Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: EMZIjZGQNJeLtDVtrrh+mNakexBJGKe8+DNSjAdm3y8=
Subject key identifier: 1C:56:45:73:FD:40:1C:82:AB:5C:A1:21:24:C7:7E:24:82:50:96:7A
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019752D8FCC6403353573D2BEFF11947C434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 0437
Signing time: Mon 09 Jun 2025 04:00:41 +0000
Manifest this update: Mon 09 Jun 2025 04:00:41 +0000
Manifest next update: Tue 10 Jun 2025 04:00:41 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: 87PWjQqFikky8iYa4oGjgy0lGxrskaf2M2fsHePDNUo=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:fc:c6:40:33:53:57:3d:2b:ef:f1:19:47:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Jun 9 04:00:41 2025 GMT
Not After : Jun 10 04:00:41 2025 GMT
Subject: CN=1c564573fd401c82ab5ca12124c77e248250967a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:90:f7:53:9e:0c:a1:bd:18:12:f0:b8:99:
47:87:9f:44:19:f7:26:df:8e:cc:e3:89:3c:e1:dc:
e2:92:97:34:be:e9:76:f1:73:73:f9:22:62:ef:36:
3a:36:2b:5d:61:70:24:aa:de:1d:93:95:f0:27:b9:
5e:f8:9c:2f:e8:d3:1a:ec:4f:32:5c:94:2d:d8:43:
7e:92:de:91:58:57:8b:c0:56:d0:65:81:f4:ed:9f:
28:59:dc:53:24:10:3a:31:ca:af:9e:04:b9:a1:37:
7c:77:a0:8a:02:58:b2:9e:93:05:42:cc:c2:24:9c:
16:5c:2b:94:cc:f8:2b:6b:c4:f2:66:93:cb:c0:52:
fa:b7:a7:fe:f6:44:21:5f:7d:37:3e:49:05:63:10:
bf:2e:9b:67:ac:82:53:7b:77:de:29:54:ec:d8:43:
ed:9c:10:dd:93:6c:93:05:1e:5f:ae:32:63:e4:9c:
e7:d5:b2:1e:7b:9b:fe:8d:83:f9:31:50:8c:1c:95:
16:34:7c:fb:fe:60:9a:38:9e:30:18:66:ce:20:fa:
10:e3:cd:51:fd:af:94:93:9a:04:99:26:25:28:a5:
ac:53:e4:c3:04:4e:ef:31:b1:08:49:d1:07:b7:e4:
01:bd:95:cc:eb:e0:e6:52:b9:46:ac:06:b5:dc:46:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:45:73:FD:40:1C:82:AB:5C:A1:21:24:C7:7E:24:82:50:96:7A
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c5:ca:c2:ad:fb:cc:b0:78:ac:64:38:82:74:52:48:67:16:
83:1b:a8:c3:42:83:fc:2e:4f:37:96:84:4f:5c:51:2d:5c:4f:
2c:0b:96:12:28:06:78:1f:9b:cd:7b:c9:d9:04:88:7d:6f:ee:
2d:87:c3:19:24:f9:5c:6a:b7:4f:86:27:e5:71:02:57:79:06:
bf:10:7d:51:ea:c1:95:3b:6b:de:36:75:77:a1:6c:b8:79:c6:
68:43:91:34:34:fb:68:06:e9:87:1c:f1:c2:ea:4e:76:bd:fc:
81:8e:92:47:1c:3c:41:2e:db:a6:ed:da:4d:ed:df:49:d1:69:
ec:34:a9:98:1d:01:68:f0:e0:eb:d1:d8:ff:61:93:3b:42:36:
fd:f9:6d:93:55:1d:bf:9f:44:17:3f:d0:70:88:cc:ab:31:f2:
cd:0e:db:2b:e5:36:ba:55:15:ec:65:34:68:7a:22:da:16:22:
ed:9a:65:3a:f6:2a:c2:e3:87:e4:1a:b3:2d:04:27:f1:0e:73:
09:c0:a5:98:47:ef:52:9f:29:91:64:af:31:ce:97:77:d6:7c:
23:a3:e5:ca:99:b6:58:b7:e2:05:16:b1:52:71:9b:c7:d9:da:
f8:45:97:0a:de:a6:79:1b:d1:a6:b8:8c:6d:c3:40:21:f4:27:
0e:ab:64:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2PzGQDNTVz0r7/EZR8Q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTE3MjgxYWNmOTZkMzhlNzlhMzVjOGJlYjY4YjhjMDU5
NzlhNmYwHhcNMjUwNjA5MDQwMDQxWhcNMjUwNjEwMDQwMDQxWjAzMTEwLwYDVQQD
EygxYzU2NDU3M2ZkNDAxYzgyYWI1Y2ExMjEyNGM3N2UyNDgyNTA5NjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+aQ91OeDKG9GBLwuJlHh59EGfcm
347M44k84dzikpc0vul28XNz+SJi7zY6NitdYXAkqt4dk5XwJ7le+Jwv6NMa7E8y
XJQt2EN+kt6RWFeLwFbQZYH07Z8oWdxTJBA6McqvngS5oTd8d6CKAliynpMFQszC
JJwWXCuUzPgra8TyZpPLwFL6t6f+9kQhX303PkkFYxC/LptnrIJTe3feKVTs2EPt
nBDdk2yTBR5frjJj5Jzn1bIee5v+jYP5MVCMHJUWNHz7/mCaOJ4wGGbOIPoQ481R
/a+Uk5oEmSYlKKWsU+TDBE7vMbEISdEHt+QBvZXM6+DmUrlGrAa13Ea3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxWRXP9QByCq1yhISTHfiSCUJZ6MB8GA1UdIwQY
MBaAFBpRcoGs+W0455o1yL62i4wFl5pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUt
NzAyNzI2ODhlOTcwLzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUtNzAyNzI2ODhlOTcw
LzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzsXKwq37
zLB4rGQ4gnRSSGcWgxuow0KD/C5PN5aET1xRLVxPLAuWEigGeB+bzXvJ2QSIfW/u
LYfDGST5XGq3T4Yn5XECV3kGvxB9UerBlTtr3jZ1d6FsuHnGaEORNDT7aAbphxzx
wupOdr38gY6SRxw8QS7bpu3aTe3fSdFp7DSpmB0BaPDg69HY/2GTO0I2/fltk1Ud
v59EFz/QcIjMqzHyzQ7bK+U2ulUV7GU0aHoi2hYi7ZplOvYqwuOH5BqzLQQn8Q5z
CcClmEfvUp8pkWSvMc6Xd9Z8I6Plypm2WLfiBRaxUnGbx9na+EWXCt6meRvRpriM
bcNAIfQnDqtkyg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:36:57 2025 by rpki-client