Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: MesbExiFS21Zw95esleI2S26BSqggzEHTTMSgGPuBrQ=
Subject key identifier: A9:1A:9D:0A:73:87:CC:52:0D:19:86:E2:76:10:13:58:B8:35:58:F9
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 0199FC8F78C753D87E0E3FE8F3DC9F620C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: Cs0bECE/fh2YgcEeY9Ww8TK8D3vb5z3A36PJSFU5PYE=)
2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:78:c7:53:d8:7e:0e:3f:e8:f3:dc:9f:62:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=a91a9d0a7387cc520d1986e276101358b83558f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:91:89:80:91:33:62:2d:c1:d0:1a:cc:32:
86:07:11:dd:4e:a8:61:c3:f3:3c:46:5b:e0:2a:6f:
54:d9:47:69:79:43:92:1f:02:9d:5e:e5:27:8c:03:
f0:db:ff:1d:73:bc:c2:cd:d2:dc:0b:d6:57:94:5c:
8b:6d:ff:71:fc:9f:9e:8b:a2:12:8e:92:c3:97:44:
de:55:b7:93:b5:24:e6:3d:08:12:5c:e9:1a:31:81:
98:e3:ae:df:81:80:97:61:e2:c8:0d:b8:3f:ba:08:
b0:e5:ec:0d:2d:8a:a4:ae:5e:c7:79:eb:0a:53:bc:
4d:d1:65:f2:53:87:bb:f1:5b:99:3b:a5:f1:d5:e3:
d9:01:3c:f0:81:5b:dc:58:94:39:56:80:e1:b8:7c:
22:c2:15:c0:2e:3e:6e:82:09:38:d3:47:df:38:d1:
6c:fe:43:c7:1e:25:fc:48:83:d1:84:a9:29:21:0f:
4e:4c:a7:c0:b7:a0:2a:39:44:9a:9f:c4:20:d4:bb:
cd:6e:c3:11:5c:81:72:7c:1b:8f:fa:e1:88:9b:f9:
9b:97:6b:f7:27:d7:22:7e:70:86:ae:fe:57:9a:8b:
74:39:9c:65:34:c2:62:39:dd:b5:8a:c7:ba:78:9a:
83:de:3c:a0:8a:96:7c:2a:ec:b1:33:b4:fb:36:8c:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1A:9D:0A:73:87:CC:52:0D:19:86:E2:76:10:13:58:B8:35:58:F9
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:41:08:84:5f:ef:00:11:95:55:ff:55:20:02:00:a8:4d:
38:6c:ab:bf:f9:e7:ab:fb:b4:52:0c:d1:34:9d:2c:d1:6c:22:
c7:90:90:16:c0:d7:dd:0c:73:86:21:54:bc:13:1e:2f:34:39:
27:08:b1:c2:be:80:08:dc:11:83:54:9c:cd:7c:06:bd:71:14:
ba:a7:c0:5c:72:86:02:32:d0:ce:a6:aa:0b:32:75:7b:a4:93:
85:07:66:8f:26:e7:5c:ac:4b:11:60:e0:46:8f:1d:99:3a:44:
12:d0:08:d1:ee:ff:40:96:83:31:99:2e:89:0c:bb:95:5d:8d:
af:61:72:22:7b:93:14:81:58:b5:13:cd:dc:66:fb:64:1c:20:
ad:84:8e:d3:35:c1:34:cc:b2:37:4c:cf:dc:5a:ae:bd:db:08:
2a:56:85:6e:cf:66:9c:d2:c1:dd:b3:f1:a1:0f:5e:d0:78:5d:
f5:85:ea:a6:a5:43:a9:46:93:c5:e2:f0:98:c8:44:82:b1:c1:
a5:af:fb:66:e2:3a:d9:27:d2:87:3b:3b:11:6c:fc:b8:dc:37:
3d:14:44:28:5b:40:e7:91:b2:cf:93:f0:a7:57:a3:f7:74:c3:
2b:ee:fe:98:e5:c1:7a:c9:ae:5e:ae:fe:60:54:65:cf:27:be:
7b:a6:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:36 2025 by rpki-client