Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier: XzSeOQuzrhDzjjLGJedVnWdtqjBzvMRI7nvsgG3oNKE=
Subject key identifier: 7B:88:24:0A:25:5F:DD:E4:C2:AE:EF:51:FA:4E:31:1F:E5:66:09:E6
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 019A730184765E16FAFF861B89A5C61476E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number: 0FF7
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: AHX9Pk5PfRsmQ8RNPeyXt7rYo+Wu59sYruc+pS2NOtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:84:76:5e:16:fa:ff:86:1b:89:a5:c6:14:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=7b88240a255fdde4c2aeef51fa4e311fe56609e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:d8:b7:c7:2e:c4:48:f5:7d:24:16:3e:9a:
db:83:47:ac:f9:b3:42:89:a7:71:00:cb:cf:9b:2a:
2f:e2:52:a0:de:22:9b:af:f1:1e:01:50:1a:ee:7c:
46:96:34:79:bd:93:19:e4:ba:ea:d7:15:99:83:b0:
eb:56:5b:9b:5a:41:c3:7a:56:26:35:7d:51:8c:da:
74:fa:86:8c:31:8e:43:48:ce:f9:0c:1e:6a:18:19:
50:c8:87:95:b1:49:dd:3b:1d:8d:a9:62:b3:98:02:
b3:a7:7b:08:07:50:86:b6:8c:39:01:52:70:50:9d:
f8:62:ea:32:1e:76:df:22:89:ef:ff:6d:d3:c9:1b:
3c:3b:ad:b7:e0:cc:b4:ba:51:f4:d4:20:d6:0f:bc:
c8:24:01:cc:89:fb:83:31:77:2f:27:f1:fa:d8:0f:
0a:de:8b:c8:fa:c6:e8:d5:d3:1b:e1:36:8c:e2:83:
cc:de:42:ab:8c:57:99:2c:d1:b4:f5:34:29:c0:cc:
20:2b:a4:c1:02:69:73:d7:39:d6:18:c4:90:c9:a9:
b7:93:7e:a7:12:0e:31:26:e3:a7:cc:b2:c1:16:66:
58:e4:1f:9e:47:03:75:17:9f:d4:6d:d0:20:b4:30:
c4:85:4b:c4:3e:85:69:18:41:0b:7a:be:fd:ac:28:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:24:0A:25:5F:DD:E4:C2:AE:EF:51:FA:4E:31:1F:E5:66:09:E6
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0f:c7:03:c5:3e:56:a3:04:f7:66:d5:96:bc:05:34:0d:cd:
13:ca:62:ac:c9:e2:e1:4c:85:63:0e:c7:b2:23:07:24:61:dc:
ce:cb:60:f3:05:31:10:68:9c:34:8b:c9:3e:91:e3:7b:43:99:
9f:8f:5e:bf:60:66:98:27:68:7d:f0:a0:1a:26:4f:b7:2c:4a:
94:aa:9e:5a:87:1e:01:d8:8f:a9:5a:96:f1:7f:08:b2:b2:02:
b8:91:77:a0:b6:9d:d4:aa:1f:78:4e:30:a1:b0:86:40:f9:56:
c9:10:3d:06:95:5a:fa:69:dc:ad:76:22:c3:9d:34:17:7e:40:
d1:64:29:3a:27:94:a4:89:dc:b6:99:cc:34:51:7b:b5:3e:df:
93:03:76:81:ca:61:a4:9d:97:81:f9:90:91:65:d7:ff:c6:e9:
5e:13:ec:89:ce:cc:2e:cf:d1:e8:ac:fb:97:60:68:46:27:fb:
31:15:40:5b:45:ce:e0:78:c7:69:fd:dd:08:18:64:54:2e:39:
fe:66:9e:5b:83:f9:d1:3a:1d:f2:1f:ae:4a:76:35:49:da:ce:
84:35:31:3b:02:6a:de:b2:0b:84:ee:57:86:b2:71:8e:3d:48:
b5:6f:58:08:f3:2d:77:98:49:ba:a9:bb:73:6f:92:b7:fd:f4:
2e:79:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:06 2025 by rpki-client