Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: 1jakVAPvX4kfFwWWjqsQe7Mk/NpaqxCd8wun3ALa6tg=
Subject key identifier: E3:0B:B5:F9:5B:17:E3:F6:21:BC:6B:4D:95:CE:30:01:2B:03:B6:C7
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 01984A77DE0AF0DE1F15766C6A22A9B2228C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 0C20
Signing time: Sun 27 Jul 2025 06:00:26 +0000
Manifest this update: Sun 27 Jul 2025 06:00:26 +0000
Manifest next update: Mon 28 Jul 2025 06:00:26 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: LVXf1tgN2zfW5A+y7tZxjm2VvcQWBPMPj+9VIaaby4c=)
2: CzS60ntrl-ifakYiPMHnNys_2hg.roa (hash: gJEVLSYuR5fsAEatKrGL8Os1DpygWBOtVxsvnHWW9x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:de:0a:f0:de:1f:15:76:6c:6a:22:a9:b2:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Jul 27 06:00:26 2025 GMT
Not After : Jul 28 06:00:26 2025 GMT
Subject: CN=e30bb5f95b17e3f621bc6b4d95ce30012b03b6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:a9:ed:8d:76:67:8e:04:1f:48:17:a1:9e:
a3:aa:ec:1f:b5:df:9d:af:36:00:78:55:b6:d3:82:
c3:df:8a:52:c2:ac:6f:c9:87:0c:36:79:d6:7c:4f:
d5:e9:17:bc:ed:6e:90:8d:11:08:dc:3b:53:7d:c8:
b4:82:58:66:19:b6:69:5c:1c:59:65:5b:6d:6e:3f:
61:63:ce:6a:e7:14:4a:fe:15:55:f6:37:d3:00:29:
a3:6e:b6:bd:87:86:63:dd:49:79:c3:9e:b9:41:22:
f0:cd:b2:26:d9:0a:55:d9:b9:9c:7f:88:f2:f8:e9:
04:ad:3c:44:21:77:c0:76:16:50:bb:26:76:b9:6d:
eb:de:03:20:67:76:43:c3:38:b4:28:5b:2b:b0:1e:
4e:17:a8:05:f5:66:11:ba:c7:8a:f6:83:0a:90:87:
b4:3e:7f:65:a7:8b:9f:44:9c:d6:d5:1c:4a:78:ce:
4a:96:2a:91:8d:c8:94:7b:3b:2f:21:c0:af:5a:6f:
79:28:7b:fd:45:23:1d:0c:65:c0:9f:44:26:0b:88:
22:c4:56:15:2b:35:5e:4e:db:42:5a:2d:14:d4:23:
12:04:cd:60:9f:37:a8:ad:68:72:57:1d:4f:b2:6a:
80:e7:3d:6d:0d:1a:53:7d:26:3e:67:8d:ef:6f:a6:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:B5:F9:5B:17:E3:F6:21:BC:6B:4D:95:CE:30:01:2B:03:B6:C7
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:61:d1:a2:d3:e8:f9:a6:13:a9:66:a8:b2:96:ce:1b:0b:
65:89:4f:c5:46:c9:c3:e8:57:41:c1:3e:0f:5e:cb:f1:f0:05:
11:36:c0:ca:e6:b8:b5:80:e1:46:5a:e1:5f:2f:06:1b:fc:fa:
4d:43:86:f9:22:2a:a9:3d:a1:a2:5c:1a:86:8a:60:cb:95:04:
8a:b9:49:1f:57:e3:ee:78:71:4f:0a:df:5e:a6:b3:ba:3e:89:
0f:2b:c7:6e:fc:5e:1e:5a:4a:a0:e6:ca:f3:29:ad:98:73:86:
30:9e:df:2a:fd:c0:3f:a8:76:5d:96:ce:43:16:47:6f:82:c7:
0d:7e:7d:eb:62:2f:64:73:22:0f:d5:9a:45:7c:29:11:ed:1e:
d1:11:40:0d:5e:f2:55:d3:9b:66:a2:91:b8:91:3d:3a:ee:67:
75:c4:2a:69:00:68:f6:1d:df:f2:36:bd:34:59:06:6d:2a:9d:
a7:8c:cc:b7:b1:98:c7:4c:8a:19:d4:1e:e3:43:ee:77:54:c9:
93:b7:28:d5:38:93:95:24:01:48:77:05:7c:79:8f:43:d5:00:
20:f7:f5:c1:5f:78:62:79:23:41:db:1c:32:37:2e:28:6d:05:
dd:16:56:53:90:c8:77:e7:9b:d9:b4:7c:65:f1:1a:2f:8e:d8:
3d:f0:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:36 2025 by rpki-client