Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: yNvo7AL0li9xACbjxR8TpP+sE2h7VQPSCXVZONbf8No=
Subject key identifier: 97:2E:23:1E:ED:1B:0C:50:2D:45:E4:8D:26:21:09:86:C4:6E:84:4A
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019A0A13199EA21895DC9B643C23FC105B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0DCA
Signing time: Wed 22 Oct 2025 04:00:15 +0000
Manifest this update: Wed 22 Oct 2025 04:00:15 +0000
Manifest next update: Thu 23 Oct 2025 04:00:15 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: nt4rCp/cO1o72raR+nXzWmU6k2P+6URufX3a9RhEbrM=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:13:19:9e:a2:18:95:dc:9b:64:3c:23:fc:10:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Oct 22 04:00:15 2025 GMT
Not After : Oct 23 04:00:15 2025 GMT
Subject: CN=972e231eed1b0c502d45e48d26210986c46e844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:df:8a:d3:fc:6c:a2:64:ef:87:be:ec:37:
b1:0e:59:6d:bd:6c:68:ba:60:1a:74:60:ba:ab:9d:
31:b9:e5:51:ab:92:93:76:36:7b:8e:93:b9:4e:f7:
13:79:c6:24:12:af:48:4e:52:ba:28:ee:79:92:a0:
f6:6c:92:68:87:52:96:6e:f9:bf:94:78:34:3a:d1:
b5:a6:aa:5e:7d:44:e7:94:b6:2a:e7:57:21:bb:a0:
21:93:16:99:5b:19:89:68:0b:68:2d:15:00:82:94:
75:4b:90:a5:e2:00:c7:f4:8b:c7:4a:ea:c5:23:12:
6f:80:d0:f7:53:f0:f6:5b:68:92:6d:40:d2:26:90:
44:a1:4d:0b:bb:7f:c8:74:91:a3:68:2e:c3:12:eb:
e1:57:8f:43:58:5b:8e:73:30:46:7d:56:5a:d0:73:
7a:bc:78:42:b1:54:e8:d6:52:5f:db:6f:ca:2e:fd:
a1:e7:4d:54:2c:a5:f3:fc:5b:1d:13:b7:9b:2b:52:
8c:85:96:06:d9:d6:58:32:8f:1c:72:8c:b4:b2:ee:
49:99:67:e7:28:42:4b:8f:fa:bb:53:06:b1:16:64:
1f:31:c0:78:0b:14:04:c5:bf:79:67:8d:6e:41:44:
a7:78:d9:b5:73:5d:f0:f6:01:54:af:e3:cb:a6:f8:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:23:1E:ED:1B:0C:50:2D:45:E4:8D:26:21:09:86:C4:6E:84:4A
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:aa:e6:28:50:82:75:e9:34:cd:6c:89:20:82:d2:84:e1:7c:
01:4b:37:cc:93:83:ec:8e:96:1f:8a:00:ca:46:b5:7e:de:ae:
90:97:93:eb:53:66:77:f5:2d:2a:db:be:82:e9:6c:a8:55:e8:
12:18:cd:df:62:96:08:0e:e5:29:c0:d8:82:ba:ff:8d:56:73:
f0:16:19:82:41:18:3e:67:62:5f:12:0b:97:7a:93:fa:eb:60:
e8:76:73:ef:ce:dc:77:ce:ea:ff:e0:af:54:0f:e8:8a:1f:56:
f1:37:49:71:6d:05:5e:ba:fa:5e:66:cf:d2:cf:60:6e:3d:68:
97:88:0c:9a:85:84:54:04:88:cd:50:1e:74:10:8c:a1:c7:23:
26:e2:39:6e:6e:73:d2:7e:b1:01:e9:71:a5:08:64:8b:1f:46:
69:c8:8b:b5:ee:29:d1:a7:9a:0a:98:69:aa:16:4b:f1:cb:8c:
5f:e4:f5:03:55:b4:f8:1c:61:15:05:74:6f:72:a8:aa:5b:79:
15:32:44:18:78:11:4c:df:4c:b2:56:09:d3:84:18:4e:6d:02:
60:27:ca:4d:ba:66:be:09:51:62:2c:ce:27:37:72:6a:fb:f8:
41:9e:eb:b6:c4:60:55:78:d8:8b:0b:1b:3b:75:31:cd:d5:38:
c6:63:b3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKExmeohiV3JtkPCP8EFt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTM0NTA1ODQ1ZmEwYTkzZjgyODVhNmRhOGJjZTZkMWQ3
MjAwZGQwHhcNMjUxMDIyMDQwMDE1WhcNMjUxMDIzMDQwMDE1WjAzMTEwLwYDVQQD
Eyg5NzJlMjMxZWVkMWIwYzUwMmQ0NWU0OGQyNjIxMDk4NmM0NmU4NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATfitP8bKJk74e+7DexDlltvWxo
umAadGC6q50xueVRq5KTdjZ7jpO5TvcTecYkEq9ITlK6KO55kqD2bJJoh1KWbvm/
lHg0OtG1pqpefUTnlLYq51chu6AhkxaZWxmJaAtoLRUAgpR1S5Cl4gDH9IvHSurF
IxJvgND3U/D2W2iSbUDSJpBEoU0Lu3/IdJGjaC7DEuvhV49DWFuOczBGfVZa0HN6
vHhCsVTo1lJf22/KLv2h501ULKXz/FsdE7ebK1KMhZYG2dZYMo8ccoy0su5JmWfn
KEJLj/q7UwaxFmQfMcB4CxQExb95Z41uQUSneNm1c13w9gFUr+PLpvjHhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcuIx7tGwxQLUXkjSYhCYbEboRKMB8GA1UdIwQY
MBaAFIJTRQWEX6CpP4KFptqLzm0dcgDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAt
NDdjYzdkMWFiYzZiLzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAtNDdjYzdkMWFiYzZi
LzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6rmKFCC
dek0zWyJIILShOF8AUs3zJOD7I6WH4oAyka1ft6ukJeT61Nmd/UtKtu+gulsqFXo
EhjN32KWCA7lKcDYgrr/jVZz8BYZgkEYPmdiXxILl3qT+utg6HZz787cd87q/+Cv
VA/oih9W8TdJcW0FXrr6XmbP0s9gbj1ol4gMmoWEVASIzVAedBCMoccjJuI5bm5z
0n6xAelxpQhkix9GaciLte4p0aeaCphpqhZL8cuMX+T1A1W0+BxhFQV0b3Koqlt5
FTJEGHgRTN9MslYJ04QYTm0CYCfKTbpmvglRYizOJzdyavv4QZ7rtsRgVXjYiwsb
O3UxzdU4xmOzTA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 15:08:26 2025 by rpki-client