Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: ZddyXuB4F7E1Q2NLxK8SHiFWt3FTDRzZM9fBdkVIjCM=
Subject key identifier: 90:80:EC:E6:93:6F:8E:85:29:F6:81:F6:15:C9:1B:23:AD:BC:F4:10
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 0199FFFE7397C3638C180188A8D818D7BF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 0826
Signing time: Mon 20 Oct 2025 05:01:29 +0000
Manifest this update: Mon 20 Oct 2025 05:01:29 +0000
Manifest next update: Tue 21 Oct 2025 05:01:29 +0000
Files and hashes: 1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: rf/qqd9GaOFNbtN8GPP3LdTV7VSFjXQo1eEBYpUXRaY=)
3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:73:97:c3:63:8c:18:01:88:a8:d8:18:d7:bf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Oct 20 05:01:29 2025 GMT
Not After : Oct 21 05:01:29 2025 GMT
Subject: CN=9080ece6936f8e8529f681f615c91b23adbcf410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:5d:30:d3:63:a2:d8:b7:2f:3b:c1:a9:08:
2e:75:4c:01:bd:56:12:c4:75:11:92:a0:ac:76:9b:
8d:4f:88:97:7c:28:f1:f3:af:ee:f2:a5:e3:9b:19:
ea:f7:ee:ef:29:a2:b5:46:7a:e6:e9:01:b4:f5:f1:
c6:cf:04:54:fb:5f:56:9a:f3:52:59:02:d6:d0:0d:
4c:9c:5f:ad:75:bb:63:9b:42:8f:3c:09:30:24:10:
16:2c:d8:6c:14:e0:23:a3:97:75:71:e1:99:6c:fc:
ca:96:b0:cd:9f:6c:99:47:19:29:f8:96:13:99:2c:
27:a4:4c:47:43:ae:9c:b0:57:ae:ba:0b:5f:c4:d2:
00:c2:71:7c:57:90:69:b9:09:02:71:48:b3:7e:38:
72:21:82:86:b4:de:d2:73:9c:b8:13:25:65:58:56:
cd:f6:e1:69:de:12:e1:4b:d8:80:8b:bf:37:a7:26:
c3:c5:a7:ed:f4:81:0f:e0:06:b1:0c:29:79:3c:9d:
40:db:10:98:7a:d2:de:2e:e5:c8:fc:a0:ba:85:75:
2f:16:f6:28:76:8e:fb:8f:2b:39:2e:0d:76:46:91:
44:2c:09:86:42:89:a9:e0:10:1a:a3:c8:73:e1:20:
1a:45:c4:61:2b:1c:db:b5:99:36:9d:73:8c:80:4f:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:EC:E6:93:6F:8E:85:29:F6:81:F6:15:C9:1B:23:AD:BC:F4:10
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:98:32:6e:16:60:72:57:ca:02:a8:eb:6e:04:71:bb:0d:5c:
48:6c:19:15:b8:f5:d3:ee:6a:c7:c2:3f:36:21:ff:0d:21:5e:
4c:f1:0d:ca:50:35:60:dd:d6:5d:f8:d6:7e:47:a6:39:a0:a2:
27:31:d6:df:94:9c:f0:b0:98:9b:cd:2b:e5:ed:85:c2:96:2f:
1b:d0:aa:df:42:36:06:9a:f7:7f:39:59:7d:fe:76:46:2a:d9:
ee:2f:17:56:17:f7:67:38:41:b3:3a:ec:3c:65:b4:bc:74:2e:
90:18:56:45:79:db:41:c8:cf:ac:2c:e2:0a:ee:af:28:77:5b:
ad:91:3a:f7:dc:4a:39:49:b5:09:96:f4:b4:3a:1a:b5:92:01:
d6:85:a1:e7:1f:82:cd:9e:d3:83:97:d1:c0:58:b1:43:c7:e5:
55:f9:fc:4e:16:69:d6:a8:5c:f6:ea:1a:70:e9:7b:15:54:d5:
6d:e0:b8:f0:68:ca:29:71:56:1e:a9:cf:03:bc:70:6c:4b:1a:
32:2a:70:eb:5d:d8:62:ea:ee:19:7b:91:94:6d:bf:6e:a2:6b:
c6:e0:49:16:93:b9:fd:ff:5f:29:3c:9d:d5:df:fa:1b:a0:04:
b2:99:0b:fa:62:45:3b:1c:1a:9b:33:ec:39:e4:16:11:bf:10:
aa:91:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:28 2025 by rpki-client