Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: bw9MqR7+Bx0Nelf3+Prbm88nQAQ0xZcHqW4nj8jpDm0=
Subject key identifier: 87:E1:15:AA:64:E1:19:BC:6C:13:B0:D8:46:20:B8:C2:0D:B8:87:54
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 01974967E1B8D21EA24A69380D6CA320A148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 08:00:34 +0000
Manifest this update: Sat 07 Jun 2025 08:00:34 +0000
Manifest next update: Sun 08 Jun 2025 08:00:34 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: HuhqCHt/9HBEVpqHEDFF8drirqdVspuAcVo+SV/lqVo=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e1:b8:d2:1e:a2:4a:69:38:0d:6c:a3:20:a1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Jun 7 08:00:34 2025 GMT
Not After : Jun 8 08:00:34 2025 GMT
Subject: CN=87e115aa64e119bc6c13b0d84620b8c20db88754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:f2:19:f9:bd:ab:cb:6f:3d:bb:67:23:97:
4f:76:91:cf:37:b8:cd:ae:b8:4c:7e:5a:11:de:c7:
7d:f1:43:c7:c8:71:ad:d3:60:64:12:9b:33:d1:fc:
37:13:25:dc:81:c9:98:2e:d5:cc:37:01:c2:c9:bc:
7a:9a:01:99:6f:86:f6:ce:a8:f3:04:5d:4e:4b:af:
22:92:40:67:0c:21:ab:21:2f:a9:9d:85:ff:66:b0:
b4:e8:dd:c5:9d:7d:38:86:16:f5:18:44:f1:19:59:
c3:24:f7:d4:ea:5d:4c:66:d3:ce:5a:4b:27:f4:09:
46:31:d7:82:d7:46:c7:35:ce:4c:c2:f7:1a:15:91:
16:0e:95:02:fe:ad:9d:9b:83:5d:cf:64:25:bc:bc:
d7:42:17:ac:2c:21:f8:e9:07:4c:15:73:0e:7b:c0:
5e:e4:0e:67:59:6b:9f:30:da:80:88:14:b2:49:be:
3c:be:69:9d:10:36:fc:ce:e0:a1:eb:ea:91:e7:7a:
3f:e9:a1:34:d0:3f:3a:61:af:be:b0:bc:2f:d9:41:
f7:42:25:25:42:e8:90:5d:58:c9:83:87:cd:80:bb:
86:1e:91:a7:2c:70:f0:2b:e2:7e:ff:2a:68:36:38:
74:c7:8d:91:94:16:1e:a8:c5:bb:82:e6:46:14:b9:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E1:15:AA:64:E1:19:BC:6C:13:B0:D8:46:20:B8:C2:0D:B8:87:54
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:eb:bf:91:4e:f0:30:9d:e2:bc:5a:88:22:2c:14:61:9e:
96:df:1e:fc:e7:0d:1a:f1:6f:05:cd:84:1c:3a:a6:03:8e:6f:
c4:f9:c0:1f:33:d6:62:f6:f1:8c:f2:3d:70:49:b0:4b:5f:ca:
b1:2c:2f:cf:5a:84:f6:aa:da:9c:43:6a:4f:00:45:96:e1:30:
35:7e:ed:aa:75:2e:6b:97:b6:b5:3d:1b:29:79:df:59:b1:ac:
f9:8d:70:53:bb:1a:53:f1:f6:d7:77:f0:fc:5f:ee:a9:ef:3e:
32:23:c1:56:92:1d:a0:aa:a9:da:b0:2f:98:45:64:66:ae:4a:
35:44:48:75:00:7f:58:2c:8d:43:36:58:eb:34:aa:2b:9e:e7:
c4:f2:f5:54:4f:6c:45:ea:64:ea:78:90:81:19:67:e6:d7:2d:
dd:bc:5d:06:c4:c5:35:64:cd:8c:f8:14:9a:f0:48:36:cf:41:
a7:26:20:c1:b9:29:25:f8:dd:46:e9:89:da:33:03:60:76:3d:
49:9b:1b:d9:62:0e:5e:35:4d:35:d2:50:97:81:4f:04:64:2d:
6b:b9:33:75:dc:52:55:89:18:a5:9d:0c:06:2a:5b:31:27:86:
43:2c:b5:7f:f0:b4:c1:e7:7e:9e:9e:d8:f0:bf:48:1b:4a:99:
ce:52:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:55 2025 by rpki-client