Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: gR34EPZfWsq6YdwVtW+Qh0Gd00Fs9cigTffRVFNTP1s=
Subject key identifier: 4C:51:CE:46:57:63:0F:EF:5C:B9:38:28:9E:33:ED:B0:99:05:44:82
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019747E7C884A33BE256D359FFDA92C15144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 13F2
Signing time: Sat 07 Jun 2025 01:01:01 +0000
Manifest this update: Sat 07 Jun 2025 01:01:01 +0000
Manifest next update: Sun 08 Jun 2025 01:01:01 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: AcZdFQC+rGvGfMh7Mzy7HlFCXtcqAoGacg7r/OeBESs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c8:84:a3:3b:e2:56:d3:59:ff:da:92:c1:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jun 7 01:01:01 2025 GMT
Not After : Jun 8 01:01:01 2025 GMT
Subject: CN=4c51ce4657630fef5cb938289e33edb099054482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:32:cb:24:49:54:97:b8:d1:2f:c9:db:31:
6c:33:4d:c8:ab:f4:31:02:ce:b5:94:73:34:fb:65:
a6:44:a5:7c:b2:4c:48:32:d6:b1:ac:40:e3:c1:e8:
42:e7:f8:9f:47:81:9e:f2:65:f1:80:3a:5d:c3:40:
68:c5:23:bc:8d:d5:04:a7:8e:40:d5:20:6e:75:ea:
54:f6:f7:22:4e:ed:40:06:03:98:8b:3e:21:8a:ad:
45:23:3e:08:0f:0a:ac:76:1e:01:2e:75:27:3a:fa:
2e:f7:89:bd:36:d9:ac:05:98:e8:ce:04:0a:85:91:
a5:dc:81:e2:fb:0e:28:6c:f9:76:ce:26:c1:71:7f:
86:bf:4d:6e:3a:e6:52:15:94:6e:1c:12:7f:fd:0a:
2f:a1:10:6e:bd:15:e4:57:d5:fb:38:08:a6:b2:9b:
c2:95:fc:33:0e:eb:88:91:f1:b9:7a:70:3d:e8:fc:
9d:20:c8:79:ad:99:60:f2:ef:d3:16:94:7f:49:1b:
59:18:4c:39:80:a3:23:42:24:42:88:20:0e:a4:ff:
6b:70:cc:9c:e8:25:fc:ef:5a:a7:ed:d2:77:40:05:
ea:c0:5b:d9:44:f2:da:77:be:9b:58:20:7f:e8:ea:
42:05:1a:07:6b:a4:2a:f1:36:12:6b:8c:b3:1e:a9:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:CE:46:57:63:0F:EF:5C:B9:38:28:9E:33:ED:B0:99:05:44:82
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:bb:53:38:58:74:c7:b8:a6:70:c1:d2:fe:42:52:fb:72:
52:68:6e:c6:f0:0a:4b:f0:b1:24:d2:49:70:71:a6:67:1a:25:
95:59:4d:93:eb:f6:85:1f:dd:dc:98:2e:a1:bf:d9:88:11:84:
d8:ce:82:fb:c7:5c:7d:57:27:8d:95:01:b7:c2:6d:16:fd:31:
34:b0:7c:15:06:75:a9:f2:78:5f:4e:7f:18:f1:6c:42:bb:d4:
0d:80:87:f1:75:33:2d:93:1b:14:dd:35:69:c5:ac:8b:42:f1:
33:76:df:ab:69:7f:4a:81:23:59:6f:84:26:09:f7:b2:a3:ec:
57:e5:3d:6c:03:f9:c5:e4:4c:27:59:b3:30:7a:84:0b:f4:1e:
c4:4d:dc:96:23:3f:34:ee:79:45:ec:76:b2:a1:78:a3:4e:38:
20:4d:66:91:ec:a1:2f:e7:74:44:a9:8b:7e:dc:de:50:26:2f:
b4:20:ce:31:b5:6d:0f:49:3d:a9:a4:69:59:36:ad:23:44:a0:
41:84:ba:6a:18:5e:2f:e2:22:b2:14:ee:88:4c:6f:19:60:94:
85:f9:72:14:8b:b4:af:2c:c1:33:a7:a7:bd:60:d4:dd:3d:51:
f4:3e:68:4a:b8:48:2f:3d:85:3a:fd:1c:86:97:aa:66:c8:64:
38:4c:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:14 2025 by rpki-client