Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: N5OPp7Zm96FY33I9CsM1x06Yc3yZWq+JaLNbcFHijSs=
Subject key identifier: 34:3E:8C:62:1A:E7:5D:6D:EF:7F:1B:D8:20:E6:25:6F:CD:F2:50:09
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 0199FEB523A96B88DB46728F11DAFB6B0E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:47 +0000
Manifest this update: Sun 19 Oct 2025 23:01:47 +0000
Manifest next update: Mon 20 Oct 2025 23:01:47 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: 0qX+j2nVsJkoCA/9hbbkCFabZIW14XbmXm1YtE6LMZ0=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:23:a9:6b:88:db:46:72:8f:11:da:fb:6b:0e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Oct 19 23:01:47 2025 GMT
Not After : Oct 20 23:01:47 2025 GMT
Subject: CN=343e8c621ae75d6def7f1bd820e6256fcdf25009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:ac:29:8e:e4:d2:2f:5f:72:5e:24:98:8e:
9b:0d:31:d3:e5:d6:9e:b2:18:c3:02:1b:dc:d2:fb:
77:54:37:d8:4c:3b:0a:83:c6:b7:22:b2:61:be:d4:
c4:d6:e3:4c:dd:fd:21:51:c0:79:d8:5d:9b:76:0a:
ad:af:83:72:1f:4b:c6:97:33:ed:23:8c:6f:73:60:
f2:2d:48:c4:6a:46:1b:6d:1c:15:6f:a3:17:4f:c0:
0c:4a:3e:e7:55:a8:d1:8e:5d:eb:d8:b2:37:91:5e:
fb:20:af:f8:67:00:e0:06:66:f8:b9:be:83:b7:23:
c8:5d:82:0a:39:b8:bd:82:12:0c:49:e3:63:17:6a:
82:0a:e1:2d:0a:e1:73:fa:55:1b:93:ae:1b:04:41:
6a:f4:3e:a7:4b:94:1c:b0:40:26:80:d6:99:c0:bd:
b6:51:00:cb:aa:3f:ed:d4:4c:6f:df:44:ef:4c:2d:
ff:94:1a:1b:33:02:30:12:d4:27:dd:cf:05:65:c6:
e5:2a:d7:1e:42:fa:7c:54:de:cd:d2:75:c5:87:5a:
2e:77:55:92:79:6c:bb:2b:b7:ed:75:a0:f7:9e:9e:
8e:94:77:d4:da:90:df:54:9e:6f:9e:58:4e:a5:ad:
88:24:c0:6e:a2:c9:d5:c9:8a:06:a2:48:36:c8:f7:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:8C:62:1A:E7:5D:6D:EF:7F:1B:D8:20:E6:25:6F:CD:F2:50:09
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:12:9d:b1:a6:84:d3:44:57:7a:da:42:76:5e:df:12:51:2b:
60:41:ca:cb:42:e7:94:ec:aa:d4:6e:de:4d:73:1a:d0:bc:bb:
9e:17:1b:67:4c:e0:60:06:ac:b6:dd:98:65:b7:89:d2:22:c8:
99:e8:b6:f7:60:0f:6d:30:b4:3f:a4:ea:2a:4e:23:72:01:db:
e2:3b:2b:44:68:47:58:15:8b:99:d0:eb:bd:f7:25:a0:09:74:
b8:bd:20:af:fc:34:b9:12:fc:45:7d:0f:91:4d:ee:12:86:eb:
d2:7b:22:05:74:02:4c:01:95:17:9d:4d:42:97:78:9f:74:bd:
5a:c3:d0:df:92:ee:07:c1:31:92:77:07:34:7b:9a:6a:14:d6:
41:88:0a:35:f1:0b:a5:36:9f:77:2c:3f:51:9f:3b:07:a2:4a:
6a:f7:70:51:04:6a:07:c2:e3:5e:d8:ec:9e:1a:f7:08:50:6a:
07:4d:07:a0:5c:9d:55:c9:65:36:80:07:a2:f7:3c:71:04:f0:
b2:67:1a:d4:91:63:37:fb:72:bf:22:e7:66:d0:2d:e2:7e:94:
6b:98:14:6a:19:9b:5d:15:62:ee:46:56:12:b0:42:ce:d1:99:
77:1f:7e:3a:d2:76:ed:a8:19:e5:1d:18:83:23:3d:d8:bb:73:
2f:84:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:35 2025 by rpki-client