Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: xfGoSJMZmeeZhPGrsmYvtfbZwEw6M6QO2MhLCEXM4a8=
Subject key identifier: 55:37:ED:8D:29:D8:62:71:49:C0:F0:6C:D7:B9:38:D3:24:72:71:1D
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0199FE46BCB6C2D7CAB6CD0E18004528A510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0809
Signing time: Sun 19 Oct 2025 21:01:12 +0000
Manifest this update: Sun 19 Oct 2025 21:01:12 +0000
Manifest next update: Mon 20 Oct 2025 21:01:12 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: C4feOrJ410GZ2vQlO5rbl/VEKrwqbUyYK8dUC6cG61k=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bc:b6:c2:d7:ca:b6:cd:0e:18:00:45:28:a5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Oct 19 21:01:12 2025 GMT
Not After : Oct 20 21:01:12 2025 GMT
Subject: CN=5537ed8d29d8627149c0f06cd7b938d32472711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:d7:d9:d8:ad:c9:3c:45:1d:50:7e:2d:f8:
0d:4e:6f:60:b6:34:72:1d:60:7f:63:6e:86:92:d5:
bb:7a:ad:57:aa:b4:2d:3f:9e:36:c9:90:5c:5b:64:
68:9b:82:e3:49:07:f8:b1:15:78:99:23:20:99:d4:
50:39:b4:2e:28:d0:ee:67:cc:34:a5:c3:47:63:58:
5c:1e:b9:a6:d4:82:64:e4:e5:f5:cb:32:ed:b6:6d:
33:ae:88:33:d8:ec:99:f5:44:e9:d7:01:3f:a2:35:
e8:de:e4:83:82:0c:60:74:37:a6:21:3b:1f:9b:33:
c6:82:7e:3a:9e:89:c7:6a:bc:f5:2e:a9:0d:49:1a:
0c:41:a0:8a:38:d5:2d:06:19:cf:c4:e5:38:e2:93:
b6:9a:b0:fc:11:b5:1c:34:01:d6:db:33:37:f7:6d:
80:71:2c:bc:e3:8c:81:a6:63:4c:e3:be:02:14:ab:
57:16:a2:0f:e1:db:d3:e2:c2:1f:c1:69:4d:9a:55:
18:1e:db:ed:07:8e:63:19:c7:ff:fa:a4:59:c8:0c:
3f:78:98:66:03:06:16:94:c7:40:40:5a:a5:13:ec:
48:9e:de:b5:f8:04:af:7e:44:1b:f3:61:65:2f:7d:
f6:63:74:9d:e7:29:ae:9a:fe:ac:f1:18:90:b3:42:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:ED:8D:29:D8:62:71:49:C0:F0:6C:D7:B9:38:D3:24:72:71:1D
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:47:dd:a7:c8:2c:72:19:bd:bf:57:d7:fe:7f:d1:71:89:
c6:b2:f3:0e:6e:ae:24:0e:45:6f:5d:f6:35:b8:2d:c7:1a:92:
15:11:31:86:1c:72:e5:2e:bd:5e:8a:97:19:a0:59:0f:63:34:
e4:8e:68:05:2c:49:17:5c:b0:90:8d:6e:c5:04:c6:af:59:84:
78:2c:1f:1a:97:ac:e4:7b:97:51:b3:96:41:bb:9b:35:cd:62:
5a:1b:99:b3:e1:71:4d:25:14:18:5d:8e:52:78:4d:d8:22:35:
ac:05:a3:da:c6:b8:a5:6e:ce:51:d6:b6:24:93:4a:73:ea:3f:
51:26:3f:3e:f8:ed:5f:4d:48:e1:87:e6:c5:95:59:d1:22:ec:
c8:5c:cc:1c:db:78:f2:03:2c:24:7a:b8:a0:bf:85:b9:07:f9:
4b:30:36:0a:f1:f4:e0:ae:78:bc:04:20:91:4c:3e:e8:3a:0a:
18:1f:f4:0f:94:9c:ce:25:f7:58:ed:2b:6e:f0:13:83:0c:be:
82:63:eb:c3:0c:fb:a4:bb:8f:0d:77:63:98:f0:d2:3c:77:72:
02:f1:3c:98:1c:ec:43:69:19:aa:0a:f0:4d:9d:c2:c9:1a:2a:
0b:9b:d8:cb:4f:9c:99:f5:53:b6:6c:fe:5b:f8:9e:07:8d:24:
a8:5c:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:34 2025 by rpki-client