Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: 6tqyS+eXfLJN3X4qajJ3Dv0HDqySBAnEthmYH6Zpwu0=
Subject key identifier: 78:58:C1:D7:30:6D:CA:1A:6B:7D:DD:BE:26:31:14:40:DF:C8:1C:42
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 019A7293F64DDE5C8B06A74C604CAF4C9C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:30 +0000
Manifest this update: Tue 11 Nov 2025 11:01:30 +0000
Manifest next update: Wed 12 Nov 2025 11:01:30 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: YeSD17fNp7bHfqqANT1NjhJ/SPUWVupBNZiwijAS/zw=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f6:4d:de:5c:8b:06:a7:4c:60:4c:af:4c:9c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Nov 11 11:01:30 2025 GMT
Not After : Nov 12 11:01:30 2025 GMT
Subject: CN=7858c1d7306dca1a6b7dddbe26311440dfc81c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:31:1a:77:72:57:f1:8a:97:c5:3b:8d:06:
d8:95:37:19:4e:12:6c:d6:d0:02:6c:b7:b8:1a:29:
03:20:05:8d:3c:c9:e3:22:33:dd:0c:c6:ff:2f:d9:
22:5a:f6:a3:cb:0f:08:d0:26:ad:05:06:ef:6f:e4:
df:4c:53:ef:41:ff:c7:e2:6c:d9:0e:ab:eb:d7:b3:
2f:8d:a3:c7:03:1c:ea:4a:04:0d:e0:af:94:00:4f:
a8:9a:d4:2a:7f:51:4d:2e:e3:ce:f0:aa:89:98:3a:
bf:d7:8f:c1:28:27:96:0c:8c:1a:e2:e0:28:37:11:
01:af:74:a7:a4:8a:98:5a:44:86:81:f8:a7:37:82:
e4:91:9a:8d:63:10:d3:e0:1e:d7:00:6c:2a:82:d0:
8d:b4:8b:e3:90:d3:af:eb:8d:1c:2b:05:99:c4:6d:
3a:fb:ff:2c:74:fb:aa:b8:b2:c9:36:dc:d1:97:2f:
16:ea:2e:f7:02:fe:3d:ac:84:a3:4b:0b:af:9d:62:
44:39:ef:f0:ac:4d:04:72:47:63:b1:0e:58:46:9e:
67:e0:04:3d:71:2f:ee:a0:33:47:98:ed:d6:36:18:
dc:c0:b5:d3:c9:08:d6:3a:a3:0b:88:0d:4d:35:eb:
cf:1b:40:f0:a3:ea:ed:db:1f:5f:de:e5:7b:8d:0e:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:C1:D7:30:6D:CA:1A:6B:7D:DD:BE:26:31:14:40:DF:C8:1C:42
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:38:28:25:45:1f:0f:e8:24:8c:c3:22:32:bc:e7:c7:3d:
10:87:5c:3c:a8:10:57:0a:4e:25:e5:eb:87:59:7d:54:a3:39:
0f:0c:8b:6f:3e:5d:e9:ca:22:0c:d5:ae:d2:b2:48:56:8d:df:
81:88:4a:30:3b:6a:ed:27:83:b3:a0:a4:ec:2d:af:fc:8d:30:
2d:d4:5a:91:5a:8a:22:98:45:e3:47:38:83:26:65:8a:2d:71:
0f:d9:42:5e:17:17:92:9e:33:43:fc:84:f8:b1:27:22:ad:70:
a3:ec:92:dd:42:dd:42:48:c2:4b:c2:04:f8:be:4d:cc:77:71:
ff:6f:88:54:82:56:d1:61:3d:e2:6d:af:b6:59:6a:b4:bf:db:
5b:3d:55:1d:41:5c:1d:4b:3a:e6:de:c9:c9:d0:96:b1:e5:0a:
4a:85:67:65:31:99:74:53:c6:50:45:5c:b3:ab:e7:5b:20:46:
2b:d5:5c:da:c5:db:d2:f5:da:2a:3b:9a:b7:04:c8:36:a7:ad:
37:0b:a1:61:98:87:b8:ae:28:b9:f2:84:e0:91:e9:af:43:68:
74:65:7e:38:36:23:54:a3:aa:63:99:69:45:1e:e7:65:36:32:
85:f2:4e:60:d2:88:b0:7f:a2:7a:8f:10:3b:6d:0e:65:c7:3f:
31:f2:09:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/ZN3lyLBqdMYEyvTJxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx
Y2FlMTAwHhcNMjUxMTExMTEwMTMwWhcNMjUxMTEyMTEwMTMwWjAzMTEwLwYDVQQD
Eyg3ODU4YzFkNzMwNmRjYTFhNmI3ZGRkYmUyNjMxMTQ0MGRmYzgxYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKoxGndyV/GKl8U7jQbYlTcZThJs
1tACbLe4GikDIAWNPMnjIjPdDMb/L9kiWvajyw8I0CatBQbvb+TfTFPvQf/H4mzZ
Dqvr17MvjaPHAxzqSgQN4K+UAE+omtQqf1FNLuPO8KqJmDq/14/BKCeWDIwa4uAo
NxEBr3SnpIqYWkSGgfinN4LkkZqNYxDT4B7XAGwqgtCNtIvjkNOv640cKwWZxG06
+/8sdPuquLLJNtzRly8W6i73Av49rISjSwuvnWJEOe/wrE0EckdjsQ5YRp5n4AQ9
cS/uoDNHmO3WNhjcwLXTyQjWOqMLiA1NNevPG0Dwo+rt2x9f3uV7jQ6tFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhYwdcwbcoaa33dviYxFEDfyBxCMB8GA1UdIwQY
MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt
MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl
LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrw4KCVF
Hw/oJIzDIjK858c9EIdcPKgQVwpOJeXrh1l9VKM5DwyLbz5d6coiDNWu0rJIVo3f
gYhKMDtq7SeDs6Ck7C2v/I0wLdRakVqKIphF40c4gyZlii1xD9lCXhcXkp4zQ/yE
+LEnIq1wo+yS3ULdQkjCS8IE+L5NzHdx/2+IVIJW0WE94m2vtllqtL/bWz1VHUFc
HUs65t7JydCWseUKSoVnZTGZdFPGUEVcs6vnWyBGK9Vc2sXb0vXaKjuatwTINqet
NwuhYZiHuK4oufKE4JHpr0NodGV+ODYjVKOqY5lpRR7nZTYyhfJOYNKIsH+ieo8Q
O20OZcc/MfIJtA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:29 2025 by rpki-client