Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: lZIN4cSsly0IXjd2cK/xpNDN7s1Q1Ix/Xuctj1+yZIk=
Subject key identifier: 06:17:CE:32:65:E0:94:8A:FA:87:70:C8:7A:1B:2F:34:34:5B:87:1F
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019A72267F5CED0AB5AA070CAF9520148A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: TsA3StvmfcwIsKL6wVj6qKFhbcbTUD7FRBNUv6vXBjQ=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7f:5c:ed:0a:b5:aa:07:0c:af:95:20:14:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=0617ce3265e0948afa8770c87a1b2f34345b871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:78:19:37:a7:ea:dd:16:f5:43:2d:f3:e1:
7b:b3:3d:a6:fa:8c:32:99:67:d9:1a:18:b6:4f:66:
ae:0f:4d:9e:75:b9:9e:c8:cb:c5:fb:1f:80:e2:27:
f3:1d:f8:2f:8f:94:b8:d1:89:94:bb:d9:59:e7:ec:
72:dd:2c:34:c4:50:46:c1:3c:68:39:1e:d3:01:23:
ee:43:d1:6e:a6:61:58:bf:dc:c0:ef:aa:cf:da:c4:
db:f0:50:69:45:cc:6a:fb:8b:ec:38:30:e3:5c:91:
26:47:6f:31:b8:7c:18:8e:ca:81:d9:ef:1c:d9:06:
81:f2:4a:71:c6:5e:34:82:7e:a8:78:81:7e:23:f5:
c8:42:78:5c:2f:e2:7f:7a:4b:c6:2c:4d:aa:8d:6c:
b2:9d:da:0b:c3:c2:a4:f5:4b:15:fc:b5:0e:05:b2:
54:db:94:76:e6:30:b6:df:1c:da:a6:1f:40:a3:75:
68:dd:41:70:46:81:4c:85:bf:f0:86:81:db:29:5f:
22:de:9c:33:8a:3e:11:cc:37:02:cc:84:ea:f0:14:
4f:21:5b:23:32:06:64:21:34:91:80:da:09:e6:ea:
df:80:37:4a:ca:ed:de:f8:c4:f0:d2:fe:fe:4f:51:
45:59:fc:6e:6e:1e:42:c1:c1:fe:f4:f0:5f:35:cb:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:CE:32:65:E0:94:8A:FA:87:70:C8:7A:1B:2F:34:34:5B:87:1F
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:93:43:d9:70:34:ce:2b:f7:50:fb:80:53:77:41:3f:87:5e:
1b:f5:56:bc:04:f5:53:20:ae:1c:94:5f:7a:cf:a3:83:f4:e7:
d4:8f:61:f3:13:44:34:94:f2:a1:6b:25:74:6e:b8:2f:db:3b:
b9:dd:c5:60:b0:9c:5c:df:89:45:eb:a3:78:4b:2c:19:d9:7a:
f5:90:5a:08:ef:64:c6:8d:5a:63:11:63:2e:b8:a9:1d:d0:67:
71:9c:50:d3:06:31:be:dc:17:9d:b5:55:40:c1:50:9c:d1:4d:
24:7a:b7:be:92:f6:06:54:b5:0c:0e:4d:3a:d9:4e:6a:63:d2:
4e:64:9e:0d:80:cb:63:47:67:6a:d1:c9:dc:32:12:4b:4d:ee:
5e:e0:05:7c:58:c0:92:e1:84:3d:55:52:c5:00:63:6f:f0:c3:
8a:10:1c:fc:dd:6e:c2:ba:f3:ef:73:0f:1b:c3:ea:b7:78:9f:
11:7a:b6:a8:bb:5e:96:64:bd:ee:aa:ae:bf:fb:f8:c1:fe:b1:
a6:16:15:6e:37:a4:3f:20:04:d3:9b:40:59:ce:98:9d:13:ed:
bc:ab:95:1e:2a:cd:90:d3:ae:a2:6c:bc:c2:6b:af:24:32:bd:
14:96:62:44:b8:75:eb:64:eb:ae:a3:7c:fb:56:ce:1f:5c:a3:
d0:05:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client