Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: KIdXY8wWr42zxP1FUXw3vwyomJOxztdyefuENwboqyk=
Subject key identifier: 8B:69:76:26:3A:08:F7:84:8F:7F:84:85:56:C3:E2:34:10:1E:5C:9C
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 0198D5BBC91C7A273CE7EA45EA58C479EDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 14C0
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: NRKQitn+naZMLbaSz9u8Wgl4B7cTkdwkyC36P8uXBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c9:1c:7a:27:3c:e7:ea:45:ea:58:c4:79:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=8b6976263a08f7848f7f848556c3e234101e5c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:f7:2c:29:44:d1:01:c5:0d:8b:47:99:29:
de:95:dc:27:50:f0:9a:31:19:84:14:50:e1:80:1f:
d1:73:76:91:8b:03:72:90:6a:28:e8:87:6a:a7:f5:
22:79:1a:c6:d5:9b:db:b9:d5:de:f9:b4:a1:13:93:
c6:d1:be:66:de:6e:5b:22:b0:6f:1a:f6:eb:1e:3c:
72:0d:68:f0:ac:00:e7:96:d3:2b:9a:c2:74:94:aa:
5b:ad:c5:b6:ff:0b:9a:cc:7a:82:e7:6b:dd:5b:3a:
35:98:4e:13:d1:cd:fc:7b:ee:5b:c4:d1:a1:8e:f8:
ed:d4:82:ef:0a:34:1d:9f:00:f5:37:27:10:f5:bc:
12:d9:44:31:e4:61:dc:9a:74:65:c1:a8:c4:6f:fa:
c8:60:72:96:c9:1c:b2:80:1a:25:df:b3:ba:e6:1c:
6f:9f:c5:b8:44:30:39:41:40:71:62:45:c2:9d:12:
7f:27:aa:63:59:e9:27:63:db:79:39:b6:2a:d9:c1:
77:f6:a5:c8:71:14:74:94:a8:13:3f:39:07:34:0d:
5e:e2:f6:fc:76:2f:7f:29:ee:81:d3:3e:05:f7:5f:
c5:41:32:d2:1d:29:31:c6:4d:30:ef:33:4c:9d:3f:
24:c1:a5:ed:6c:52:fd:67:ab:a2:84:fb:fd:d9:b1:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:76:26:3A:08:F7:84:8F:7F:84:85:56:C3:E2:34:10:1E:5C:9C
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cd:58:e9:be:9d:a8:54:d8:a3:f5:cb:e1:11:84:3e:a9:31:
19:9b:64:74:d2:3f:a4:c6:bf:f2:25:2c:57:a4:0c:b2:80:33:
9d:c2:e4:fe:76:f8:67:23:b4:c9:9d:d1:9b:d2:0c:93:2e:6b:
c8:6e:d0:d5:49:87:9c:48:ea:11:52:80:8a:dc:40:f8:18:cf:
70:c2:63:69:ea:1a:32:95:8a:df:f4:25:a6:6f:dd:2a:75:ee:
26:1b:2a:85:dd:b3:ca:f1:e1:77:4d:71:24:bb:f4:b4:35:ae:
db:07:e0:0d:55:f6:9a:70:96:a7:51:0f:0c:e6:b8:aa:64:9a:
c4:c9:4d:14:f2:42:43:df:41:b6:9f:f6:d1:f6:12:7a:c4:89:
66:f5:2f:f4:b8:46:ce:f4:47:b4:ae:e3:fc:86:69:7c:65:07:
20:ee:c7:49:0d:9a:86:f0:f7:5e:e0:07:65:b9:be:d8:1f:57:
0d:19:30:10:76:12:42:f3:dd:e5:f3:09:0c:fa:8f:72:44:f8:
e8:18:e2:48:da:b8:2a:7a:a6:ee:4e:01:5a:13:29:3b:3f:e9:
3a:7f:54:58:65:18:a4:2a:e3:5e:e3:68:77:d4:dc:82:68:89:
06:c6:e8:63:a3:03:05:ab:0e:e1:ef:e2:3e:12:fb:a4:aa:de:
c9:d4:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:20 2025 by rpki-client