Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: kvSXE7lAhgQaagQRSN/BIQjquJYDWnhxQge2CvnlP+o=
Subject key identifier: 69:20:3D:9C:37:C0:DF:4C:AE:B2:A5:EE:1F:E1:E8:15:39:3E:5B:7D
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0197643A8A7D1EB584049020DB8FE87A8D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 0440
Signing time: Thu 12 Jun 2025 13:00:47 +0000
Manifest this update: Thu 12 Jun 2025 13:00:47 +0000
Manifest next update: Fri 13 Jun 2025 13:00:47 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: gYnbarGF0Vp0s9XUPwT6BJi0IyEjkruyiXjySC/jKns=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:8a:7d:1e:b5:84:04:90:20:db:8f:e8:7a:8d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Jun 12 13:00:47 2025 GMT
Not After : Jun 13 13:00:47 2025 GMT
Subject: CN=69203d9c37c0df4caeb2a5ee1fe1e815393e5b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:f6:47:b8:05:8e:9e:70:6d:8b:11:e6:a8:
05:af:4b:cd:7f:32:3d:28:f5:90:43:28:54:a2:b7:
f2:1f:1d:61:78:fc:0a:16:ee:7b:af:89:a4:84:f9:
d0:95:58:75:64:96:d9:48:dd:3a:ab:f2:04:91:48:
91:de:e8:07:9a:fc:5d:35:af:77:8d:41:3c:a8:f4:
a8:21:87:b2:2f:74:66:d1:2b:11:db:0f:04:ff:09:
f5:08:71:f5:5e:f7:fb:56:9e:67:48:42:99:08:42:
1b:eb:62:9c:ca:76:df:d4:fd:92:0c:37:ae:2a:b0:
69:d4:b0:36:80:dd:e5:a1:b3:a3:8e:0a:eb:b5:23:
23:ab:df:ae:3d:ac:c6:80:aa:78:2d:fb:a1:51:41:
a1:21:05:fa:7a:0f:a1:2f:62:50:1b:ca:52:09:a3:
cf:d7:23:e7:3c:f9:f7:24:7c:82:4a:a0:6e:29:ca:
85:ae:59:a2:ee:4b:6e:dc:04:df:34:51:2b:99:e8:
e7:d9:c4:35:20:75:81:92:f4:ff:f7:00:45:8b:be:
f0:d9:20:fb:5f:51:c3:2e:f7:df:4d:f5:5f:62:c1:
47:d7:73:77:8a:d5:99:c5:82:f5:9c:d4:9b:9e:37:
a0:08:c7:2f:df:c5:ed:e2:65:f2:50:7d:50:53:7c:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:3D:9C:37:C0:DF:4C:AE:B2:A5:EE:1F:E1:E8:15:39:3E:5B:7D
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:18:f1:0b:c3:50:cf:08:20:a6:6e:40:a0:00:e1:56:d8:a6:
ab:57:63:db:20:b6:40:a4:ae:d5:49:b9:ef:32:c6:74:3b:d8:
0e:f9:db:a1:5e:32:a2:5f:a2:0c:44:f7:f6:c0:06:23:01:9b:
c5:15:d2:c3:2f:5e:7c:fd:52:bf:06:26:78:b0:17:89:cf:e8:
f0:07:cf:8f:63:d9:26:99:ff:4f:f5:bb:90:2d:25:96:be:d1:
3d:b5:9e:ea:49:be:8d:db:eb:c6:46:98:44:fe:51:7a:8c:58:
a7:6a:a5:1b:52:76:92:07:a3:6e:34:ab:12:dc:20:4b:42:17:
97:60:44:ec:d1:a1:d7:00:d2:fa:0e:c4:91:57:41:77:5d:a9:
66:a3:f0:da:de:0f:e3:76:44:4b:83:01:0c:1d:91:ad:e1:9c:
69:84:88:32:a4:f3:25:ea:8b:34:c6:52:3e:e7:d7:aa:0c:85:
fd:6e:7e:a2:7d:2c:fb:45:e4:dd:f5:73:29:2c:58:c6:71:9b:
f7:07:01:0f:28:39:42:0b:68:18:43:9d:56:7b:79:02:0e:00:
40:06:54:c4:33:bf:8f:a2:bc:10:ba:58:5e:9b:53:66:86:ca:
3e:68:dc:f6:2d:26:a4:4b:87:2c:97:50:5c:b6:c4:3c:6b:54:
3b:a2:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:50:16 2025 by rpki-client