Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: d5YlIza7Fnxo4Sb8bpUHw/HzRL7CLLnyNIceUdinxCM=
Subject key identifier: B0:60:7D:E5:AF:E2:17:0D:EA:4D:58:FD:03:3D:10:14:CC:91:B8:A9
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 0198D47259E0EE23467DBA311377EA130809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 118D
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: qGkkIDsJBK8+asbRUrx8f7UTa/mkI8Mex/xw6E3uIjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:59:e0:ee:23:46:7d:ba:31:13:77:ea:13:08:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=b0607de5afe2170dea4d58fd033d1014cc91b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:04:01:94:b9:a0:b7:7f:8f:6d:e0:a1:1e:
af:7b:cb:51:0e:88:d5:40:cf:f9:b3:7e:bd:11:76:
53:f3:89:f4:72:35:ab:92:17:9a:df:24:25:0b:ac:
5b:a6:40:25:14:01:6e:0c:9a:13:18:b3:95:3c:3f:
dc:0c:ee:a8:4e:21:f4:66:d6:f5:eb:d7:f0:5b:89:
82:34:60:64:30:d9:c4:34:9a:3b:45:7c:b0:bb:3d:
ca:e2:83:c5:06:e0:58:7f:58:b4:14:7e:c1:ed:1a:
94:65:32:8e:2a:84:02:46:a0:b6:c9:6a:e9:2d:40:
05:77:64:d5:73:fc:05:9b:bc:e1:a0:75:bd:fe:10:
f9:c4:ee:76:43:91:26:28:04:24:d7:6b:ce:19:a6:
4a:d9:9c:f4:b9:7f:ea:75:dc:4a:a3:0a:72:88:d2:
d4:2d:b2:eb:90:ed:37:4e:f7:1e:b2:62:2e:6e:27:
16:de:17:61:79:d0:2c:6b:89:0c:69:ce:36:91:8b:
e9:97:c1:d6:fb:6a:47:e0:f7:5a:98:1f:16:db:97:
75:4f:0c:cb:66:e7:33:9e:25:ef:4e:eb:ec:e3:8e:
1f:3a:f1:0b:21:2c:fe:df:f2:94:00:23:2e:00:f2:
99:63:44:5e:dc:2a:5e:e4:b0:8e:f1:37:7c:b9:84:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:7D:E5:AF:E2:17:0D:EA:4D:58:FD:03:3D:10:14:CC:91:B8:A9
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:aa:c1:07:49:70:b4:74:6e:a1:af:a3:bd:30:24:df:0f:b7:
9c:58:93:31:ab:74:49:47:11:82:c6:fe:54:46:cc:66:dd:01:
59:2f:94:43:5a:d4:55:e5:28:e7:71:57:0a:ac:a5:9a:bb:f2:
e9:96:d0:35:02:7f:50:3c:0e:d7:5c:05:d7:70:d5:61:52:e8:
66:39:6d:3d:44:12:88:80:58:b9:92:47:e6:42:25:3d:1c:c9:
84:a0:cb:e1:2c:37:9b:0d:b8:f8:d2:f6:14:e5:3d:0f:e3:47:
ae:f2:54:9c:af:e7:8e:2d:2f:3f:b6:77:d3:7b:d9:11:dd:e8:
09:08:00:15:bf:48:ed:ed:52:87:4e:3d:7e:47:ea:57:57:c1:
38:cc:74:5e:2b:bc:55:84:9b:5b:45:47:60:53:4e:3d:5f:4c:
21:63:2c:83:4c:ff:14:41:37:e1:41:73:fb:ac:fb:11:07:fe:
e0:31:ce:8e:17:3c:e8:69:d4:04:4b:4b:de:9d:be:7d:b9:0b:
e4:1d:91:cc:d5:9e:b9:7f:29:1a:2d:23:15:d0:09:46:eb:86:
e4:c4:64:fa:ad:1a:04:14:71:15:5f:dc:4d:ee:48:e4:fc:40:
a1:61:c2:84:79:96:73:4e:b1:b4:64:0b:a8:4e:44:dd:58:9b:
6b:4d:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:10 2025 by rpki-client