Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: TPFW6aZeTG5YMqtOoWm2t4957zcLTyhjaPpCS12dWIo=
Subject key identifier: 4B:AB:00:0A:EB:90:31:4E:88:85:1A:A2:34:CA:75:1D:3B:F5:F5:CA
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 0199FFC7C6EEC0EC88D721E39291AD237CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0D8D
Signing time: Mon 20 Oct 2025 04:01:46 +0000
Manifest this update: Mon 20 Oct 2025 04:01:46 +0000
Manifest next update: Tue 21 Oct 2025 04:01:46 +0000
Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: FszEAbyNnez/hjeK0ryEh5bmGu0PfQxkUw0yq9N/nSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c6:ee:c0:ec:88:d7:21:e3:92:91:ad:23:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Oct 20 04:01:46 2025 GMT
Not After : Oct 21 04:01:46 2025 GMT
Subject: CN=4bab000aeb90314e88851aa234ca751d3bf5f5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:f3:ff:10:07:af:b6:3d:54:0c:db:5c:ed:
a5:a1:b1:3d:64:9f:65:9c:f9:2c:7d:32:9b:6c:4c:
17:2e:ec:f2:d3:14:f5:e1:1e:7d:59:ec:3f:65:5a:
50:57:58:f8:56:0a:20:ac:db:32:4d:2a:94:6a:00:
fe:dc:b6:84:58:da:92:23:ce:74:03:c2:12:a3:8b:
81:82:aa:ff:8a:d1:73:61:27:8d:63:87:90:cf:88:
55:01:4a:f8:b8:34:a7:75:36:1a:54:b3:24:22:a5:
3b:e7:57:f0:d0:10:d0:5d:ce:76:9e:91:d2:d4:05:
45:3a:ec:8c:9f:c3:b3:f1:ec:e3:dc:4b:65:73:f8:
96:06:34:f3:78:fa:04:66:9d:0a:71:54:43:42:62:
9e:f8:64:9a:15:f3:49:e5:d9:13:3d:04:0f:7e:6b:
83:5c:7b:b3:19:c2:c4:4a:8e:04:0e:14:12:ee:a2:
4b:5d:ed:65:11:3b:2e:e2:86:ec:34:40:f7:c9:ae:
a6:01:ce:2c:2f:24:aa:0b:7a:47:98:5f:b1:3b:f5:
04:7e:8f:32:a8:b2:c9:f9:e9:2a:aa:76:6d:cc:da:
0a:d8:c7:b8:4e:d0:e9:92:2c:fc:ec:3f:48:ed:29:
68:c0:3c:e6:bf:b6:8c:7d:24:c1:f3:ec:c9:57:89:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:00:0A:EB:90:31:4E:88:85:1A:A2:34:CA:75:1D:3B:F5:F5:CA
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a9:db:5d:bb:a2:fc:68:51:76:2b:42:87:01:09:c5:c2:b1:
c6:3a:89:ff:8e:9d:a5:91:3d:41:fb:cb:01:dd:5e:e2:3d:a2:
87:b0:af:44:72:27:ef:16:40:ee:8b:b9:91:1f:cd:58:d4:a5:
55:0d:6b:d8:61:46:4d:02:4f:7c:a0:98:19:a8:f4:ac:9c:f9:
67:a9:54:9a:cb:3a:6e:28:b0:4f:3e:c8:91:5e:53:81:bf:ea:
d2:53:a8:5c:48:a0:fe:c1:c2:e5:8b:6f:65:f4:83:dd:98:a3:
d3:fc:20:39:9d:2e:3a:a0:b1:a9:c4:89:3a:d5:9c:d6:56:22:
13:c9:c8:04:91:86:b2:bf:49:53:ac:6c:1d:71:50:f2:16:59:
fc:ff:06:b8:09:94:ed:21:0d:30:08:5f:30:fa:48:ad:be:e5:
23:54:f7:1b:60:aa:5a:46:5d:dc:e5:5f:9a:65:1e:f0:16:93:
b2:b5:f6:76:76:3a:f7:11:5b:04:fd:af:76:ca:b6:d2:23:88:
34:33:e2:aa:49:58:7f:ce:e1:98:3b:bd:b3:b8:9b:5d:77:50:
e9:92:fd:96:41:2f:b7:ba:3d:f3:e6:80:b6:0b:d4:c8:fa:d2:
8c:6b:6e:fc:ce:55:10:ee:ab:75:26:c6:89:08:69:77:b0:b8:
81:6d:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:44 2025 by rpki-client