Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: q4JRWDlZQ8pdo4Jpy0y3ufaAsasjEJxKUM9WdQ7S9tE=
Subject key identifier: 25:63:9D:73:5C:52:3A:8C:11:78:9F:85:D9:69:BD:E0:EB:31:11:40
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 019A51BE69B780F360A2229C742DDC8F3386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 02:00:24 +0000
Manifest this update: Wed 05 Nov 2025 02:00:24 +0000
Manifest next update: Thu 06 Nov 2025 02:00:24 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: LBUz10WbPIgbfBdAyvxL2sa1B+pfsBq1qsndMex91fg=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:69:b7:80:f3:60:a2:22:9c:74:2d:dc:8f:33:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Nov 5 02:00:24 2025 GMT
Not After : Nov 6 02:00:24 2025 GMT
Subject: CN=25639d735c523a8c11789f85d969bde0eb311140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:ea:f3:66:73:e8:a1:95:1e:40:a6:62:48:
a5:b7:bc:7e:ce:1f:fe:f7:a5:1f:90:4b:f7:5f:2d:
8b:b0:c8:97:e2:f0:37:40:3c:62:f0:30:2d:fe:5b:
cc:9a:20:57:b9:2b:21:39:38:02:1f:35:d1:f9:4f:
9d:d4:84:a3:ce:6e:7f:02:85:9f:23:c2:bb:df:d4:
96:06:70:91:67:77:44:44:b3:65:81:6a:3b:ef:7b:
c2:65:8b:fe:46:05:7a:76:14:c0:a2:53:8e:ac:7c:
3e:35:7f:15:98:1b:9f:27:14:f7:60:e1:b3:4d:2c:
0c:c6:ea:95:2c:35:9e:f0:9c:e3:fe:43:9b:d5:ba:
fc:ac:4b:4b:cb:b4:aa:27:7c:c8:ea:a2:c5:5e:3b:
77:1d:15:a0:64:2e:f0:f3:7d:ee:9c:6e:e4:04:47:
66:b1:84:d4:81:63:9e:ed:04:c7:61:98:ec:c1:dc:
db:4a:73:f6:b8:bf:08:eb:87:20:33:bd:6e:e5:b6:
b6:3f:f2:8a:52:7d:70:e1:e8:91:b3:3d:14:20:8d:
e0:0c:bb:a2:e0:e2:70:f5:98:7f:69:80:a8:f1:de:
2f:a6:5a:23:7c:60:9b:3e:b6:34:3f:4c:7e:76:3b:
99:61:90:4d:db:9e:b8:06:3f:1e:8a:7e:a2:2e:b8:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:9D:73:5C:52:3A:8C:11:78:9F:85:D9:69:BD:E0:EB:31:11:40
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b1:0a:4c:ee:c5:42:07:86:0a:43:f0:f2:4e:7d:a1:d4:1c:
57:c0:56:05:a1:01:28:26:e7:45:66:d5:df:18:a7:54:2c:cb:
24:33:a6:5e:4a:fe:31:2f:f4:28:75:8a:3c:42:3c:31:20:a4:
f6:5d:c5:e4:31:ed:18:32:32:d9:80:4e:ab:95:da:32:e0:5e:
8b:8b:16:27:8b:30:4b:35:05:72:48:33:21:87:12:d1:5b:6e:
92:33:41:3a:c7:da:1b:d4:64:94:f9:5e:c2:ba:2c:87:01:4f:
d0:e6:1a:ee:c3:c0:b1:0c:c6:3b:1c:f2:32:2e:0d:e2:d1:91:
b8:f1:a4:72:54:21:ec:00:90:70:bb:c1:0f:01:26:de:eb:45:
fe:01:60:8d:eb:23:92:19:e6:91:91:a7:c0:77:95:7b:cd:c1:
d7:1c:d5:c6:20:ba:7f:99:c8:89:09:4b:79:eb:a9:bd:38:a5:
54:5c:04:46:06:45:e7:42:4c:13:cd:f8:a9:86:45:d1:41:c5:
14:d9:3f:2c:c1:61:d5:46:1b:e9:28:fd:f6:d5:19:95:e4:df:
b3:44:ca:0b:a2:a5:33:ec:8c:33:45:42:54:68:1c:ad:9b:93:
1f:97:7b:4d:fe:49:ad:48:85:89:3d:d3:9f:4a:ca:41:f5:aa:
86:84:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:37 2025 by rpki-client