Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: 6nbG2sW8hvUh4hkfGbinyQP0IwWfKlD+PKRaZBH/aHI=
Subject key identifier: 53:1F:75:78:D2:EF:CF:F4:F9:77:55:BA:10:69:FA:E4:7F:D3:51:A6
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 019A71B91C77A6E15032B63DFC9888E0C7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 1263
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: Dn7/HK7kBpE6xgA42MN1dGFSXbdCA8eZNntSvu9x21c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:77:a6:e1:50:32:b6:3d:fc:98:88:e0:c7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=531f7578d2efcff4f97755ba1069fae47fd351a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:47:fb:3d:f4:71:25:3f:36:3d:4a:f4:22:
ee:b3:b3:25:fa:39:44:14:67:c4:1d:44:d8:f1:17:
f6:b2:2e:ca:94:c9:d3:41:b3:41:ec:fd:1c:be:31:
2b:61:f0:63:10:92:a9:cd:76:c4:b0:7c:bc:b7:f8:
3b:3d:4c:b1:b4:b3:3d:11:9b:50:c2:2b:c4:e5:f6:
d9:f7:f4:38:90:79:96:c5:44:d1:23:42:d5:ba:c3:
e3:c0:cc:71:7c:a8:b0:56:c1:9d:57:8e:da:35:72:
39:a7:91:98:0b:63:91:e1:fc:84:6d:f4:f7:0d:36:
75:c0:80:3c:46:fd:20:dc:80:79:e7:92:6f:98:25:
ae:e5:b1:a4:16:31:f0:53:6e:93:54:78:47:5c:4f:
71:f4:52:9b:49:58:59:cf:64:c2:c1:34:f8:86:1d:
44:92:bd:4a:bb:62:39:06:65:c0:8c:7e:20:69:2b:
05:59:6a:bf:00:93:dc:f1:e0:2e:32:76:06:da:3f:
ad:f9:40:c6:de:09:23:87:9e:77:c6:eb:84:e3:08:
d8:89:42:e6:66:4b:df:78:ef:5f:74:01:ab:97:b1:
6d:59:7c:da:0f:00:d5:f9:2a:08:48:23:70:82:df:
1e:ea:b0:b2:f4:38:bd:9f:15:f2:41:25:25:46:86:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:75:78:D2:EF:CF:F4:F9:77:55:BA:10:69:FA:E4:7F:D3:51:A6
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:bf:29:31:b3:41:6d:7d:9d:5d:fd:0f:14:d6:7a:15:ef:
2b:4b:a1:7d:8d:e0:0f:d7:13:a4:22:49:3d:04:37:4b:fb:26:
67:36:f7:f4:7a:52:0f:1d:20:fd:1d:eb:cd:47:42:4c:62:70:
5c:fe:3a:70:9e:cb:06:2e:7f:07:ac:15:40:f9:f7:20:f4:7b:
19:70:5e:b9:f2:7e:39:be:7d:91:d3:57:ad:db:4a:a7:24:3b:
35:c9:75:d3:52:cc:1c:1c:d3:10:b7:d6:9a:44:7d:fa:4d:bc:
b4:27:0a:a7:72:69:06:10:2a:0b:72:5b:42:79:24:19:46:e5:
94:d7:9f:7c:22:3c:9a:c2:0a:93:b8:a0:13:66:0e:d4:95:1f:
60:98:90:1d:d1:98:5d:0d:72:00:5f:c8:73:9e:5e:3e:78:18:
bf:af:fa:62:79:9d:99:c4:57:36:43:73:cf:8b:be:fe:b3:76:
e8:b7:e7:0b:e5:e2:b0:8f:e8:d2:0b:b2:a3:5e:55:92:dc:fc:
cf:d7:63:1c:f3:de:3d:f4:69:dd:6d:ec:e0:07:f9:c2:89:ec:
fd:8c:91:8e:71:a9:2e:4f:1e:97:1a:31:a1:cb:d7:a1:cd:33:
c7:a4:27:4f:f2:05:ef:26:5c:0a:b6:7c:b8:bf:ab:e2:ad:83:
0f:39:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:43 2025 by rpki-client