Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: 7am1YhhutcJY7o9+vTBccWhrSKA0tzGuxDnFMjJLhIw=
Subject key identifier: E5:97:F9:E0:29:41:27:4A:2E:98:65:F2:86:F1:1B:DE:02:8A:C3:E2
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 0196447B1630E2889AE78BFFB8255C802E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 0EF0
Signing time: Thu 17 Apr 2025 16:00:39 +0000
Manifest this update: Thu 17 Apr 2025 16:00:39 +0000
Manifest next update: Fri 18 Apr 2025 16:00:39 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: fp4IIpM9nE7DjFvWehYo65gzqVEehFsP3NVaf+JFzhQ=)
2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:16:30:e2:88:9a:e7:8b:ff:b8:25:5c:80:2e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Apr 17 16:00:39 2025 GMT
Not After : Apr 18 16:00:39 2025 GMT
Subject: CN=e597f9e02941274a2e9865f286f11bde028ac3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a4:4f:cb:69:68:00:0f:09:15:6f:6d:56:d9:
bd:13:1b:9e:be:6e:17:77:44:f0:94:a1:85:de:54:
f0:3a:72:2e:b4:1a:1b:c5:75:eb:da:73:62:4e:19:
d9:8f:26:be:8d:3a:57:6e:cb:7b:35:9d:ee:aa:64:
74:31:30:8e:77:b0:6a:71:c9:19:96:32:00:8d:b7:
fe:25:a9:5f:6b:77:81:d9:00:c7:8f:67:c7:1d:d4:
df:e6:9d:24:37:62:fa:a7:72:2f:e6:b7:e0:d3:d0:
74:87:e9:73:3a:53:1a:22:bb:ae:0b:a8:6f:7d:b6:
91:41:9e:01:31:3f:5a:d4:dc:28:99:cd:fc:c8:48:
9f:1d:bc:6c:57:bb:20:78:a4:fb:e4:a4:78:fe:39:
2f:e6:69:90:78:50:e1:47:fd:b4:91:fe:51:c1:6f:
48:31:b7:9b:8e:ba:89:09:49:14:80:fd:d3:3d:df:
dc:fd:a6:a6:28:9e:9e:70:95:8b:90:1b:d8:5b:c5:
54:17:a6:71:bf:95:03:3c:8f:48:c2:a7:5b:7f:27:
8b:9b:0c:20:0c:70:95:d6:1c:58:98:d7:1e:64:a0:
b0:a1:6d:ba:17:6b:dd:2d:fe:57:24:c1:ab:fc:43:
f1:51:55:0d:77:bd:ac:27:7e:1e:2c:cb:5b:a0:2a:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:F9:E0:29:41:27:4A:2E:98:65:F2:86:F1:1B:DE:02:8A:C3:E2
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3b:50:d0:cd:e9:45:bf:dd:22:ff:89:18:d3:92:79:f0:aa:
4d:b8:9e:e4:12:63:c3:b7:ae:b1:b5:f7:e6:ae:23:20:56:7a:
2c:68:ce:1d:89:8c:a9:74:19:6f:dc:45:e2:95:b5:84:35:eb:
4d:ec:28:09:b7:e2:aa:56:dd:8c:3b:3e:26:a7:be:4c:51:bf:
81:41:fb:81:46:0e:96:f0:b6:c1:f0:61:f9:40:70:68:82:45:
b0:cd:6c:c6:9f:05:b1:9e:42:2d:ef:fb:47:26:8b:04:23:37:
14:f7:71:0e:21:82:7c:89:f9:61:fe:f9:56:83:7e:5f:b8:15:
47:4c:9c:9d:4c:b4:aa:30:86:35:14:3f:98:b7:3f:db:ab:60:
e6:bd:8d:56:19:65:a3:2a:51:a1:0c:bd:be:79:48:3d:e2:e4:
ba:50:94:7a:a4:83:5b:02:c5:f5:81:1a:de:0d:1c:d1:38:39:
af:89:7f:46:84:88:27:2d:7a:ff:36:df:3f:d0:71:d6:ea:ba:
f9:7b:a5:90:e0:c4:3d:17:ab:70:33:1a:b9:93:8a:d2:73:1e:
79:fa:1c:ef:57:c2:92:3b:bd:cb:bd:fa:61:bf:23:10:2c:9d:
50:ae:d3:ad:a5:28:ea:77:1b:59:35:a8:09:a8:15:25:f2:9c:
51:69:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:12 2025 by rpki-client