
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: 20D3cOaGHO3MGvn4Acep6pj4Sa38j5KHNSiY2rJelt0=
Subject key identifier: B1:9E:24:37:AE:90:E4:B0:86:EA:A7:D6:FB:91:C1:F4:C3:AF:40:B9
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 01987D89D81BAFF4B73671AB72CC7A69B80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 1160
Signing time: Wed 06 Aug 2025 04:00:42 +0000
Manifest this update: Wed 06 Aug 2025 04:00:42 +0000
Manifest next update: Thu 07 Aug 2025 04:00:42 +0000
Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: HyDWNgGO3xfn8gvHYbSNcYCtXW5+CnmiVtNUWWAKzk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:d8:1b:af:f4:b7:36:71:ab:72:cc:7a:69:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Aug 6 04:00:42 2025 GMT
Not After : Aug 7 04:00:42 2025 GMT
Subject: CN=b19e2437ae90e4b086eaa7d6fb91c1f4c3af40b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:e8:8b:f2:9c:0b:05:50:38:4f:f7:2b:e3:
0e:47:59:2f:d9:1f:30:87:d4:54:e5:1e:2a:7b:01:
fc:21:b3:41:3b:3e:2b:42:6c:78:4b:ff:50:73:3c:
26:25:2e:2b:a7:27:24:e1:34:ee:9d:6e:8d:04:a7:
c9:e7:10:96:7b:f0:97:97:b6:9f:79:2f:0c:2f:7b:
b6:04:c3:79:20:cb:29:3f:b7:04:47:59:2a:ed:8f:
99:98:4f:0e:20:54:14:f8:6f:1b:08:a9:69:1c:05:
8d:5c:e3:f4:76:42:17:61:20:77:3c:d5:ef:f9:f5:
8d:77:e6:7a:43:de:0d:5c:63:03:c3:5e:0a:1a:59:
f1:8a:ac:37:29:f3:b4:5d:5a:b9:96:33:c9:f8:c0:
d7:66:a2:f2:48:4c:30:37:d5:81:b5:4d:86:f3:2a:
17:89:16:a6:22:af:3b:a4:10:1c:0d:d8:c1:83:9f:
be:55:5c:1a:48:c0:40:4a:23:88:c6:84:05:9e:c5:
e9:30:ec:68:de:cb:2d:c6:98:64:d2:9b:9d:d5:2f:
78:e4:91:14:f8:57:8f:8f:fb:6b:44:47:51:9f:18:
5a:6b:e6:2e:8e:9d:70:a7:7f:23:8c:bc:fc:6b:a2:
83:36:7a:ee:c7:3b:e6:3e:92:2a:6b:a0:97:7e:aa:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9E:24:37:AE:90:E4:B0:86:EA:A7:D6:FB:91:C1:F4:C3:AF:40:B9
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:59:6d:0d:fb:f1:9b:20:98:e8:c2:de:12:31:c7:a1:c0:
5d:13:ff:1c:06:a6:bd:da:5c:d8:93:85:93:7d:6b:b8:3d:7e:
6d:2a:6f:61:e0:ac:61:de:67:95:21:b3:a3:de:4c:1b:63:80:
a1:55:23:0b:19:a2:2f:65:2e:04:5b:a4:23:1c:f6:55:f5:f4:
fb:b6:95:1a:4e:4f:5b:d3:e9:34:d9:1b:78:c0:36:1e:b9:9b:
a3:e8:c5:03:4e:f5:8d:44:4e:91:d8:61:62:54:ea:62:e0:19:
a0:4b:51:80:d7:2d:61:ed:34:cb:13:27:2a:a5:97:4d:9b:3b:
d8:d2:31:34:f5:70:42:62:be:51:ae:d9:17:04:b1:6e:f7:2f:
22:5e:fe:d9:44:fa:e8:48:ff:69:9e:b7:d3:4b:6a:82:5a:03:
a6:6f:d6:f4:8f:7f:74:c0:34:32:ba:97:f9:bf:76:c3:2f:b9:
8a:3e:26:38:0f:88:d1:e0:37:43:7e:25:39:4a:4b:86:fd:c1:
d4:a4:bd:5b:d1:f3:9c:19:44:df:e6:e1:e3:3c:c7:8d:ec:88:
44:a2:f2:38:76:52:e4:39:6e:57:16:bb:d6:7d:70:57:ff:06:
57:d6:b6:e6:32:17:f7:70:70:f4:5b:03:c7:68:9a:05:c4:53:
bc:6a:65:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9idgbr/S3NnGrcsx6abgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTc2M2Q0MWJiNTMzNTU4YTg1MjBkZTVhOTZlYjIyNTgw
Njg5NDEwHhcNMjUwODA2MDQwMDQyWhcNMjUwODA3MDQwMDQyWjAzMTEwLwYDVQQD
EyhiMTllMjQzN2FlOTBlNGIwODZlYWE3ZDZmYjkxYzFmNGMzYWY0MGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dfoi/KcCwVQOE/3K+MOR1kv2R8w
h9RU5R4qewH8IbNBOz4rQmx4S/9QczwmJS4rpyck4TTunW6NBKfJ5xCWe/CXl7af
eS8ML3u2BMN5IMspP7cER1kq7Y+ZmE8OIFQU+G8bCKlpHAWNXOP0dkIXYSB3PNXv
+fWNd+Z6Q94NXGMDw14KGlnxiqw3KfO0XVq5ljPJ+MDXZqLySEwwN9WBtU2G8yoX
iRamIq87pBAcDdjBg5++VVwaSMBASiOIxoQFnsXpMOxo3sstxphk0pud1S945JEU
+FePj/trREdRnxhaa+Yujp1wp38jjLz8a6KDNnruxzvmPpIqa6CXfqoQRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGeJDeukOSwhuqn1vuRwfTDr0C5MB8GA1UdIwQY
MBaAFBpXY9QbtTNVioUg3lqW6yJYBolBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAt
NGM4MzY1NTE1OTY1LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAtNGM4MzY1NTE1OTY1
LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYRZbQ37
8ZsgmOjC3hIxx6HAXRP/HAamvdpc2JOFk31ruD1+bSpvYeCsYd5nlSGzo95MG2OA
oVUjCxmiL2UuBFukIxz2VfX0+7aVGk5PW9PpNNkbeMA2Hrmbo+jFA071jUROkdhh
YlTqYuAZoEtRgNctYe00yxMnKqWXTZs72NIxNPVwQmK+Ua7ZFwSxbvcvIl7+2UT6
6Ej/aZ6300tqgloDpm/W9I9/dMA0MrqX+b92wy+5ij4mOA+I0eA3Q34lOUpLhv3B
1KS9W9HznBlE3+bh4zzHjeyIRKLyOHZS5DluVxa71n1wV/8GV9a25jIX93Bw9FsD
x2iaBcRTvGplwg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:41 2025 by rpki-client