Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File: GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier: ++8D1qfIkEiBKcLpNpC+Q8HjOzMLbVbiHfewIoHr0N0=
Subject key identifier: 8D:AF:47:6F:61:5D:AF:43:34:CE:5A:15:6A:66:CA:9E:12:F1:59:7A
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer: /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial: 019A71B8B17C5A712AC9C204998840CFC34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number: 0AF5
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: ABKhqR1vWBneK8oAtojGphkVe3oWcSG3G1nVQtgLqFw=)
2: rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa (hash: fOnAbwYbkSj5pWsL7oCaEBc8d/CJJxJmdgkbmFTZcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b1:7c:5a:71:2a:c9:c2:04:99:88:40:cf:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=8daf476f615daf4334ce5a156a66ca9e12f1597a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:7e:cd:c8:17:19:48:ea:f5:46:0f:4e:7e:
22:fd:f0:24:2e:51:63:94:ee:8e:fe:9a:8b:a2:ae:
1b:50:f3:d1:91:7e:ac:8e:e8:fc:ee:6d:d6:07:35:
01:ef:ab:35:ec:82:71:6c:65:7a:a6:48:60:32:fd:
d5:8d:27:5a:b9:10:ba:4b:79:81:78:21:b6:f9:dc:
62:e9:e4:6a:b6:15:16:d8:5b:0c:cc:63:82:53:d7:
68:0c:9f:b7:59:1a:24:2b:f9:d0:63:c4:25:f3:69:
72:c6:33:97:fe:42:15:c2:dc:06:fd:c7:e7:e6:9c:
f5:8f:12:b9:52:b3:95:77:6d:d4:60:36:c9:97:fb:
18:52:a7:d1:63:5a:ac:f0:b2:b0:f6:01:ae:9f:1d:
77:cd:b6:a2:b3:e2:c5:41:bf:a1:46:1b:e6:9b:89:
ba:2b:c6:72:9f:64:c3:7e:b3:d5:d5:6e:f4:3b:3a:
7e:88:7a:ac:c5:05:1e:68:8a:3a:6a:15:a6:10:f6:
4d:16:c8:f8:9f:52:9c:83:90:cb:43:cb:f2:78:4f:
2b:42:65:d7:e5:3f:37:52:f6:f3:be:7d:0e:11:c1:
f7:14:0a:79:b9:b8:10:9d:dc:c9:20:78:5b:f8:e9:
fc:fe:48:dd:1c:05:fc:b5:87:ea:7c:b3:e0:7e:23:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:47:6F:61:5D:AF:43:34:CE:5A:15:6A:66:CA:9E:12:F1:59:7A
X509v3 Authority Key Identifier:
keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c8:d2:d4:bb:e9:10:29:62:cf:95:99:2c:18:bb:c0:1a:82:
69:cc:b9:0c:71:83:05:88:ab:5b:dc:59:9a:9d:90:e6:fc:55:
2f:30:7e:4b:c8:a7:0b:7f:3b:ea:26:97:52:e2:86:b0:a5:61:
69:a7:85:fa:9c:a5:50:1b:ec:8d:00:b9:97:48:7f:78:29:34:
92:89:3a:06:5d:b5:2a:ff:0e:f4:15:32:67:3c:8f:da:30:9e:
c3:b6:ab:2f:d2:d9:3c:4b:1a:3a:f9:68:08:f8:ef:6b:b9:3a:
7f:ce:44:55:01:65:16:69:d1:2e:09:67:08:df:0a:e2:f8:18:
e8:c2:be:6f:ce:80:0a:ea:23:d1:ce:ec:eb:80:72:91:dc:9e:
fa:bd:11:a1:4b:97:40:0f:13:2f:33:01:9b:2b:82:b6:d5:f7:
86:da:cd:09:6e:f1:c2:9a:ec:7b:28:9e:05:60:02:bf:a4:c4:
4e:7e:da:f8:8b:c6:f0:72:45:6f:43:01:59:9b:dc:a4:1d:c8:
5f:b4:90:d0:90:0d:93:78:17:5e:f5:b5:6d:46:24:e4:9c:a4:
f2:ac:05:7a:50:33:1b:59:97:ec:46:6f:27:dc:50:a1:55:4c:
74:d3:ce:e8:8b:dd:4b:ef:e8:b9:7f:c2:35:9b:12:ae:a3:f0:
54:94:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:23 2025 by rpki-client