Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
File: GlhGL-ulRhBLR5cpLdI6RrAvftI.mft (raw, json)
Hash identifier: pM0JoK9x9EwBaQvQBukNkkm8dW590w1VY7s+UqLFXGU=
Subject key identifier: 8B:04:AA:3B:19:2A:93:81:B7:55:4A:54:71:EE:F6:89:D1:DF:3C:7F
Authority key identifier: 1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2
Certificate issuer: /CN=1a58462feba546104b4797292dd23a46b02f7ed2
Certificate serial: 019A70A57D3D48B76516FF445D2E78B6BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
Manifest number: 24
Signing time: Tue 11 Nov 2025 02:01:24 +0000
Manifest this update: Tue 11 Nov 2025 02:01:24 +0000
Manifest next update: Wed 12 Nov 2025 02:01:24 +0000
Files and hashes: 1: GlhGL-ulRhBLR5cpLdI6RrAvftI.crl (hash: cS/NRllL6F84ajyEQKbBjLki4pdiwFNmFfXjbqzd7Mk=)
2: lDLi_sshU1yeeZ8S7VhgBjf-8hg.roa (hash: MAmtX5yRejHvc2KsKRoKAGrhUgZk5XcqMVYZ1wlfc74=)
3: lUE3uZJLYe9eqmUyCH05H36SEp0.roa (hash: Rvx06ICV18qyvBGjnh3E88XndXAT1M4PLYOoy7xw/Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7d:3d:48:b7:65:16:ff:44:5d:2e:78:b6:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a58462feba546104b4797292dd23a46b02f7ed2
Validity
Not Before: Nov 11 02:01:24 2025 GMT
Not After : Nov 12 02:01:24 2025 GMT
Subject: CN=8b04aa3b192a9381b7554a5471eef689d1df3c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:db:b3:3e:15:13:8f:33:c2:4a:35:44:9a:
d2:34:5a:58:79:1c:23:74:c2:c7:a3:91:a4:95:80:
b2:84:ce:06:b4:e5:40:07:17:93:74:86:30:ec:ee:
78:15:c2:91:a5:2b:aa:f1:8c:1d:7f:2a:4a:4e:62:
98:57:33:02:3f:35:3a:5a:d3:a0:c2:8b:97:a2:87:
f4:f1:de:e7:d2:e7:5e:f9:02:f5:bb:f5:27:23:ed:
53:63:a9:91:31:0e:b0:f7:01:47:33:18:c3:ec:7a:
84:78:fb:22:8e:6d:fd:4e:67:d9:db:92:53:88:cc:
48:e8:33:6f:0b:d9:ec:da:06:05:4d:53:38:e1:f9:
01:6f:26:8a:98:af:95:c6:5e:b2:2a:35:b0:ba:71:
ab:eb:36:45:a0:10:62:de:88:9f:b4:c4:89:fd:20:
70:1a:2a:4f:d5:e2:82:a8:f4:da:e4:50:49:16:a2:
3a:6c:0e:76:51:6a:64:8e:74:9e:1f:cd:00:7d:2e:
b5:f1:72:15:5d:f8:bc:a3:ef:af:a0:12:6d:1a:dd:
11:8a:2d:ef:79:67:0e:63:ec:8c:ca:2f:c3:ed:f8:
f7:e3:f3:64:40:c2:ef:b6:c9:19:97:8b:0d:a0:0c:
94:b3:31:92:18:b9:d1:1b:f1:c9:ec:12:81:d6:86:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:AA:3B:19:2A:93:81:B7:55:4A:54:71:EE:F6:89:D1:DF:3C:7F
X509v3 Authority Key Identifier:
keyid:1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:eb:58:19:0c:e5:73:2d:b9:f0:78:0f:71:43:88:1f:90:
