Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File: GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier: rPObdVVoFye4lK3V6y8vAitEXHZFmCRlb4kKa4eog+o=
Subject key identifier: FF:EC:A3:54:E7:56:DD:BC:16:D0:AC:67:F9:98:E8:21:7F:F8:51:6E
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer: /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial: 019A706E5442C4EC160D0DE53B7DB4233A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 01:01:09 +0000
Manifest this update: Tue 11 Nov 2025 01:01:09 +0000
Manifest next update: Wed 12 Nov 2025 01:01:09 +0000
Files and hashes: 1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: SYkontuXdQWo/qlBnQfLV5yRTuv+Bvh7SViSgUsflko=)
2: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (hash: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:54:42:c4:ec:16:0d:0d:e5:3b:7d:b4:23:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Validity
Not Before: Nov 11 01:01:09 2025 GMT
Not After : Nov 12 01:01:09 2025 GMT
Subject: CN=ffeca354e756ddbc16d0ac67f998e8217ff8516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:aa:c5:28:05:38:44:ea:6a:ec:fa:90:ef:
a3:d6:54:40:3f:b9:05:e5:8c:64:38:ef:64:43:09:
98:b3:8c:c5:5e:2b:1c:5f:a8:6b:b6:65:51:df:f5:
18:df:87:68:83:83:4e:2c:0e:8c:d7:3f:02:df:e0:
20:2c:e2:b1:b1:b4:cd:3c:c7:e5:44:1d:a3:41:f0:
d7:c0:23:04:e5:0c:31:ae:b9:cc:06:53:08:05:78:
6f:85:e7:af:b4:62:e7:79:6d:4b:7f:55:4b:ab:5d:
15:4a:d0:09:dc:16:05:9a:5d:0f:5a:09:bd:26:2b:
6d:0d:a3:3c:36:12:a7:db:c1:f8:e0:06:cd:11:22:
2b:f5:ff:93:d7:35:21:66:d1:28:08:f8:73:d9:3e:
19:32:25:e6:6d:17:bb:dd:26:3f:46:70:f9:19:38:
55:e6:fb:86:ed:ac:b2:98:04:b8:7f:62:61:11:2b:
08:67:10:88:aa:df:2a:31:66:9c:48:98:a5:c4:bf:
3c:de:bc:94:23:8b:eb:a2:db:d7:a8:e4:4e:5c:b9:
09:b9:50:2c:7a:1c:23:e1:e8:36:8d:bd:63:df:6f:
37:82:3b:95:47:e5:16:97:51:f3:53:cc:0e:5a:61:
73:f7:d7:e4:9a:09:65:00:84:f7:5f:93:3a:86:fe:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:A3:54:E7:56:DD:BC:16:D0:AC:67:F9:98:E8:21:7F:F8:51:6E
X509v3 Authority Key Identifier:
keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:16:33:97:de:b8:28:13:19:96:b9:7c:34:05:06:f6:bc:
82:b4:3a:93:91:b6:cb:22:b2:95:c7:06:41:a4:c3:a7:15:d1:
e0:e7:43:52:7d:f9:c7:50:d3:3a:56:da:e6:be:4f:f7:7f:aa:
48:39:db:b5:cd:e8:7e:f0:37:c1:a9:0a:ee:90:68:0d:d5:3e:
cf:72:51:f1:7e:a3:97:f8:7c:b1:c5:46:40:43:6b:35:2a:c9:
91:d4:ee:ee:5b:28:6a:45:45:5a:97:e2:2b:4f:54:5f:75:da:
9f:d5:c9:64:22:3a:ee:5e:58:ac:b8:7a:33:ff:68:f8:ec:53:
c2:e3:ed:d5:e9:31:18:0d:b8:f6:90:ad:18:71:8e:81:e2:9a:
c7:2e:8a:da:01:f0:65:49:5c:6f:7b:ae:86:86:f4:bf:75:ac:
8e:25:57:bd:cb:56:69:dd:b6:71:3b:93:1c:1d:6f:3d:2b:76:
2f:f1:84:6f:d4:34:c9:c3:f4:46:0d:64:6c:49:89:38:15:97:
c6:8d:45:12:7c:1f:b9:c3:1d:55:b8:3b:30:d3:aa:70:c9:5a:
4b:e0:1b:ef:4e:93:ce:9a:da:71:17:32:c4:5c:26:d6:97:c3:
36:2e:33:9c:23:15:a9:9d:55:98:81:d9:cf:bf:5a:9a:77:db:
b9:47:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:11 2025 by rpki-client