Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: 5WNHi27v95WbVLFd4+1B5paaVN8VDdMhK1+eOTgAXF0=
Subject key identifier: D7:BE:40:03:07:6B:D6:42:6A:40:5D:F4:1D:A4:EC:62:A4:E7:03:87
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 0197B77C6AC3012F7DBC571DC787FEF72B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: YX2aE1n7mzMebwMDjYTxjg2vftOZXJvEPHK6l3Yeky8=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6a:c3:01:2f:7d:bc:57:1d:c7:87:fe:f7:2b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=d7be4003076bd6426a405df41da4ec62a4e70387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:a8:3f:36:13:6b:fb:b3:4c:52:a6:a7:fd:
9a:f5:79:f8:c3:73:5f:6e:13:e7:3b:03:17:3d:cd:
f7:8d:91:bf:5d:45:02:4c:4b:e6:0d:05:e4:49:d2:
c1:77:29:10:bb:06:4a:0d:b8:e2:f8:93:78:45:29:
8f:aa:18:5e:d5:66:4b:6b:df:d8:16:ad:2d:90:86:
05:18:d8:41:72:f2:5f:3d:9c:81:61:a1:b5:c7:3b:
98:e2:b7:7f:c0:79:c6:6c:68:fb:18:72:d7:74:02:
4a:b5:5d:ea:ea:b7:c6:93:8c:36:83:9d:ad:2a:a1:
40:19:95:cd:3b:29:7a:67:86:fa:d3:b3:24:9f:b1:
ae:85:81:d2:40:21:43:24:e4:14:2c:85:26:73:16:
7d:16:31:3c:9b:93:d5:62:89:a3:76:23:8d:1f:f2:
f1:00:33:e2:ae:48:40:af:37:b3:85:7b:e6:32:94:
f8:b5:4a:fa:a5:68:00:a2:cf:8a:78:cf:e8:db:c3:
cc:8a:d6:fa:09:51:4a:b6:bc:e0:e7:6e:03:60:bc:
2a:d3:5e:11:5f:20:a1:02:49:ac:e7:b7:31:9d:02:
9f:3e:2c:b4:28:91:cc:c7:ba:01:d9:4d:4b:93:6f:
55:ac:a2:30:04:87:cb:fb:96:9e:77:f6:c1:e6:9b:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:40:03:07:6B:D6:42:6A:40:5D:F4:1D:A4:EC:62:A4:E7:03:87
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:cf:16:88:f1:06:8a:9c:1e:69:ba:99:52:e5:5c:9d:96:
30:0a:62:05:42:ed:9a:fd:66:27:f9:9c:e8:90:cb:c7:09:d0:
8a:2a:4e:66:ad:9b:5a:a9:dc:e8:45:6b:61:8c:90:b9:0c:61:
0c:02:ab:d7:26:96:f9:89:0a:92:e2:86:aa:9a:5d:84:8d:75:
3f:de:e3:9e:32:42:be:8c:dc:f0:b1:21:aa:ba:21:57:85:1a:
1a:80:1b:0d:da:d8:c9:19:55:68:25:7b:9d:02:b2:82:f3:a1:
68:eb:ae:76:50:86:fe:37:d5:0c:18:3b:e7:cf:ba:6d:90:51:
46:0f:09:eb:89:4e:64:02:28:88:d3:35:62:d3:4d:20:15:29:
51:dd:a5:64:16:6c:e8:79:b4:c1:47:69:1a:03:31:f4:80:c4:
b0:47:6c:da:f8:4b:a6:d9:5a:3f:a8:87:11:1d:01:31:81:c3:
fb:0c:62:ee:aa:6d:5d:11:e6:e7:e8:37:d6:2d:72:b3:bb:6f:
0b:e6:71:d7:ae:36:90:d4:fc:11:44:41:6c:ff:06:95:25:86:
18:fb:0a:d9:64:10:57:8a:8f:42:e2:b1:d1:a8:3e:c9:ec:f6:
a0:24:1a:ff:61:a3:94:26:36:11:54:29:b4:d2:c9:78:5d:07:
7b:86:4b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGrDAS99vFcdx4f+9ys+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx
Y2FlMTAwHhcNMjUwNjI4MTcwMTEzWhcNMjUwNjI5MTcwMTEzWjAzMTEwLwYDVQQD
EyhkN2JlNDAwMzA3NmJkNjQyNmE0MDVkZjQxZGE0ZWM2MmE0ZTcwMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6aoPzYTa/uzTFKmp/2a9Xn4w3Nf
bhPnOwMXPc33jZG/XUUCTEvmDQXkSdLBdykQuwZKDbji+JN4RSmPqhhe1WZLa9/Y
Fq0tkIYFGNhBcvJfPZyBYaG1xzuY4rd/wHnGbGj7GHLXdAJKtV3q6rfGk4w2g52t
KqFAGZXNOyl6Z4b607Mkn7GuhYHSQCFDJOQULIUmcxZ9FjE8m5PVYomjdiONH/Lx
ADPirkhArzezhXvmMpT4tUr6pWgAos+KeM/o28PMitb6CVFKtrzg524DYLwq014R
XyChAkms57cxnQKfPiy0KJHMx7oB2U1Lk29VrKIwBIfL+5aed/bB5puIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe+QAMHa9ZCakBd9B2k7GKk5wOHMB8GA1UdIwQY
MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt
MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl
LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+DPFojx
BoqcHmm6mVLlXJ2WMApiBULtmv1mJ/mc6JDLxwnQiipOZq2bWqnc6EVrYYyQuQxh
DAKr1yaW+YkKkuKGqppdhI11P97jnjJCvozc8LEhqrohV4UaGoAbDdrYyRlVaCV7
nQKygvOhaOuudlCG/jfVDBg758+6bZBRRg8J64lOZAIoiNM1YtNNIBUpUd2lZBZs
6Hm0wUdpGgMx9IDEsEds2vhLptlaP6iHER0BMYHD+wxi7qptXRHm5+g31i1ys7tv
C+Zx1642kNT8EURBbP8GlSWGGPsK2WQQV4qPQuKx0ag+yez2oCQa/2GjlCY2EVQp
tNLJeF0He4ZL7g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:30 2025 by rpki-client