Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: P6HYBQmFJEoyV1yCQZRbPBwdjLDTZUPqGHyz9qmgfTs=
Subject key identifier: 1D:8D:62:F8:27:93:58:AA:59:50:55:2C:BB:55:A4:63:B7:7D:4B:5D
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 01958F2A3C981CA8D5D34092C1209DA4887D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 11:01:04 +0000
Manifest this update: Thu 13 Mar 2025 11:01:04 +0000
Manifest next update: Fri 14 Mar 2025 11:01:04 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: anvafL/kAIsVVDNd7FPc424ZrSQIQBiBOrne8tRSzxc=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:3c:98:1c:a8:d5:d3:40:92:c1:20:9d:a4:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Mar 13 11:01:04 2025 GMT
Not After : Mar 14 11:01:04 2025 GMT
Subject: CN=1d8d62f8279358aa5950552cbb55a463b77d4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:9b:b3:a7:81:2e:9f:25:78:36:13:3e:56:
18:47:73:07:d7:e8:40:56:e9:15:ef:d7:ea:35:2e:
b3:de:83:4a:a0:0e:a5:19:36:a2:4d:0a:18:9f:39:
97:b3:0f:5c:86:b0:16:a8:68:c7:41:7a:42:e6:9a:
c7:c7:a6:51:32:7e:40:7d:07:ce:35:99:bd:f3:b9:
10:0e:d8:ef:a1:95:f3:cb:5f:fa:b6:f2:b2:82:22:
76:1c:48:5f:12:3b:67:d7:e2:a8:ff:5a:b8:fb:4a:
48:2a:16:3a:72:3a:1a:a5:3d:ab:7b:fa:63:a3:7d:
c3:51:9f:ab:f1:5f:af:e8:e6:bf:1f:c4:34:ad:6c:
41:69:40:ce:b5:9d:82:3d:49:21:1b:f0:3b:c9:c7:
cf:b1:da:28:fb:b9:b5:03:e3:de:0b:cf:8f:b2:9a:
aa:1f:c7:31:6d:24:69:9b:09:3f:ce:86:38:f2:62:
3b:9b:da:f7:a8:c4:b6:17:63:3f:1d:5f:8b:31:5b:
fd:56:d4:80:f4:10:41:4f:0d:1d:69:c7:2d:6c:80:
bc:69:1e:76:62:a4:3b:f7:fd:15:b3:e9:75:44:f4:
91:82:35:6a:89:89:27:94:04:14:05:3f:9e:a3:43:
7e:8a:ef:38:25:4e:e3:72:12:c9:b0:1b:87:8a:ea:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:62:F8:27:93:58:AA:59:50:55:2C:BB:55:A4:63:B7:7D:4B:5D
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:bc:c7:38:4e:af:eb:1c:96:c4:87:59:1f:c7:39:d8:3b:
4b:5a:47:a6:f2:fc:ac:40:15:57:1a:e4:eb:a1:a6:a5:a9:80:
70:26:ed:5d:5c:76:2a:ba:c8:5d:a0:19:a8:2e:b1:c4:9d:d0:
52:4f:7b:ee:a3:a7:9d:2f:c6:89:fd:ae:d1:13:b3:8f:38:fa:
62:3a:de:9d:99:d9:37:e0:20:7e:47:e8:bb:b5:58:1d:55:0b:
21:b4:08:4a:99:cb:d7:85:64:6f:1f:1d:5f:ac:66:dd:40:c0:
56:9c:04:7f:e9:cd:87:42:09:65:d8:06:d4:2a:49:8f:05:86:
69:7c:cb:3f:dd:6b:29:a1:82:ef:45:4d:28:ec:46:c9:c3:f6:
72:14:cb:a2:37:8e:7b:67:f2:e0:ff:9c:d8:93:1a:c9:f2:91:
05:f4:80:1a:d1:21:ab:59:9c:3b:eb:e9:b6:87:cc:34:6f:f6:
1b:25:e5:29:bb:17:90:36:c2:b1:da:fe:76:a1:da:36:16:0d:
e0:00:07:94:e9:8a:eb:ca:65:32:15:a7:a2:ae:03:68:27:10:
a7:c2:d0:f9:2f:01:34:b5:42:23:00:5a:1d:6e:38:97:e4:fe:
08:90:34:2a:22:73:60:12:0e:0b:7f:b5:10:4e:05:5f:d3:a3:
2f:b0:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:10 2025 by rpki-client