Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: Poxb0EY2a8+3YEuo4ImlfZpXi7xQOl47pYf3v5y1Z3M=
Subject key identifier: 50:32:5B:2D:B9:11:58:14:3F:F1:3C:EB:E9:8B:EC:08:DC:80:A3:67
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 0199FD349960ECDD3FBFAE9BF9303A066DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 1559
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: 9Y1NdEqBjVivX8feAMRSrJdL0znjB75Mt1P1kNqve1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:99:60:ec:dd:3f:bf:ae:9b:f9:30:3a:06:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=50325b2db91158143ff13cebe98bec08dc80a367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:86:49:6d:6d:fa:78:a1:b6:f2:00:38:3e:
49:33:13:23:e2:10:d1:4e:f5:4e:55:f0:d8:d4:9d:
83:03:8c:a3:9c:6a:2a:49:65:86:66:e9:4e:0d:d7:
8d:86:9e:3f:de:65:62:39:fa:72:3d:8e:a6:fe:7f:
87:f3:a6:8a:9a:43:93:bb:6b:e5:13:bb:06:ad:9a:
dd:24:de:8f:9d:6e:7e:40:56:39:91:e0:fc:e7:90:
fe:06:51:bb:48:08:8c:bf:a2:97:cc:b4:82:12:29:
cd:35:21:18:21:64:f2:61:e7:31:d8:80:48:49:ac:
3d:4d:d1:9a:59:29:88:6a:3e:da:2b:9f:2a:fe:27:
27:3e:86:c1:6c:e0:74:53:1c:61:ac:f7:a9:de:da:
0c:91:3b:b7:74:b7:e6:91:5d:75:37:85:12:a9:cd:
e4:f8:f6:a9:72:37:e2:1e:9f:eb:72:ad:22:e6:e0:
c5:01:64:a9:16:77:7d:16:58:ab:20:7e:6f:6c:69:
58:39:4e:d7:33:32:90:02:3a:7b:73:02:68:e7:73:
fd:d2:2c:39:c8:4b:38:8d:5d:1b:b6:d7:80:2e:74:
16:d4:a4:3f:30:e8:31:2f:45:15:9e:c3:99:e6:22:
ca:71:3f:02:68:28:90:6b:9f:6e:a5:69:58:22:18:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:5B:2D:B9:11:58:14:3F:F1:3C:EB:E9:8B:EC:08:DC:80:A3:67
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e7:6a:68:e5:2f:02:43:85:34:e8:74:4d:46:59:97:86:b2:
8e:0a:da:2f:3e:87:39:da:c2:7d:5c:cf:d8:66:46:98:44:85:
16:45:b6:0c:ac:7e:3e:29:1b:7c:d0:58:05:67:0f:71:3e:cf:
87:50:b9:4d:24:c7:6d:23:bb:91:f8:b7:ec:e0:9c:91:b5:7e:
a0:5c:03:9a:67:9e:9d:d7:50:f5:2f:48:96:b7:64:91:84:f4:
62:a2:79:98:f0:a3:93:7d:20:b8:60:62:ce:9a:97:fa:d8:96:
fc:13:10:89:5f:74:f8:c8:a1:4d:d6:2e:3f:cd:6e:dc:ee:6b:
22:74:8b:31:a9:9e:72:ca:1b:eb:a1:ad:e4:a9:22:70:f8:d7:
f2:8a:f8:3a:72:02:26:b9:95:ce:3f:e5:84:cd:f2:6e:30:9b:
57:61:8a:17:46:5c:54:54:80:bb:59:4a:ed:57:ec:c5:14:ee:
c9:62:69:2d:0a:ec:92:06:47:bf:b6:4f:94:01:7b:70:58:88:
40:75:7f:07:67:08:6a:bd:fe:8c:1c:65:35:0c:73:bf:a0:52:
fb:14:36:d0:d7:d0:cd:35:26:6f:c9:74:13:05:6a:c7:f7:5b:
57:a1:53:93:61:5f:c9:99:12:4a:25:d6:cb:de:d6:db:94:27:
17:21:22:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NJlg7N0/v66b+TA6Bm31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjUxMDE5MTYwMTQ2WhcNMjUxMDIwMTYwMTQ2WjAzMTEwLwYDVQQD
Eyg1MDMyNWIyZGI5MTE1ODE0M2ZmMTNjZWJlOThiZWMwOGRjODBhMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6yGSW1t+nihtvIAOD5JMxMj4hDR
TvVOVfDY1J2DA4yjnGoqSWWGZulODdeNhp4/3mViOfpyPY6m/n+H86aKmkOTu2vl
E7sGrZrdJN6PnW5+QFY5keD855D+BlG7SAiMv6KXzLSCEinNNSEYIWTyYecx2IBI
Saw9TdGaWSmIaj7aK58q/icnPobBbOB0UxxhrPep3toMkTu3dLfmkV11N4USqc3k
+PapcjfiHp/rcq0i5uDFAWSpFnd9FlirIH5vbGlYOU7XMzKQAjp7cwJo53P90iw5
yEs4jV0btteALnQW1KQ/MOgxL0UVnsOZ5iLKcT8CaCiQa59upWlYIhhvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAyWy25EVgUP/E86+mL7AjcgKNnMB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbedqaOUv
AkOFNOh0TUZZl4ayjgraLz6HOdrCfVzP2GZGmESFFkW2DKx+PikbfNBYBWcPcT7P
h1C5TSTHbSO7kfi37OCckbV+oFwDmmeenddQ9S9IlrdkkYT0YqJ5mPCjk30guGBi
zpqX+tiW/BMQiV90+MihTdYuP81u3O5rInSLMamecsob66Gt5KkicPjX8or4OnIC
JrmVzj/lhM3ybjCbV2GKF0ZcVFSAu1lK7VfsxRTuyWJpLQrskgZHv7ZPlAF7cFiI
QHV/B2cIar3+jBxlNQxzv6BS+xQ20NfQzTUmb8l0EwVqx/dbV6FTk2FfyZkSSiXW
y97W25QnFyEiAQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:32 2025 by rpki-client