Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: pCJ77N5TO55OqRanx+Tc/jeKXzrnrdsKfapmB1QGgLU=
Subject key identifier: 6A:A1:D5:FE:76:C2:ED:E2:A6:90:8B:C8:3A:32:1E:8E:B2:E5:67:09
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019A0034F43B1CF179F473A1962EC05A9EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 080A
Signing time: Mon 20 Oct 2025 06:01:01 +0000
Manifest this update: Mon 20 Oct 2025 06:01:01 +0000
Manifest next update: Tue 21 Oct 2025 06:01:01 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: H939GoqgE6R/hVK3QD8sRbmkxSykZzaZ+NfFEqW3Gpw=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:f4:3b:1c:f1:79:f4:73:a1:96:2e:c0:5a:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Oct 20 06:01:01 2025 GMT
Not After : Oct 21 06:01:01 2025 GMT
Subject: CN=6aa1d5fe76c2ede2a6908bc83a321e8eb2e56709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:cd:dd:b9:e7:cf:0f:e0:97:86:2d:b6:04:
21:40:c8:d2:4e:a6:25:c8:74:61:64:f5:4d:d7:49:
1e:4f:45:1d:34:60:cb:05:b7:3f:b6:4c:31:e9:81:
e4:2d:c8:04:07:65:03:cb:c2:89:9d:a9:82:a3:6b:
48:0e:4a:84:fe:cc:d4:a5:b7:02:c5:d3:0b:80:30:
c5:f7:d4:bf:49:bc:8e:e2:49:c5:2b:4d:18:6e:ad:
74:58:6e:81:26:c1:6b:94:a1:b1:42:10:87:52:c8:
05:82:31:c5:55:ce:7d:ce:bf:64:0c:05:0d:8b:c7:
9e:f0:ed:b7:48:5e:e9:aa:e9:40:5d:df:ed:6c:4b:
a3:0c:6d:0f:b0:34:5a:76:4d:a3:b9:20:bf:96:aa:
9e:e0:7d:5d:d1:d9:4e:a0:1f:c7:5c:0e:38:0a:59:
55:d4:f8:9d:83:85:d0:b9:2e:85:54:b0:ba:10:5c:
69:ce:84:60:c6:94:c8:8d:7d:49:d3:8e:f6:9c:4e:
e2:89:01:7e:3a:1d:ef:f0:83:eb:09:91:54:07:47:
f0:a9:f6:c2:91:da:2f:0c:cd:26:59:9a:b7:8b:b0:
e8:63:72:b5:b4:b5:9d:53:2c:fe:4b:4e:18:0f:06:
7b:8d:a1:70:fa:75:fc:aa:6f:b6:1c:3b:31:cb:c6:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:D5:FE:76:C2:ED:E2:A6:90:8B:C8:3A:32:1E:8E:B2:E5:67:09
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:3f:17:37:88:d4:a3:d2:83:9a:5b:92:d0:1f:68:80:4b:
65:fc:af:2c:6c:ec:06:3a:48:43:5b:36:a6:01:47:1f:f6:c1:
ab:50:2d:48:47:35:87:e7:f8:21:ad:a4:81:80:bf:f7:cc:e4:
9f:13:27:19:a9:1d:fe:37:98:b1:db:ed:bd:9e:b0:fb:24:18:
e0:30:f2:bd:34:1f:df:c2:4e:70:46:67:b0:bc:96:a2:91:3b:
d8:ac:0d:dc:7b:fe:8b:64:af:45:e2:3a:8d:94:d2:27:46:82:
f2:52:55:6c:9d:eb:11:51:cc:92:11:94:ec:8a:e6:f4:a1:1a:
0f:df:f6:58:fc:a6:66:91:a3:79:f3:0e:f5:a1:f9:37:90:62:
d8:4d:d4:79:fd:24:a6:e6:8c:95:01:79:c3:bf:f7:cd:93:e1:
8f:16:75:e0:ef:4b:bd:9d:b9:a5:a3:dd:de:b4:02:8d:1a:b8:
b1:84:49:5e:d0:6e:f0:c8:4d:de:bc:91:6b:5f:d2:df:cc:55:
ea:2c:e8:f5:81:90:b2:9a:32:00:88:27:e2:2a:02:bf:0f:05:
e5:72:e7:e1:60:c1:28:61:87:be:d0:ae:9c:99:0d:ed:06:39:
cc:a3:4f:dd:65:21:e4:f6:d2:70:9d:00:af:dd:7b:3e:d5:16:
fd:b8:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:47 2025 by rpki-client