
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: lP8PqY44yDZfW+WRHxxKOU8t3tvSWzKAjQ63Sw53GUc=
Subject key identifier: E7:C4:19:EC:E2:12:21:A2:7E:F7:EA:46:E9:C5:B2:EF:AD:ED:2B:E8
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 0197B7450FFCBC3E4281021E1D36F39FFAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: UY/o7OFGHzeLgJdWOb9KnraYb2TIok8b7HIOdCdf7w0=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0f:fc:bc:3e:42:81:02:1e:1d:36:f3:9f:fa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=e7c419ece21221a27ef7ea46e9c5b2efaded2be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:32:b7:5e:ab:0e:11:81:4f:85:7a:12:ab:
86:4c:0e:f5:28:ae:8a:71:46:81:17:dc:0c:19:d5:
ea:75:59:e7:80:55:80:32:8a:8e:84:26:08:2f:81:
d0:bd:84:39:9b:2b:e7:43:e7:d7:2d:62:79:ac:10:
20:c3:5d:96:86:22:58:3f:63:b2:77:68:a5:c0:2f:
ef:30:a5:1c:2f:44:09:b5:02:5a:30:dd:b8:2c:56:
b3:da:42:d9:f0:d8:62:84:0b:41:bc:a3:c3:ca:1a:
4b:ab:ad:b4:f0:20:e4:1c:04:5b:11:6f:e4:ff:8c:
bd:e7:ae:ee:2b:cb:81:f3:75:6e:c5:48:e8:0c:5f:
80:91:a9:c9:4a:3a:48:40:35:60:db:2c:57:90:6e:
fd:7e:bc:91:e7:6b:6d:50:33:34:fb:86:2b:81:d6:
fc:81:0e:03:59:f4:ca:d6:73:0c:44:63:bd:44:1d:
74:96:71:b0:e1:28:a9:7b:c8:69:9d:1a:52:d3:72:
2f:0a:0b:e2:81:5c:96:f2:33:12:32:9d:8f:64:06:
ae:7f:d8:e0:e0:f2:1e:0c:c9:0b:f3:69:c6:7f:d6:
af:d8:e4:c1:0f:69:40:56:2a:cc:3e:20:79:bc:07:
f5:e2:08:c3:29:69:d8:e2:5c:d1:1c:3a:e4:d2:67:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:19:EC:E2:12:21:A2:7E:F7:EA:46:E9:C5:B2:EF:AD:ED:2B:E8
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:bc:f0:3d:e8:46:6f:71:d2:97:eb:92:17:a4:f4:cf:d4:
a1:40:e1:60:bc:7a:6d:6b:dd:ae:c0:74:61:84:9a:a9:ab:48:
d2:7e:e8:e2:65:a7:5c:73:70:2d:f9:d6:60:67:fc:b4:5f:f0:
21:e2:49:56:54:b3:a6:5a:a4:23:81:cf:15:bd:d1:99:7f:f7:
43:c0:88:c1:5c:0d:69:7c:91:90:1e:ae:90:7f:d2:24:10:6e:
71:b2:a3:58:df:3a:fd:1e:70:6e:eb:d3:e0:75:53:ed:2c:65:
9e:1b:1f:0c:79:ea:35:8c:20:97:3f:0b:b6:e4:9d:4b:89:de:
a0:54:e8:7c:b4:11:db:f3:4b:3b:a1:c4:99:ac:24:70:56:4a:
84:50:3f:84:91:09:6e:e1:7f:c8:f5:57:78:3b:f2:10:e9:78:
09:72:69:41:ef:f6:32:2d:64:8c:8b:fd:e0:dc:52:6d:b7:2c:
b0:ae:67:18:cf:85:bd:c7:fa:b1:9c:17:d2:81:fc:fd:55:37:
a6:f1:07:60:40:d0:a9:01:8f:45:89:21:0f:c6:a8:24:72:c1:
aa:cb:b8:ec:5a:ba:1b:02:98:5b:83:98:e4:a8:cb:79:a2:51:
2f:72:2e:79:02:a4:6b:cf:85:17:85:26:27:95:1b:b4:9a:39:
4b:34:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:28 2025 by rpki-client