Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier: 0KyPlFqzEa/PKSs2fsDR4Oe+4nnXJQ6sZPWK6SxL3Rk=
Subject key identifier: 70:5A:4F:8B:D0:3B:0E:8E:D8:42:D1:9A:D5:49:E2:7D:96:6D:FA:E7
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial: 019A71B92C713FAB80A481CB31B8860D7153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number: 1263
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: kNXkVoaa0Dnht4jbGUN+dZdPq84PET8tlBhaFQdoBGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2c:71:3f:ab:80:a4:81:cb:31:b8:86:0d:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=705a4f8bd03b0e8ed842d19ad549e27d966dfae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:48:9d:34:34:34:e7:08:96:4b:a4:c1:f2:
1b:66:24:87:3a:86:d1:96:e0:1f:b2:95:35:6f:8f:
5d:1d:c9:2b:93:ea:f3:c3:08:5d:d6:29:60:f7:5a:
ea:cc:38:5a:0f:1c:5d:3e:73:80:b9:d1:11:b2:24:
37:30:7a:3a:ee:86:27:1b:12:93:a7:c8:cb:c8:7e:
8c:89:99:b4:1d:5c:80:fb:c0:db:53:72:4f:69:a9:
d3:e0:2c:67:25:b1:53:69:7a:cb:9c:d1:e5:d8:d4:
d5:b4:8b:cb:9e:c7:e2:5c:0c:06:2d:d0:29:9e:42:
0f:77:10:6f:92:04:11:77:3d:0e:09:b5:b6:41:a9:
d3:2d:3e:bf:94:67:85:6d:c3:7b:f4:c8:50:52:34:
c7:11:73:54:29:89:10:7a:ec:02:a2:ff:8a:2b:7c:
07:13:63:83:8d:9e:34:b2:70:d2:ab:f7:64:8d:3a:
42:82:67:e9:59:bf:17:e9:35:7d:4d:d4:a0:41:5a:
95:59:68:2b:cd:5e:d8:6e:5d:73:2f:ec:16:11:16:
12:36:dd:fc:50:b6:27:27:76:14:90:ac:31:2c:ad:
a4:e7:f7:68:53:59:38:a0:d9:59:89:27:92:41:b1:
84:46:9f:39:f9:41:72:f6:1f:f5:5c:a3:96:36:a3:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:4F:8B:D0:3B:0E:8E:D8:42:D1:9A:D5:49:E2:7D:96:6D:FA:E7
X509v3 Authority Key Identifier:
keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:11:83:e6:b9:d2:30:c7:17:a5:5a:65:dc:9c:fc:b4:d7:9b:
e6:ac:04:7f:6a:df:9d:0a:76:0e:20:7c:99:bd:03:af:e5:f6:
8f:fa:84:45:2b:b2:ec:85:ae:93:be:7f:5d:dc:7c:7f:40:3b:
10:fa:58:05:a0:00:ac:d8:2c:59:86:fb:5c:27:34:d7:63:c6:
2c:ed:82:68:93:8f:90:74:d8:1f:01:46:7b:65:51:20:c7:d0:
d2:f3:32:03:1a:b5:73:8c:27:40:1c:05:13:69:a1:53:0e:a5:
41:c5:46:1d:90:ae:eb:5a:05:a7:0f:10:56:95:04:2e:cf:e2:
f9:6c:c3:bc:9f:fd:5b:63:37:e7:c7:2b:eb:83:3a:64:33:dc:
a4:0b:98:06:4f:bb:0e:f0:89:e2:3a:8a:a7:c4:b6:64:f9:d2:
37:d2:d5:d1:56:eb:2b:19:ca:4d:6c:96:85:8b:42:dd:84:a7:
7d:16:a1:7f:61:0e:97:93:aa:ba:82:9b:85:40:a6:95:ea:ce:
a1:7e:17:16:7d:d7:86:87:ec:36:34:52:04:ed:1d:6a:fb:cc:
47:91:38:3f:24:dc:64:c6:05:47:c9:2f:c2:51:61:18:2a:76:
b6:43:b6:31:4f:78:f7:56:36:be:c7:44:b1:bd:80:8d:dd:be:
81:f4:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client