Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: VEeakErBrBGYNVDKtKlEGCVomNl1BNOXd6o6z8h4PdI=
Subject key identifier: E5:C2:A9:81:CB:71:D0:9C:DC:73:8E:E5:3B:17:5B:44:96:41:2B:BB
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 0199FC5895CFD63FA527DCF5CA2D9E175F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0EAC
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: ZFd3NfiPwKtZnobESQQYbciCe9kMO9yTZerNEqToSg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:95:cf:d6:3f:a5:27:dc:f5:ca:2d:9e:17:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=e5c2a981cb71d09cdc738ee53b175b4496412bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:26:03:d7:56:8a:bc:47:23:91:50:43:5a:
cb:2f:5a:de:da:61:a1:f2:bc:05:64:86:01:6a:b5:
28:e5:f1:ad:8f:0f:fa:15:5e:42:dc:f0:19:79:6b:
07:d1:f3:9b:06:97:9e:1a:37:a1:67:b8:0d:88:81:
52:ec:fa:69:8a:19:17:2a:bf:fc:65:dd:85:6e:37:
0a:7a:c6:fd:b7:11:0c:f8:80:11:fb:ba:aa:1e:4f:
6e:e8:90:1c:cb:a4:0b:4e:b7:b8:06:fd:61:61:cc:
36:47:5b:ca:f8:8e:02:b7:2e:84:2d:38:4c:0c:f9:
3d:34:31:5d:35:95:8e:66:0f:0c:0f:4b:bd:f5:80:
f6:18:53:16:cf:32:2f:be:8f:7b:05:4c:30:c6:53:
6d:d7:c2:db:71:47:0b:4e:6f:1b:ac:20:d0:16:12:
b2:4a:93:c3:47:6d:93:e8:0d:16:52:f0:c0:6c:01:
93:a6:4a:1e:04:0f:48:83:09:66:84:06:6b:ed:53:
cd:73:81:10:8f:bf:6f:87:d5:f6:9a:50:26:8c:c6:
d6:e2:7d:59:60:58:f1:63:5e:58:bf:bd:e4:2b:58:
35:ca:88:16:c8:74:51:71:fc:be:b6:46:e5:e5:75:
89:5a:48:52:37:ee:84:04:4d:ea:94:b9:ab:5a:08:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:A9:81:CB:71:D0:9C:DC:73:8E:E5:3B:17:5B:44:96:41:2B:BB
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:33:3c:5a:88:e3:a4:8a:70:a2:78:07:fe:2d:74:70:4e:
a2:5e:5b:b6:a9:52:60:b7:f5:f3:9a:a8:ff:20:73:d4:8c:ba:
d8:db:0a:57:b9:70:b1:5d:e7:3f:1e:bd:df:f0:8a:52:c9:22:
36:53:1f:30:e9:37:46:7e:76:d6:0f:70:32:47:6a:45:f1:2a:
de:26:67:fb:04:1f:dd:8e:5d:94:0b:d0:06:9a:94:39:83:e1:
02:12:0c:58:0d:15:86:be:8f:2f:34:ce:7d:ea:38:0c:4e:03:
d2:23:f4:87:40:49:b1:34:27:a7:2c:fb:a0:b6:97:3e:9b:d3:
f0:4e:2b:b0:fc:1c:15:c4:91:d8:f1:f0:95:23:27:20:8a:fd:
c5:20:9c:25:28:49:23:54:b8:c8:e2:65:9d:b3:ea:b0:22:27:
1c:a5:e0:ed:71:ce:9e:2a:d7:c8:ad:c1:29:86:aa:8d:77:fe:
24:95:9e:f8:3e:d9:41:95:e7:cb:17:f8:d0:86:82:63:07:f0:
4b:de:d5:63:20:58:ea:be:f7:4b:23:ab:18:f0:e0:fd:74:9c:
4c:c1:de:60:d8:24:b2:b1:46:f0:e3:f2:e0:2c:1d:6d:ad:bc:
d7:3e:43:88:7c:fc:cb:31:7b:a6:23:26:ee:e2:6f:5f:cf:d8:
71:4a:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:37 2025 by rpki-client