Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: I1nJ8g8pqqMP/GVu2BMiBK/zQ+vpgTmJ006zNlH9KVw=
Subject key identifier: 7C:C6:9A:2E:98:62:3D:13:5E:1E:D2:BA:02:5E:26:AD:81:84:22:63
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 01995832EF64E079AC283EA5D95DF6A541FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 168D
Signing time: Wed 17 Sep 2025 15:02:36 +0000
Manifest this update: Wed 17 Sep 2025 15:02:36 +0000
Manifest next update: Thu 18 Sep 2025 15:02:36 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: 2em+kjLpNuE60dZKMgTqcDj+V6rAEajpAswh10O9XHQ=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:32:ef:64:e0:79:ac:28:3e:a5:d9:5d:f6:a5:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Sep 17 15:02:36 2025 GMT
Not After : Sep 18 15:02:36 2025 GMT
Subject: CN=7cc69a2e98623d135e1ed2ba025e26ad81842263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:24:cf:d0:e0:8b:e7:64:78:75:80:b3:d4:
d8:78:2c:15:b7:32:94:9b:a6:1d:91:3e:18:7b:c9:
60:01:72:54:0c:62:ea:aa:20:56:0c:8f:39:6f:cd:
51:38:37:cf:69:4f:09:f8:74:5c:47:3e:f1:4f:39:
94:30:3c:1d:01:95:93:15:1b:78:95:21:9b:31:34:
77:fd:1e:f7:03:bf:af:32:71:01:d5:4d:d0:73:71:
d0:9c:c1:15:92:d2:40:98:7b:ba:eb:c3:1f:4d:cc:
09:74:9c:63:47:b0:89:78:83:16:90:0d:d8:48:52:
5d:3b:f1:18:3f:36:fd:4d:6e:75:ad:6c:06:d3:31:
84:19:44:3e:bc:88:76:0a:fc:55:98:69:62:95:5e:
7d:f7:62:13:42:3e:26:29:a4:9e:fd:3d:ba:82:52:
ff:7a:0c:0a:cf:07:87:c0:37:2c:7c:a4:45:fb:cf:
66:f5:19:ac:64:64:e0:a7:35:07:65:b7:e0:6c:07:
b9:be:9c:d3:f2:3e:8e:fc:d8:0d:1e:ff:38:a1:40:
81:ef:13:2e:a2:cd:f5:dc:a1:e4:ce:f3:aa:5e:e7:
91:d2:42:15:68:0d:02:37:e2:a0:78:5e:52:a2:73:
22:18:8e:e6:72:45:ca:f7:c1:c3:2f:36:e7:77:d6:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:9A:2E:98:62:3D:13:5E:1E:D2:BA:02:5E:26:AD:81:84:22:63
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c8:23:b3:fe:83:23:6c:98:6d:5e:6a:aa:6c:48:82:d3:49:
02:1f:55:30:ca:09:cc:11:1f:6f:1a:77:02:d9:26:c9:87:22:
9e:7c:dc:2a:65:ad:db:e3:a7:39:d1:6a:3e:0c:1c:96:7a:57:
72:1e:39:2f:e2:98:8d:85:a4:eb:b5:94:1b:bc:4b:9a:32:3c:
07:70:b7:9f:9e:7a:ca:1a:36:6a:f4:64:77:7f:7b:be:aa:a8:
03:02:36:53:0a:9c:19:07:8a:33:95:b3:fc:fd:3e:ee:e7:a5:
88:40:ac:da:c7:13:1a:bb:9e:99:85:de:8e:f7:4e:d8:e4:93:
81:29:19:e8:45:50:a9:d0:58:28:a8:df:83:a5:30:a2:fa:e5:
d8:87:da:7f:94:0d:05:ef:95:27:ac:16:6d:ba:d1:5d:a7:04:
ac:b1:dd:83:d8:db:d8:fe:66:fe:25:82:22:4a:9e:7e:71:2b:
ca:43:92:79:30:be:c9:ac:0c:7c:9a:f7:63:27:cb:58:95:58:
f2:0d:47:00:ec:0a:f4:86:0e:db:8c:e8:5c:73:2d:38:1f:70:
4e:a7:e2:49:d2:dd:62:eb:75:91:e0:9e:49:6f:40:71:82:c9:
00:88:fb:53:29:83:22:ca:18:14:19:9e:ab:8d:78:b6:fa:68:
b1:52:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:18:37 2025 by rpki-client