Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: 3cD3ZwvRrs/tLd0t/Ds/gqRummQf/jnn/jNAHa1dRe8=
Subject key identifier: B8:B3:16:8F:E3:A3:E5:EB:01:32:BF:60:0B:39:62:2B:DB:33:10:CE
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0199FC8F4B8D6CF15303629542AFC5825E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 0598
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: C86Xv7yAq2w1m6DRGUENo60pa01zFq+EkYT8MF1i5eY=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4b:8d:6c:f1:53:03:62:95:42:af:c5:82:5e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=b8b3168fe3a3e5eb0132bf600b39622bdb3310ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:bb:d2:07:d6:a4:04:d1:ed:21:a1:db:3e:
89:b6:3a:e5:e5:66:43:47:db:66:9f:db:5f:0b:d0:
25:78:c4:b0:e2:f4:25:1c:e0:0f:3c:95:35:3c:3a:
e2:33:b8:fd:82:18:93:58:b5:49:1a:1b:66:95:54:
30:1d:8e:06:e8:c7:d3:2c:bc:2e:71:3c:d3:a5:09:
18:ca:b0:ea:e5:70:e3:ae:b4:98:40:94:bf:15:81:
91:fe:e2:3a:64:fe:3d:7d:d9:59:da:6e:48:c5:5f:
86:93:fe:7b:92:63:2e:30:39:89:11:a4:dd:0d:a6:
87:e2:c9:1a:cd:2d:f1:15:57:29:df:0c:4d:60:fb:
0e:8b:7d:f1:02:d3:61:0c:cf:55:c7:90:31:d1:94:
e5:3a:92:62:fa:63:00:b9:3f:c2:dd:62:70:19:a7:
db:0e:48:a6:4b:8f:9a:04:95:21:75:b5:86:f8:cb:
94:3e:ef:96:0e:9a:a3:8a:88:9e:7d:13:09:26:1f:
3e:91:5b:d5:48:9f:42:7e:b5:ec:df:61:d1:7f:98:
61:f8:10:61:f5:cb:92:e0:22:2b:84:a0:27:6a:ca:
50:8e:49:06:50:b3:64:59:65:8f:22:7a:6c:88:d1:
1a:6a:4d:fa:77:8c:2e:6e:ac:cc:cb:c9:af:15:26:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:16:8F:E3:A3:E5:EB:01:32:BF:60:0B:39:62:2B:DB:33:10:CE
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:e4:bd:c4:c0:0a:bd:a9:49:43:75:84:42:a4:75:d2:ed:
c2:08:4c:fe:a2:c9:81:f8:31:02:cf:c0:d5:2d:15:06:20:f6:
5a:c0:ca:d6:c5:b9:c9:05:b9:1d:0c:1d:1f:eb:6f:ed:67:33:
62:dc:11:c1:5e:cc:4e:00:cb:f5:0b:11:df:d4:bb:13:eb:fa:
8e:73:df:bc:68:9c:0f:ae:95:20:f0:9d:72:74:58:76:43:b7:
a9:31:a8:31:83:29:35:84:b8:92:24:aa:c9:15:2c:e7:f8:d6:
f3:86:7c:3b:4e:e6:ab:ec:53:e1:73:bf:94:19:09:6a:18:da:
90:07:16:a1:26:fd:f4:0e:20:3a:c4:62:95:10:23:84:8e:50:
8f:8e:66:49:6a:4f:6c:22:e2:19:80:b4:d1:4a:64:7d:47:ae:
38:63:82:55:b6:a3:09:16:61:eb:0f:62:56:37:22:dc:d2:d3:
de:14:7f:5a:fe:26:2d:7a:20:cf:50:2d:b6:9f:0d:43:6d:58:
7d:12:39:6b:05:22:19:44:cb:03:a5:a2:15:41:4a:88:78:c7:
60:6d:77:b2:db:8d:1e:23:46:17:39:34:eb:e0:f5:ba:ae:5d:
63:15:25:33:c5:96:b7:bc:56:c3:46:6e:16:4c:05:4e:c7:0d:
5c:cc:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:55 2025 by rpki-client