99:a5:61:b0:70:9a:df:e7:65:2e:14:d9:9e:4c:26:36:ae:00:
cf:7e:d8:0b:8f:b1:ac:bd:65:09:f7:06:25:e5:9e:65:3f:ce:
66:ab:dd:2c:26:f2:56:40:da:10:90:64:b4:88:6a:4f:51:e3:
f8:d5:87:ec:a5:35:3a:7c:4e:12:37:93:ed:c7:85:53:2e:d8:
36:19:52:b9:8b:3f:8d:29:53:f0:fd:94:3a:2e:04:bb:59:43:
f9:8d:92:c5:04:38:7a:96:55:83:c8:63:d7:a5:34:c4:91:eb:
b4:cd:ed:a8:76:9b:fe:13:c5:5c:55:e9:7c:a3:8e:bc:36:ff:
c8:90:02:c9:88:79:ea:4f:e0:e5:df:73:33:6b:08:db:b0:90:
cd:57:e8:45:33:78:03:07:76:e9:c2:04:9a:42:a2:c2:ba:68:
68:c0:84:9b:27:f1:29:34:57:f3:13:c9:01:71:c7:ef:e8:25:
06:57:63:c5:19:e3:59:8b:86:95:f1:2b:27:96:c6:e9:3e:1e:
02:07:5e:32:a4:a1:46:ff:c7:be:98:92:71:15:25:65:50:3c:
54:dd:4a:15:f0:fa:61:53:62:0f:9a:f1:9f:b5:ab:b5:5b:2c:
b1:76:67:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpX09SLdlFv9EXS54trryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTg0NjJmZWJhNTQ2MTA0YjQ3OTcyOTJkZDIzYTQ2YjAy
ZjdlZDIwHhcNMjUxMTExMDIwMTI0WhcNMjUxMTEyMDIwMTI0WjAzMTEwLwYDVQQD
Eyg4YjA0YWEzYjE5MmE5MzgxYjc1NTRhNTQ3MWVlZjY4OWQxZGYzYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtofbsz4VE48zwko1RJrSNFpYeRwj
dMLHo5GklYCyhM4GtOVABxeTdIYw7O54FcKRpSuq8YwdfypKTmKYVzMCPzU6WtOg
wouXoof08d7n0ude+QL1u/UnI+1TY6mRMQ6w9wFHMxjD7HqEePsijm39TmfZ25JT
iMxI6DNvC9ns2gYFTVM44fkBbyaKmK+Vxl6yKjWwunGr6zZFoBBi3oiftMSJ/SBw
GipP1eKCqPTa5FBJFqI6bA52UWpkjnSeH80AfS618XIVXfi8o++voBJtGt0Rii3v
eWcOY+yMyi/D7fj34/NkQMLvtskZl4sNoAyUszGSGLnRG/HJ7BKB1oZSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsEqjsZKpOBt1VKVHHu9onR3zx/MB8GA1UdIwQY
MBaAFBpYRi/rpUYQS0eXKS3SOkawL37SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xoR0wtdWxSaEJMUjVjcExkSTZSckF2ZnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNmI3ZWUtNjc1Mi00NTBlLWI4NTIt
OWU5MDhkMDc3ZjRmLzEvR2xoR0wtdWxSaEJMUjVjcExkSTZSckF2ZnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wNmI3ZWUtNjc1Mi00NTBlLWI4NTItOWU5MDhkMDc3ZjRm
LzEvR2xoR0wtdWxSaEJMUjVjcExkSTZSckF2ZnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1PrWBkM
5XMtufB4D3FDiB+QmaVhsHCa3+dlLhTZnkwmNq4Az37YC4+xrL1lCfcGJeWeZT/O
ZqvdLCbyVkDaEJBktIhqT1Hj+NWH7KU1OnxOEjeT7ceFUy7YNhlSuYs/jSlT8P2U
Oi4Eu1lD+Y2SxQQ4epZVg8hj16U0xJHrtM3tqHab/hPFXFXpfKOOvDb/yJACyYh5
6k/g5d9zM2sI27CQzVfoRTN4Awd26cIEmkKiwrpoaMCEmyfxKTRX8xPJAXHH7+gl
BldjxRnjWYuGlfErJ5bG6T4eAgdeMqShRv/HvpiScRUlZVA8VN1KFfD6YVNiD5rx
n7WrtVsssXZnGg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:26 2025 by rpki-client