Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: LaLmKPUE1XgvhWYFsCamY9oAl8il2/izf+Aq28/T018=
Subject key identifier: 6A:70:F7:B9:1F:67:8E:65:27:EF:BD:A6:C5:91:47:3B:21:44:20:0B
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019752348D188BD18FC2ED6C94BEEFC2691B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0517
Signing time: Mon 09 Jun 2025 01:01:04 +0000
Manifest this update: Mon 09 Jun 2025 01:01:04 +0000
Manifest next update: Tue 10 Jun 2025 01:01:04 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: CDnUWumFUCjlBgNK1Gk3gBQENtf9lINa0aP5tQJSXnY=)
2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:8d:18:8b:d1:8f:c2:ed:6c:94:be:ef:c2:69:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Jun 9 01:01:04 2025 GMT
Not After : Jun 10 01:01:04 2025 GMT
Subject: CN=6a70f7b91f678e6527efbda6c591473b2144200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:7e:aa:c8:a7:0a:e3:03:45:ba:b8:72:f3:
1f:91:39:4d:be:69:89:97:60:ef:2b:30:94:c5:45:
f4:35:2b:74:86:11:2c:7f:7a:cf:44:43:67:57:bb:
36:13:ea:68:d7:f7:c3:0e:52:01:3c:57:30:de:1d:
29:43:ac:a6:c9:52:36:a1:aa:a4:0b:67:0f:ab:8b:
95:b2:12:e4:51:25:8a:dc:82:ea:c2:23:bd:ae:2b:
2e:05:89:cd:c4:95:01:38:96:08:d5:cc:7d:62:74:
bb:1d:14:49:df:1a:d6:79:ad:3b:7f:04:a2:dc:54:
2a:c8:dd:d8:26:69:0e:9c:b9:e7:60:43:a7:d0:27:
51:b3:e7:47:91:01:41:fa:f5:cc:c6:8d:0b:dd:13:
45:4e:d1:32:a9:89:b0:a6:11:e8:a1:d0:1b:15:75:
0e:19:b4:bd:5d:d8:9c:9e:d0:55:af:5d:65:b3:65:
b9:04:26:91:5c:b1:d1:ca:82:96:57:7e:d2:f6:44:
b9:60:e2:3a:bc:01:5f:82:4a:92:21:0e:9f:f3:70:
86:ef:ba:a7:f8:5e:c7:6f:81:7c:9b:de:86:ef:ff:
64:04:0d:7e:b7:49:37:ec:df:5e:0b:c4:fa:e9:0d:
b8:e2:e4:92:2d:16:69:9a:4b:96:61:7b:66:01:a8:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:F7:B9:1F:67:8E:65:27:EF:BD:A6:C5:91:47:3B:21:44:20:0B
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:16:82:d9:81:2e:ec:5f:4b:e1:22:ff:dc:1e:b9:97:c6:
c9:a7:52:24:54:1e:d3:4b:65:da:01:f2:fc:9a:9e:85:27:e0:
6c:ed:ab:e5:e4:73:6b:99:1d:8e:3f:d7:fd:b2:38:2f:25:08:
5c:d3:b1:24:ba:1c:be:1a:11:ad:9a:8b:eb:3e:39:a3:66:a6:
fd:37:83:4d:90:a1:77:f9:dc:90:1b:ff:07:33:be:06:21:0d:
db:c0:69:7a:de:95:cb:1e:d4:92:69:c2:fb:77:44:3f:fb:d0:
f3:e2:79:87:89:d9:bf:c1:4e:54:5f:c1:9b:9c:94:6a:1a:02:
92:ab:41:06:81:e9:dd:79:e2:56:9d:f2:d8:57:d8:c7:bf:84:
52:1a:18:9a:89:f9:34:18:b8:51:28:39:81:75:7c:24:ab:37:
19:19:45:4a:fa:6c:62:f5:49:5e:85:58:cf:d9:f0:dd:c3:83:
8f:04:b6:35:e7:07:46:6a:ba:42:9e:1f:f8:6e:0f:78:89:2a:
52:5f:e1:d0:be:f5:f6:4d:50:bd:c2:c9:94:cd:47:86:de:52:
32:47:aa:eb:a8:43:a5:9b:67:1d:18:b4:da:55:f8:cb:f9:94:
8c:50:3c:df:bd:c0:30:71:c4:e0:96:ec:b8:f8:48:09:86:64:
5b:b1:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:53:58 2025 by rpki-client