Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier: GFxanc8tRREIB+4Fv6LVKANsokctapqZGeYEEiphk7U=
Subject key identifier: 74:3C:28:5E:BC:E4:4D:6D:4B:BF:B3:6E:37:0E:BF:D5:D1:F4:F4:F4
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer: /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial: 019A72258BFBC7E518E1A9EC18964429E279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number: 115D
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: BsVhf5E5s+JBDrtSb7daOpd3p9818z+oydiLbMI1CQY=)
2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8b:fb:c7:e5:18:e1:a9:ec:18:96:44:29:e2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=743c285ebce44d6d4bbfb36e370ebfd5d1f4f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:2d:d6:54:20:6e:6b:15:3c:cc:f6:13:28:
2d:e0:14:ac:d0:a1:08:75:d7:2a:31:b8:5f:ff:d4:
61:1b:18:76:cc:ab:ec:21:aa:e2:fa:5d:4b:5e:45:
77:e4:1f:86:ba:3c:8c:88:d8:8f:5e:6e:41:6b:4d:
ee:65:ad:19:cd:05:17:cd:68:85:8d:91:e5:b7:79:
93:6b:86:b7:2e:8e:a5:32:78:21:88:ab:99:aa:16:
e1:c8:8e:69:59:43:4d:a4:7d:8e:e8:5f:bb:7a:59:
6a:f4:92:47:42:82:8b:39:15:f9:27:55:42:8d:85:
7d:1c:2a:27:cb:ae:16:96:93:c7:a0:17:dd:ae:09:
bd:5e:4d:47:f0:5e:08:e5:3c:2a:f9:cb:0e:97:ef:
06:fa:88:f4:ba:7a:12:98:21:19:08:27:e1:17:7e:
17:29:46:cc:f2:d8:61:4e:f6:0a:8c:83:9a:a1:91:
bc:9f:3e:91:4f:27:04:89:d8:da:76:4f:e0:50:96:
7d:81:ba:4f:bb:d8:27:36:7f:f5:2f:2f:d7:ae:da:
2c:50:d9:6c:f0:57:e3:91:eb:76:12:23:6d:b3:0a:
8e:08:fc:88:5c:58:dc:7b:f7:66:08:d5:a4:10:d0:
4a:fd:84:54:a1:f8:df:69:0c:d6:bb:30:9e:20:c1:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:28:5E:BC:E4:4D:6D:4B:BF:B3:6E:37:0E:BF:D5:D1:F4:F4:F4
X509v3 Authority Key Identifier:
keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:dc:88:98:bb:4f:41:81:0c:41:bc:6b:51:09:d8:c1:81:
71:c1:70:d3:60:b6:cc:8a:70:1c:49:f2:ec:a7:ae:2b:91:f4:
4c:77:90:54:36:1f:c1:c0:31:59:1a:18:1c:b6:b5:b5:d6:ae:
df:35:8e:05:95:98:64:b0:0a:7f:45:9b:be:6a:80:6b:a5:e8:
01:ac:09:b8:c0:53:a5:48:41:28:47:a5:bf:c8:5d:fb:c9:7f:
d4:11:60:c4:79:ba:0d:43:07:91:a9:2d:43:71:0f:0b:6c:62:
8c:5a:74:68:f0:6c:2b:3c:57:79:1d:d5:fd:f8:16:35:01:c5:
37:70:11:61:08:80:7e:fa:e7:85:f7:09:48:5d:63:e1:61:85:
28:d3:80:8c:94:50:65:4d:76:b3:97:e3:df:89:66:45:ed:88:
20:f2:18:30:f4:db:fe:9d:ad:eb:67:0c:25:df:b2:aa:84:50:
a3:9c:93:16:c2:b0:1b:17:84:87:83:43:86:4f:cc:be:9e:9a:
1f:1e:81:3f:6b:ce:6e:b8:6b:22:16:16:f6:99:e1:1b:2b:49:
f6:26:a9:a2:75:b6:6d:7b:72:0b:d4:ce:a8:56:64:d2:ec:c9:
a4:11:08:48:0d:fa:fa:64:a6:db:58:24:b1:a7:38:30:28:c3:
e0:5e:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:01 2025 by rpki-client