Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier: Qm6gebCeh9NuzCkBdrD8BJbI98QKLtKKVFREDnfTHus=
Subject key identifier: DF:70:5A:60:CF:20:DF:06:F4:08:45:60:0E:06:AA:93:38:68:3D:D9
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial: 019A4EF43F2EB75FB1D976BCF8E637A81B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number: 1251
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: aKgo0CsM7y+Gkk8LZwsS2zaURqJaF+SF5bM78SbKUwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3f:2e:b7:5f:b1:d9:76:bc:f8:e6:37:a8:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=df705a60cf20df06f40845600e06aa9338683dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:71:8e:43:24:de:11:44:bf:4b:41:d7:61:
40:98:98:6a:54:3f:93:93:0c:f5:b2:38:c1:06:80:
6f:3a:3b:43:a4:e5:fe:da:2a:df:db:df:c3:ea:d1:
b0:7d:56:52:34:b7:10:a1:83:21:95:99:9e:79:aa:
a1:4f:60:43:3e:82:c5:2a:45:e9:72:5f:7d:e8:e9:
d8:e0:af:63:b1:87:16:ec:8e:40:26:db:33:ff:15:
57:d9:f9:5a:c0:47:3d:e5:a7:06:e8:c0:50:c3:2e:
52:8a:02:3f:89:fe:45:fc:72:4f:30:ba:52:ee:bf:
e4:f5:f7:5c:e5:57:28:dd:58:6b:23:b8:8b:07:0c:
c5:cb:0b:e0:87:de:d9:76:16:dc:eb:bd:0f:a5:67:
18:c7:20:1b:a1:03:7a:41:04:72:c2:a1:bf:56:cb:
bd:4a:94:a9:80:03:9b:21:01:71:36:46:e8:a8:a6:
a4:df:14:29:45:fe:ea:9b:7d:2e:57:e9:cb:7f:2f:
35:da:d4:5c:ac:66:aa:0d:37:8c:85:21:01:fa:b0:
a2:5f:18:0f:9b:e5:71:b7:74:3c:36:2d:5c:89:1d:
91:75:80:81:9e:82:d4:e9:a1:31:82:62:eb:8d:42:
07:84:3a:27:cb:1f:f6:c6:15:18:82:a3:85:60:b8:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:5A:60:CF:20:DF:06:F4:08:45:60:0E:06:AA:93:38:68:3D:D9
X509v3 Authority Key Identifier:
keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:98:f6:ad:0a:d4:18:49:89:b1:d5:b7:23:22:58:0b:7b:c6:
ca:1a:94:68:bf:ff:c6:c9:f7:af:67:9a:c0:99:1f:eb:29:ad:
d4:f3:5f:f0:e7:fb:62:e7:48:b3:9a:fd:39:0f:dc:b5:8e:88:
9d:e8:13:e4:68:39:ea:f2:89:3b:1b:e7:1b:6b:27:24:4f:2f:
16:7b:cc:55:51:03:43:5a:af:14:eb:45:50:a3:34:d3:a9:62:
e6:b1:9a:78:38:69:7d:c0:fc:1d:3f:18:6b:6e:b8:bd:d6:ba:
9f:9f:aa:5e:24:4d:94:6c:b5:8f:b3:0d:13:a4:af:d8:53:02:
71:59:49:ea:77:b6:ed:a1:00:4a:31:14:eb:2a:1a:8e:a0:13:
03:3a:11:63:ef:cb:87:a3:da:0d:c5:ef:b7:13:ba:2a:76:c9:
c1:33:d2:46:90:7a:0b:79:e4:61:6f:f8:a9:79:9d:06:1c:80:
cc:64:51:a0:af:d3:b3:82:79:19:67:e6:06:bc:3a:b6:51:5e:
02:c3:15:9c:21:16:8d:13:d5:7c:1d:0c:5b:9b:83:0b:db:19:
04:bc:a4:58:a0:5a:6a:2f:48:27:fb:37:8d:41:09:12:44:23:
82:38:8f:8c:c3:2f:b4:9b:87:2b:99:ad:4b:a2:5e:bd:5a:66:
db:3d:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:16 2025 by rpki-client