Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier: Ub7ihZQ5qf97D626ufk0UAlNxYQ+8nWpJfe6ts2CcIQ=
Subject key identifier: BA:C6:34:7C:F1:1B:DB:13:DB:84:6B:9E:F3:F7:24:F9:03:8C:0D:80
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer: /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial: 0199FC5877CD934D2D99D7EF73DBBCDF5693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number: 1120
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: Qn7rOXV9GB7SiKncjEWrmZokePDltQ1Q2YL+JXQP51g=)
2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:77:cd:93:4d:2d:99:d7:ef:73:db:bc:df:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=bac6347cf11bdb13db846b9ef3f724f9038c0d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:26:cb:c9:23:fa:e8:5b:67:fe:6c:e9:77:
cf:32:51:f1:9e:ae:70:cb:29:7d:dc:36:a7:3e:38:
c2:9a:3f:e0:e5:0d:6a:6d:32:2e:0b:fe:9d:ca:8f:
99:f1:bb:70:1c:7a:a1:e2:19:fa:86:15:a7:e8:5d:
8b:4e:be:36:44:d5:f2:31:a9:19:78:e5:a8:b2:f6:
e2:50:a6:aa:3b:89:a3:94:9d:53:67:f3:65:c7:91:
31:2e:b5:38:70:76:2c:ab:d6:f4:d9:0d:f2:37:8a:
a8:09:bf:c8:83:40:16:2b:f8:0e:9e:06:d0:82:01:
a4:a9:94:1b:fb:12:50:3c:7a:10:6c:88:f6:2e:1e:
a4:85:fb:87:25:57:29:2e:6c:6a:75:9e:bf:f7:61:
15:2a:42:af:15:c4:e9:42:41:3d:30:35:fa:bd:47:
6f:b2:a5:fc:a6:89:4d:2d:3e:92:2e:c8:94:3c:e5:
c8:a7:70:cb:99:4b:83:63:ce:80:7d:84:c0:02:78:
a5:61:0f:f9:be:67:0d:08:7f:b2:15:a5:31:09:00:
c3:84:26:7c:c0:41:52:95:1a:04:4e:b0:c6:c8:90:
a5:d1:77:85:80:71:34:cb:74:ad:3c:17:61:22:28:
a1:e8:9e:b7:13:38:ce:d7:27:04:e1:bf:1a:83:43:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C6:34:7C:F1:1B:DB:13:DB:84:6B:9E:F3:F7:24:F9:03:8C:0D:80
X509v3 Authority Key Identifier:
keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a1:f0:15:36:5d:a0:2e:68:15:c1:d9:71:9d:43:b7:23:91:
a6:8e:5f:6f:67:26:cb:de:47:0c:31:69:d1:3c:05:2e:ba:9c:
a1:54:ef:90:f6:99:f7:71:88:9a:2d:20:4a:72:98:ff:0f:52:
e7:8f:5e:80:21:aa:c6:6d:13:d2:c9:03:71:53:7a:a4:c9:e5:
d0:f6:ee:5a:e0:1c:a6:36:78:b1:52:d1:ad:36:7a:a0:b9:c9:
4e:e8:68:18:15:4f:0a:c9:4c:0f:f9:2c:54:62:6d:f5:47:72:
25:a6:33:b7:aa:a4:5b:c6:c1:91:5e:6d:b6:11:cd:95:35:48:
7a:bf:b8:d5:e5:5e:ad:d8:ca:55:92:6f:b9:c2:9a:08:e6:2b:
34:f9:da:f0:42:e6:8e:f0:a1:25:2e:5d:ff:f1:3f:ac:4d:74:
e7:40:de:0d:8e:0f:92:9a:fa:2c:6c:e9:5b:26:d2:60:bc:f7:
6a:d8:f3:aa:e5:8a:35:4e:76:4b:61:d0:de:31:33:9c:1b:d7:
a3:09:16:90:66:7f:7f:0c:9c:44:bd:6a:a7:8c:d5:73:ec:68:
9d:01:59:19:5e:01:6f:d4:fd:2e:16:9b:25:56:d6:61:9f:fc:
11:40:8b:68:67:02:18:4b:8c:07:1e:83:6e:f9:e0:55:54:32:
3b:92:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:05 2025 by rpki-client