Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: xVcSzsRYWWCwt0TSNAAt5wR2t7oe1SqL+QTy4cLrzX4=
Subject key identifier: 7B:0D:73:33:6A:AB:AB:21:6A:AC:7D:8D:C9:13:D6:17:F3:05:00:7A
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 0198752B916592ECA7D129CC82F56B1FE726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 148E
Signing time: Mon 04 Aug 2025 13:00:46 +0000
Manifest this update: Mon 04 Aug 2025 13:00:46 +0000
Manifest next update: Tue 05 Aug 2025 13:00:46 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: XKJpIIGMVVUnSCIkezobDZugw0YWSTPTplVnzrTGb9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:91:65:92:ec:a7:d1:29:cc:82:f5:6b:1f:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Aug 4 13:00:46 2025 GMT
Not After : Aug 5 13:00:46 2025 GMT
Subject: CN=7b0d73336aabab216aac7d8dc913d617f305007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:10:94:ca:c5:1d:88:65:4d:00:8e:89:35:
34:d8:1e:7e:4d:ce:54:36:e0:58:9c:c3:12:94:37:
48:d8:1d:34:83:92:a8:3e:76:0c:c2:01:61:1a:1e:
d1:dc:54:b0:88:78:23:86:42:d3:6a:ce:f5:0a:62:
b3:a6:19:a3:aa:87:50:28:cc:42:40:2f:09:40:d3:
49:73:ea:a0:63:3e:3c:e2:1e:29:5c:b8:29:2a:3d:
92:77:60:06:9b:ae:f8:9e:93:61:ca:18:44:06:66:
d9:ae:be:9a:07:3a:6e:df:71:13:1c:8b:ee:c0:3f:
c8:e4:5c:0d:06:55:7e:59:0e:33:3a:8d:d7:db:67:
b2:8e:e6:8c:31:39:7e:08:40:f7:6e:89:c6:be:66:
f8:a7:cb:db:f4:34:d5:3a:9e:e3:27:06:8f:99:69:
e9:ed:0c:78:31:f2:1b:0f:19:6f:ea:f0:c9:d7:77:
63:8a:a2:ab:0d:70:45:3f:59:45:36:cc:73:34:e6:
3e:7c:9b:ae:97:c2:1b:1f:d9:69:57:5e:78:bb:77:
58:87:0c:2c:de:93:d4:af:12:1a:9f:82:69:4a:3a:
67:4f:58:ae:c2:ae:3d:3b:00:96:c9:82:99:20:3e:
fe:d7:f6:c5:89:b4:9c:4c:bf:e3:4a:45:98:f5:b7:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:73:33:6A:AB:AB:21:6A:AC:7D:8D:C9:13:D6:17:F3:05:00:7A
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:6d:63:07:e1:c1:cc:e4:1d:b9:15:e9:62:fc:e4:d8:68:
48:2d:7d:0c:a5:db:e9:2c:f8:5c:5b:b4:af:e2:61:6d:64:32:
61:66:a2:02:58:7a:4a:4b:23:db:d1:36:ee:b4:8d:97:8a:59:
02:bb:14:59:07:b4:f9:73:0d:ba:71:f4:eb:a3:cd:be:39:9c:
ff:fe:78:19:3b:6d:37:9e:76:92:c4:93:86:0e:56:d9:95:41:
f7:ca:c8:a6:4b:87:9b:4c:e5:28:04:20:90:d9:65:e1:d9:0c:
53:a0:19:fc:a7:36:de:8e:56:5b:3f:73:41:5e:ef:1e:73:a9:
b8:f3:d7:7f:7e:20:d4:8d:c8:6e:19:49:fc:7e:3b:75:09:8d:
33:87:d9:76:d9:21:2e:c5:b5:8f:bc:bc:b8:9b:67:db:f9:e3:
dc:80:6a:c5:98:4d:a3:1f:db:42:ab:7d:31:59:84:e0:e4:19:
81:0a:e6:99:74:43:7c:f1:c1:00:c5:ea:ab:02:56:f0:fe:78:
4f:d1:c3:ea:05:0c:f8:96:90:82:e0:d7:3b:c8:4e:10:28:75:
40:8d:ec:fe:6d:3a:d2:1a:f7:e5:0a:6b:27:61:fc:ae:50:ea:
4c:d2:16:67:6f:b5:09:7c:a8:85:39:b0:7f:18:89:ea:72:a2:
40:3d:22:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K5Flkuyn0SnMgvVrH+cmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjUwODA0MTMwMDQ2WhcNMjUwODA1MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg3YjBkNzMzMzZhYWJhYjIxNmFhYzdkOGRjOTEzZDYxN2YzMDUwMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFIQlMrFHYhlTQCOiTU02B5+Tc5U
NuBYnMMSlDdI2B00g5KoPnYMwgFhGh7R3FSwiHgjhkLTas71CmKzphmjqodQKMxC
QC8JQNNJc+qgYz484h4pXLgpKj2Sd2AGm674npNhyhhEBmbZrr6aBzpu33ETHIvu
wD/I5FwNBlV+WQ4zOo3X22eyjuaMMTl+CED3bonGvmb4p8vb9DTVOp7jJwaPmWnp
7Qx4MfIbDxlv6vDJ13djiqKrDXBFP1lFNsxzNOY+fJuul8IbH9lpV154u3dYhwws
3pPUrxIan4JpSjpnT1iuwq49OwCWyYKZID7+1/bFibScTL/jSkWY9be7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsNczNqq6shaqx9jckT1hfzBQB6MB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVndtYwfh
wczkHbkV6WL85NhoSC19DKXb6Sz4XFu0r+JhbWQyYWaiAlh6Sksj29E27rSNl4pZ
ArsUWQe0+XMNunH066PNvjmc//54GTttN552ksSThg5W2ZVB98rIpkuHm0zlKAQg
kNll4dkMU6AZ/Kc23o5WWz9zQV7vHnOpuPPXf34g1I3IbhlJ/H47dQmNM4fZdtkh
LsW1j7y8uJtn2/nj3IBqxZhNox/bQqt9MVmE4OQZgQrmmXRDfPHBAMXqqwJW8P54
T9HD6gUM+JaQguDXO8hOECh1QI3s/m060hr35QprJ2H8rlDqTNIWZ2+1CXyohTmw
fxiJ6nKiQD0iww==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:56 2025 by rpki-client