
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: /zmaCxGzJa8mbpdAEVYpEJvySL85oy9BXgdDeUZtVd0=
Subject key identifier: FD:A1:28:82:38:56:0D:E5:D2:6D:8C:47:DE:B2:A5:E9:D7:77:74:1D
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 01974C69E3BC9E6A381F470FE098B8ED7907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 10C2
Signing time: Sat 07 Jun 2025 22:01:37 +0000
Manifest this update: Sat 07 Jun 2025 22:01:37 +0000
Manifest next update: Sun 08 Jun 2025 22:01:37 +0000
Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: dwWhEDtz5rwY0HGUJd3nAVyugAqKoJU74o6q0MijqIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:e3:bc:9e:6a:38:1f:47:0f:e0:98:b8:ed:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Jun 7 22:01:37 2025 GMT
Not After : Jun 8 22:01:37 2025 GMT
Subject: CN=fda1288238560de5d26d8c47deb2a5e9d777741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:27:9c:e3:29:a8:8b:12:4f:f5:7d:ed:ec:
68:9e:83:d1:80:98:0e:c3:f4:48:5e:3c:8d:dc:52:
a3:3c:60:25:3d:9d:99:70:f8:19:2a:d4:10:94:04:
e3:c0:1c:39:cf:9d:74:91:e7:8e:c9:59:c9:40:8e:
a3:f0:c9:9c:e2:5b:b3:5e:26:87:27:40:4f:e8:85:
bf:4d:0b:51:ae:e6:32:97:4d:70:cb:5b:5d:3e:d1:
e5:08:ae:e5:84:b7:6c:b3:00:2a:4d:63:ff:b9:ef:
3d:0c:1f:e5:28:d1:8d:e8:c4:96:6f:df:75:66:5d:
59:16:93:0e:72:e3:47:f5:a1:a5:79:92:59:0a:54:
02:a1:dc:6d:2e:2b:e9:38:e8:06:7e:7f:42:45:cb:
44:ce:ba:f2:ed:5b:30:1f:44:ee:08:7a:31:93:2c:
36:89:46:95:79:df:4f:45:97:e5:ea:15:1c:22:4e:
25:46:61:dc:0e:dd:73:b5:3b:4c:31:21:c4:5d:37:
bb:dc:e7:8f:5f:aa:82:db:fa:5a:dd:af:c7:52:27:
5d:ab:9d:c2:7c:2d:73:5a:8b:79:02:2a:4d:e2:d7:
25:9b:0c:a5:98:19:d9:62:92:4b:24:8b:14:00:4e:
a9:2f:92:25:7f:74:56:cd:17:41:2b:da:e8:1d:ed:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:28:82:38:56:0D:E5:D2:6D:8C:47:DE:B2:A5:E9:D7:77:74:1D
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:16:cb:ad:a3:5b:5b:85:c7:64:59:46:7a:9b:2a:7d:54:
80:2e:99:6b:d2:e8:b0:21:62:f8:b7:a7:15:c1:21:d5:70:e0:
c1:a2:69:06:2c:41:cd:af:d3:22:81:42:a8:fd:09:49:01:70:
80:08:1a:62:e0:32:1a:10:b7:f8:3b:fa:fb:f9:40:6e:4d:ec:
d6:99:80:6d:8a:15:5b:55:29:44:1f:29:f9:28:c4:55:9c:5c:
2a:ea:b0:4b:3c:bc:fc:b4:5f:b9:29:73:ce:73:5a:1f:29:6a:
c6:86:47:39:b2:d1:dc:77:55:83:8b:d0:3d:d9:de:ca:65:a4:
b9:22:54:c5:96:f2:8a:9b:3f:e8:30:f7:f6:83:5b:5f:e2:1b:
c6:23:3b:b8:55:5b:7c:bb:22:da:75:56:b9:fc:7e:0b:e1:59:
ab:b1:27:ea:91:a7:22:f8:a3:35:97:98:bf:5a:e5:92:60:5d:
64:0d:33:e9:0a:cb:c2:19:2e:6c:cf:86:11:0f:5f:10:d6:f8:
39:f2:0b:52:8c:0d:2c:0b:1f:82:28:60:29:41:ff:02:04:52:
08:2b:78:25:79:47:1e:8b:90:c2:10:da:14:d7:6c:11:3c:f1:
aa:7b:5f:dc:fc:13:75:b1:79:95:8b:50:c5:7c:3b:5f:2b:17:
a5:68:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:46 2025 by rpki-client