Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: ov+Yb3vMmCtCuc9rmv2cOVOPNCn1w8KMjbTxFJYYuxY=
Subject key identifier: 09:DE:87:58:D9:73:92:D0:C6:CA:86:8D:14:1F:F2:7F:3A:FC:3C:48
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019659B993F1FFE3C26C6FB47BB600F767D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 03B6
Signing time: Mon 21 Apr 2025 19:00:56 +0000
Manifest this update: Mon 21 Apr 2025 19:00:56 +0000
Manifest next update: Tue 22 Apr 2025 19:00:56 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: ILQG2muaXfK9i100MzZMffJ7fyS83sb2E5Zz5fST1sk=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:93:f1:ff:e3:c2:6c:6f:b4:7b:b6:00:f7:67:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Apr 21 19:00:56 2025 GMT
Not After : Apr 22 19:00:56 2025 GMT
Subject: CN=09de8758d97392d0c6ca868d141ff27f3afc3c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:75:2d:7b:86:19:50:71:dc:68:4b:1c:22:
b1:f5:ad:9e:fd:dc:97:96:6f:8c:b6:34:f6:c6:df:
fe:d0:3e:93:dd:97:02:6a:8f:e5:13:6c:cf:73:80:
dc:6b:37:58:fd:6e:35:ec:6a:51:e8:c8:3a:e1:1d:
07:51:e7:bc:ca:93:08:56:17:64:ce:1e:9a:ee:2e:
0d:1a:35:69:fe:60:ba:0c:a1:b2:df:f6:76:2f:fb:
ec:60:42:f9:2c:8b:73:55:12:81:3e:c5:77:0b:91:
93:c9:17:06:3b:f2:84:de:1b:68:8a:c9:ba:3c:a8:
4f:af:2f:e5:46:c3:23:21:74:da:2a:03:62:d7:05:
50:43:7a:d5:10:ab:ae:59:19:77:e9:e7:19:8a:cc:
75:8d:12:b7:49:32:ff:9a:0b:fa:49:a3:27:2b:d2:
91:0f:78:e4:a1:6e:a8:e2:b2:eb:a5:10:a2:e6:17:
da:4c:df:3e:03:1f:74:c2:e5:b5:13:d9:43:7c:1f:
d4:03:8a:00:f6:79:02:3b:55:a9:30:83:cb:b3:c4:
f4:9e:5a:ff:27:01:c0:3a:30:8c:34:96:e0:de:6c:
72:c0:45:bc:b8:62:ae:6a:e4:a9:12:78:b4:e7:25:
3a:a7:de:95:90:8a:79:b9:8d:04:23:d9:6f:0d:15:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:87:58:D9:73:92:D0:C6:CA:86:8D:14:1F:F2:7F:3A:FC:3C:48
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:03:ae:3e:25:7c:f6:2c:6f:79:09:d5:2c:ba:ba:e0:05:c0:
7d:56:84:3b:9f:a5:ed:57:68:5e:28:0f:f3:33:69:78:cb:e6:
02:3b:36:59:9a:10:f1:c2:59:da:fd:32:fe:10:c9:52:86:b7:
64:92:18:5b:da:f7:16:ac:c4:5f:8e:e2:fe:9c:4d:b1:e9:3c:
ba:ab:6e:0f:7f:12:e6:23:e1:55:da:ff:35:66:61:a6:1f:6c:
f4:12:dc:53:83:55:e5:26:44:50:fa:04:8c:17:f5:ba:20:2b:
10:ca:21:31:3e:3a:a1:9b:2e:de:e6:3e:df:e5:68:da:c5:34:
ed:49:d9:9d:58:a1:5b:e7:83:d6:fc:6f:72:03:2f:f8:b4:0e:
f7:d4:e4:19:08:30:3e:0f:bf:ec:6e:16:3c:c9:76:6b:43:a6:
88:8e:7a:a0:9f:91:5b:0b:ed:08:9e:47:e2:07:df:84:99:4e:
ff:11:da:a5:51:3e:ae:bf:61:74:9f:3c:ae:93:d4:78:04:9f:
96:63:eb:89:22:b7:7c:1c:69:4b:a4:3d:66:d5:4a:be:42:1f:
db:4b:09:2a:45:11:6b:3b:45:e2:90:df:50:50:d7:2b:a0:bf:
db:d8:fd:e6:f4:26:ac:56:07:85:6b:36:65:a3:c3:69:67:b9:
bd:7a:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:50 2025 by rpki-client