GMT
Subject: CN=1bf4de6dd161318bbf12fd949f399c0945d1695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:30:10:e1:3c:8d:8f:dc:b4:46:40:4b:e4:
60:64:5c:86:0e:e5:b9:c2:96:c0:8b:83:3b:6e:10:
a9:b2:07:11:8c:b5:ca:ed:aa:3e:c4:b2:03:50:bc:
dd:6c:c7:ba:a3:9a:0a:2a:94:56:9d:34:f9:b9:19:
3a:ba:b3:a8:a3:c7:4c:50:f6:04:53:f0:fb:0b:d9:
a3:01:02:66:17:93:e4:96:c5:46:32:0e:73:8c:ce:
8e:1c:ca:cf:11:4b:79:b4:c7:48:c1:e7:52:81:23:
56:91:6b:7b:1f:a3:0a:ef:f3:22:8c:3d:d9:d5:7c:
49:15:04:5c:77:58:54:3a:4b:4a:4e:94:4c:2f:d4:
9f:04:09:20:73:14:23:da:f8:08:a4:ad:d9:73:4f:
42:82:bd:9b:82:8e:23:a8:62:d2:c3:f9:fd:fb:de:
95:69:57:16:56:62:dd:b5:2c:68:85:7b:54:3c:93:
c2:1a:b1:ad:b0:dd:d0:33:d4:d7:dc:d4:21:39:3b:
28:f7:ab:21:12:60:03:6c:e2:85:4f:59:d1:40:35:
3c:aa:09:7e:e6:68:ef:f6:a5:a1:31:e0:e7:95:69:
50:7b:0d:fb:e6:57:86:4b:f7:b2:a7:37:6e:ec:70:
c4:79:88:76:30:71:58:b7:15:ce:c8:0c:44:ff:b9:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:DE:6D:D1:61:31:8B:BF:12:FD:94:9F:39:9C:09:45:D1:69:5F
X509v3 Authority Key Identifier:
keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:f4:71:b7:1f:81:df:a0:20:5b:e6:96:d1:cc:da:4e:3e:
70:d4:d9:ee:7b:ce:e2:80:8d:09:12:a3:f7:1b:5d:18:99:91:
d9:2d:1e:ae:5d:82:2e:a4:9c:b4:10:33:81:40:57:1d:70:c4:
ef:79:d2:e4:3e:ba:7d:49:7e:95:19:41:0b:af:01:72:e2:55:
5a:57:29:b9:2c:59:6c:d7:d5:4b:85:b9:3d:46:cd:f4:0d:66:
46:08:a2:d0:09:c4:8d:cc:05:b7:3c:84:57:5c:bb:73:fb:87:
5b:2e:1f:c0:de:2a:cc:15:4e:c9:b2:6c:b6:4b:58:1b:86:8f:
c1:6d:d4:7d:f5:8e:f5:1e:69:5a:7f:30:18:1f:e2:cd:34:6b:
c7:b8:62:20:67:75:c3:22:e5:88:55:ec:9a:fd:48:ba:72:ea:
d5:f4:83:2e:c5:a2:1e:de:c6:a3:4b:93:99:2b:11:b7:d9:85:
6d:75:d9:2b:60:f4:10:4a:ff:ac:92:53:ae:d7:4f:21:6d:39:
fa:78:23:e0:8d:91:92:89:77:b3:f0:2b:6d:91:40:11:00:66:
02:2b:b6:da:00:98:fc:2b:93:35:36:a9:ed:ee:9e:de:98:41:
96:11:87:dd:eb:2e:23:96:a8:6d:44:98:10:fa:9e:c8:96:62:
97:3c:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:02 2025 by rpki-client