Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: qAwGcfbSIbs031ONr2ZkofGUkEq+8oSy2bgrVgwuDWw=
Subject key identifier: 34:28:D1:F1:3F:CE:F2:E2:3C:4C:C2:8A:F7:F2:14:C2:86:A7:B1:E6
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0198D515FD13040159BC3BCEFD483A839C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 04FF
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: bcC622ZgnbCSaFTZaBcEMPXby+TaEaJ/RBeYtHqKzPM=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fd:13:04:01:59:bc:3b:ce:fd:48:3a:83:9c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=3428d1f13fcef2e23c4cc28af7f214c286a7b1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:73:ed:0d:70:85:42:60:03:c4:77:a1:ad:
7e:91:8b:13:fa:d8:8a:e5:e9:a2:fe:22:49:be:a0:
ff:65:8d:84:ae:97:89:ba:92:bb:a3:c8:47:c7:03:
94:e3:0d:9b:80:1d:a7:a8:4e:e6:53:af:5e:ef:00:
ef:65:c1:cc:76:38:c7:d2:64:14:7f:26:a7:2b:2c:
62:1f:1b:2b:0c:9e:d9:af:d1:10:ce:6f:f4:ac:3e:
68:53:51:a0:91:82:5d:6d:8c:95:4b:c8:d3:39:0a:
16:0e:e8:cf:b2:28:a2:be:89:07:c3:ae:82:41:7b:
12:82:b1:c6:d2:37:aa:5e:6f:cc:41:3e:06:39:6b:
ae:22:ec:17:f8:01:c2:02:df:aa:5e:89:8e:b5:02:
c3:d6:9f:9e:8e:e4:f6:1d:6b:0c:db:67:64:b2:05:
56:3e:d7:d9:2e:e1:01:52:b3:42:f2:d6:bc:ae:f1:
ae:b0:06:4a:14:fd:7a:b4:e0:3c:56:67:6c:cd:8a:
bd:b7:a6:b7:a7:09:a1:b5:0c:39:e2:ad:37:ce:6e:
39:7e:b0:9e:f3:7e:ae:c4:72:f0:78:50:83:96:be:
99:87:9c:28:69:a5:3b:e6:15:cc:19:56:3f:25:33:
ce:5a:75:1d:da:79:7c:e1:d7:50:63:b2:b8:60:d3:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:D1:F1:3F:CE:F2:E2:3C:4C:C2:8A:F7:F2:14:C2:86:A7:B1:E6
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6c:29:1b:9b:5b:95:cf:df:00:73:53:7b:89:f9:99:13:62:
0b:18:9a:40:76:ff:a6:76:0f:d3:bb:d7:e7:7b:6f:cd:c1:bc:
f2:59:aa:c3:b1:de:5b:5f:a0:bb:4d:5b:e5:95:13:fd:6e:19:
e8:54:77:1e:4f:68:97:76:27:f6:ab:87:c7:6c:bf:28:e5:0a:
d7:94:9b:12:c3:83:59:f4:2c:1d:a4:0b:51:c1:aa:d4:9b:ec:
8b:de:14:aa:51:1e:bb:a2:be:44:74:8a:45:d8:59:97:37:8b:
2f:ef:aa:f7:bb:eb:77:a8:27:e3:cd:cd:be:6f:46:ab:b0:94:
d8:d5:3c:8e:8f:b5:3b:0a:6d:fb:8e:05:df:43:64:da:61:0f:
19:96:88:fe:0f:b4:49:a2:45:f2:55:64:4d:e4:84:3d:84:11:
30:5d:d6:7d:ce:7b:98:53:9c:c6:b0:ac:3d:66:f6:d0:83:3d:
3b:0a:40:99:f5:05:19:35:2a:d2:c6:bc:50:e0:b2:e7:9c:30:
e9:43:1f:63:f1:e3:b3:72:38:63:0f:ac:04:28:67:7b:b2:17:
17:da:94:6e:26:06:c8:fe:5d:5c:22:24:e6:6a:31:78:e2:b5:
9e:86:93:84:16:41:b2:dd:11:b8:56:4a:00:fd:e2:d9:26:e9:
9b:0b:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:49 2025 by rpki-client