Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: hYX2047yni7/4OylPeDkYJynpWKq20z6CocdcL3v0lI=
Subject key identifier: 4A:48:B8:E4:1C:B0:EE:DA:60:41:B2:BE:AF:8E:FB:34:C1:25:E6:F6
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 0197470B8DD970720CBB1806F0EBA13C5859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 06BD
Signing time: Fri 06 Jun 2025 21:00:28 +0000
Manifest this update: Fri 06 Jun 2025 21:00:28 +0000
Manifest next update: Sat 07 Jun 2025 21:00:28 +0000
Files and hashes: 1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: LVi2FYx7UlvqhQDujiEWVxh7Cii70AElDFSRiGcQbu4=)
3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8d:d9:70:72:0c:bb:18:06:f0:eb:a1:3c:58:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Jun 6 21:00:28 2025 GMT
Not After : Jun 7 21:00:28 2025 GMT
Subject: CN=4a48b8e41cb0eeda6041b2beaf8efb34c125e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:cc:d4:da:5d:5d:c2:4d:86:b9:2d:53:c9:
ce:a2:4d:1d:c6:c3:5a:bb:cd:bb:d1:86:e6:cb:45:
22:03:80:9e:c7:a1:5f:7f:da:8b:36:c8:4d:bf:90:
07:c1:29:2d:01:5f:06:ec:0f:51:2e:de:09:63:46:
17:9d:93:28:08:62:38:3b:63:4c:5d:af:e6:6b:e6:
b5:87:1b:01:ad:3b:20:fa:78:29:22:28:b8:75:59:
16:b2:7b:4e:be:36:da:3d:97:a8:da:e2:c6:88:d3:
17:ca:f8:05:42:d4:9f:58:b2:ed:cb:9f:11:c2:8c:
12:45:fe:e7:45:2b:1a:d5:e6:ee:6e:af:f2:9a:5f:
f6:7a:17:fb:cc:5c:f6:63:ca:10:d8:d3:ff:9e:0b:
62:44:32:ad:3d:8c:3b:3d:49:a6:9e:76:44:75:ed:
ea:67:97:c8:63:1f:11:6b:f4:ad:47:5f:ed:36:6b:
6c:25:e0:51:9c:bf:9b:5d:c7:d2:bd:31:66:06:bf:
3a:41:28:4b:7f:fd:85:ff:c7:48:88:5b:06:ca:51:
0c:eb:cd:95:90:33:50:6b:1c:55:f4:1c:50:9d:d1:
45:9e:83:01:37:20:b8:19:b9:3a:4b:62:09:06:b8:
11:66:dd:e4:47:52:cb:d9:b7:48:27:25:87:59:18:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:B8:E4:1C:B0:EE:DA:60:41:B2:BE:AF:8E:FB:34:C1:25:E6:F6
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e0:0b:5b:db:45:64:75:4f:b1:a9:40:f0:da:30:41:4f:a8:
bb:9d:fb:61:e1:c9:14:05:7f:13:81:d0:b7:3c:17:8e:73:54:
a1:03:b7:7b:c1:41:11:af:74:b2:c4:e1:d2:f1:90:fd:be:a0:
a3:e8:e5:25:ae:55:77:84:a3:b5:27:b8:ec:66:53:47:b8:53:
9f:8d:e7:22:62:c8:30:58:b3:47:96:20:51:f4:ea:6f:d8:02:
f4:d3:06:f7:e3:00:a1:71:73:3e:7c:8b:21:45:c8:46:ec:b1:
b3:ad:21:b7:48:93:c5:a0:22:7f:ab:b9:ad:4b:82:1c:9d:33:
b2:97:db:0e:d8:00:86:48:8b:dc:1a:12:a9:7f:62:86:c7:a9:
0d:7c:c7:6e:5a:d7:c0:9d:2f:d2:48:84:e4:2e:19:d3:4f:82:
84:e9:ab:3d:06:c0:e3:28:a7:b8:bf:7e:28:e5:0c:0f:1a:75:
a7:af:3e:cf:81:a2:91:bb:dc:35:9f:0d:6b:ab:8e:24:85:60:
73:e4:69:bf:3f:66:0c:5a:c6:7b:1e:43:39:6d:5f:20:ea:3b:
d7:dd:ad:f6:05:78:80:a7:86:ee:ec:b6:c5:8c:b8:07:48:f0:
67:aa:d5:12:03:02:fa:75:e9:6e:0f:1d:17:76:99:04:43:40:
a3:a5:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:43:52 2025 by rpki-client