Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: YtY8v9ZYiZT7w9ae5Dd1l3kGttTxPaTCw3vge5/1jbM=
Subject key identifier: 31:8D:7E:B3:99:62:C5:D4:EC:89:F2:CE:10:8D:C8:C6:AB:D8:71:9A
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019848C069A937C96CD02A500578451C28A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 1477
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: 0RD2tVibzQxnRQKjO+RtT8YH822dGIvuH5rtJQ/ylFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:69:a9:37:c9:6c:d0:2a:50:05:78:45:1c:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=318d7eb39962c5d4ec89f2ce108dc8c6abd8719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:34:c8:a1:88:55:c8:b8:96:f5:f1:50:bb:
6a:91:97:9c:4e:2a:76:45:2d:bd:80:c7:28:ff:a6:
78:92:a4:a3:50:b6:85:18:c6:d1:97:3b:82:48:bc:
bc:43:72:4f:e8:d9:d9:86:b5:a2:26:68:db:37:6a:
f2:f2:b7:01:35:16:7d:5d:d3:e3:fa:8e:36:3f:ee:
cd:4f:51:3c:45:5f:da:cb:f2:e1:fb:6a:09:be:73:
34:9a:4c:ca:e5:cc:26:f0:38:44:88:78:3a:ee:87:
9f:7d:4d:fe:3a:2f:f4:0a:81:11:16:56:73:04:aa:
d9:ad:ca:ab:22:f0:61:98:36:41:a0:31:25:16:4c:
d0:09:73:33:b1:86:5a:14:6c:2a:4c:0b:94:99:00:
e6:24:ab:54:04:e0:82:4e:b3:4b:a0:8e:26:7e:5c:
bf:74:e4:13:06:ed:01:c5:21:46:ec:98:32:80:44:
77:ac:73:d3:28:34:ce:52:b5:2c:a1:5d:f9:ea:f8:
fa:23:f9:7b:7e:68:e3:7b:39:83:be:82:8a:41:cb:
86:23:c4:00:0b:7c:29:37:2c:0a:c7:8a:36:16:f6:
a0:a7:99:47:1b:25:c1:b0:f4:84:f1:50:0e:63:1c:
05:23:d0:3c:32:5f:71:7c:a5:06:75:24:60:06:86:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8D:7E:B3:99:62:C5:D4:EC:89:F2:CE:10:8D:C8:C6:AB:D8:71:9A
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fd:f7:0d:4d:dd:c9:1b:bb:5a:e7:01:66:bc:5b:54:6d:97:
96:4f:f3:19:53:2a:55:6c:61:e5:4c:34:25:c4:f9:bc:83:91:
ce:4c:d7:c9:7a:bd:1a:da:3d:f8:fc:48:e5:c1:15:89:8b:a2:
16:d4:80:85:6a:d7:ec:63:9e:be:30:69:41:2b:03:fe:54:2d:
f8:7d:f3:3e:bc:7f:3e:71:ce:56:73:c3:11:fa:bd:c2:4e:df:
24:e7:14:46:2d:a9:61:4e:bc:b2:fe:f6:98:67:1b:20:82:76:
73:7d:60:22:73:f7:bc:72:77:4a:d4:6b:9a:6a:c2:6e:ca:3a:
70:fd:19:e3:71:50:20:13:e4:2d:f4:d7:c8:b0:b6:0f:71:68:
40:82:b6:21:ce:19:aa:39:d5:0f:8f:15:01:45:a7:b4:29:b5:
06:85:42:bd:28:1c:7e:7a:18:d5:0b:b5:71:06:72:3c:cb:4d:
d5:25:72:1f:89:ed:0b:9a:65:74:e0:c2:10:5f:1d:d7:7b:18:
e7:6b:4e:23:9e:44:06:b2:e6:b6:3c:ff:af:8e:36:56:88:c4:
8f:c5:9a:3a:3f:b6:31:3d:f8:d9:fa:ed:e9:e6:ae:84:66:ba:
8a:9e:7f:e2:82:07:96:65:0d:65:b6:cb:ed:0b:8e:0b:71:6e:
cb:f6:c1:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwGmpN8ls0CpQBXhFHCioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjUwNzI2MjIwMDI2WhcNMjUwNzI3MjIwMDI2WjAzMTEwLwYDVQQD
EygzMThkN2ViMzk5NjJjNWQ0ZWM4OWYyY2UxMDhkYzhjNmFiZDg3MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfQ0yKGIVci4lvXxULtqkZecTip2
RS29gMco/6Z4kqSjULaFGMbRlzuCSLy8Q3JP6NnZhrWiJmjbN2ry8rcBNRZ9XdPj
+o42P+7NT1E8RV/ay/Lh+2oJvnM0mkzK5cwm8DhEiHg67oeffU3+Oi/0CoERFlZz
BKrZrcqrIvBhmDZBoDElFkzQCXMzsYZaFGwqTAuUmQDmJKtUBOCCTrNLoI4mfly/
dOQTBu0BxSFG7JgygER3rHPTKDTOUrUsoV356vj6I/l7fmjjezmDvoKKQcuGI8QA
C3wpNywKx4o2Fvagp5lHGyXBsPSE8VAOYxwFI9A8Ml9xfKUGdSRgBoYfjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGNfrOZYsXU7InyzhCNyMar2HGaMB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf33DU3d
yRu7WucBZrxbVG2Xlk/zGVMqVWxh5Uw0JcT5vIORzkzXyXq9Gto9+PxI5cEViYui
FtSAhWrX7GOevjBpQSsD/lQt+H3zPrx/PnHOVnPDEfq9wk7fJOcURi2pYU68sv72
mGcbIIJ2c31gInP3vHJ3StRrmmrCbso6cP0Z43FQIBPkLfTXyLC2D3FoQIK2Ic4Z
qjnVD48VAUWntCm1BoVCvSgcfnoY1Qu1cQZyPMtN1SVyH4ntC5pldODCEF8d13sY
52tOI55EBrLmtjz/r442VojEj8WaOj+2MT342frt6eauhGa6ip5/4oIHlmUNZbbL
7QuOC3Fuy/bB2A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:30 2025 by rpki-client