Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: 6A4dWCZK8NIYQXggearQxrMqxi/1/nLPxO1Smq9BOyw=
Subject key identifier: E1:11:E6:7C:8F:31:6B:E9:2B:30:B3:09:F4:69:38:82:6F:A5:B4:DD
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0196132153E35273C94E7E24A0DD9BB56649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0E15
Signing time: Tue 08 Apr 2025 02:01:13 +0000
Manifest this update: Tue 08 Apr 2025 02:01:13 +0000
Manifest next update: Wed 09 Apr 2025 02:01:13 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: Wb3IDaPxfNN8ffd8IIERe7Fw9VwqrCGGYbtCS2d/v2g=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:53:e3:52:73:c9:4e:7e:24:a0:dd:9b:b5:66:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Apr 8 02:01:13 2025 GMT
Not After : Apr 9 02:01:13 2025 GMT
Subject: CN=e111e67c8f316be92b30b309f46938826fa5b4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:de:5e:9e:5a:01:e8:46:23:05:3f:32:67:
57:e1:49:86:d3:bb:dd:08:46:60:5e:46:fa:36:11:
a2:5f:d6:9e:d9:1a:64:0f:cc:60:d8:a9:19:98:1a:
4e:4c:81:90:39:1f:ef:ec:d0:d6:18:a3:9c:68:4a:
97:4f:56:fb:58:56:70:f5:45:45:a4:ad:54:04:c8:
c9:5a:5e:48:d5:0d:b7:85:79:55:3f:3d:a8:ed:b6:
4c:8d:7e:44:19:57:8d:93:f2:8d:fa:f6:77:b4:bf:
74:e6:b3:b0:86:cf:a2:15:e2:1a:6c:f7:39:d6:fb:
72:89:c6:33:4a:f6:2e:78:1e:39:b5:0e:2e:a2:5e:
8d:6c:ec:c2:7d:4a:43:3f:a5:4e:ff:f3:6b:91:f3:
09:25:65:d8:0e:50:47:97:00:96:d9:7f:a3:1e:3e:
da:f4:20:3f:59:11:71:d7:7a:53:4e:f7:7c:aa:7b:
27:70:ae:6e:27:8d:a7:d8:6b:fc:a0:6a:c7:bd:f3:
f0:10:7f:92:62:81:73:d5:47:da:a3:99:9a:75:c4:
24:a0:5a:16:0c:76:76:87:0a:62:42:a2:b9:0a:d5:
e0:a4:e8:93:6d:a3:19:43:b2:f8:70:ae:b8:8e:f1:
bb:c9:4c:65:ae:58:8e:d0:df:f9:c0:c6:6f:ff:e4:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:E6:7C:8F:31:6B:E9:2B:30:B3:09:F4:69:38:82:6F:A5:B4:DD
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:a3:ae:8f:be:9e:f5:6f:ca:c6:1b:4e:ec:b8:20:2b:11:
bf:de:fe:85:0d:4d:c0:4c:0a:47:01:8a:e1:d3:67:15:e3:32:
91:ae:2a:eb:02:8e:65:ca:6e:b8:72:83:69:84:62:ce:f3:f0:
3f:30:f3:0a:ad:a8:5c:c6:f0:57:5a:b3:2c:69:b3:bc:85:ee:
db:b0:f7:2d:74:34:fa:31:ab:c1:2c:ac:a0:64:69:39:df:3c:
52:1b:61:51:c4:2e:6a:c6:d5:a6:7b:23:c9:64:d8:d0:b7:f7:
98:e5:46:9b:72:3e:45:f0:1e:b0:a6:8e:eb:12:f7:d7:d1:57:
68:bd:6a:aa:a9:c6:0e:5a:75:e5:22:1b:01:da:83:af:6e:94:
58:ac:ae:af:d2:5e:20:54:a1:44:22:08:9f:91:8b:81:34:0c:
f7:df:71:51:7b:74:c6:6e:25:b0:a2:f4:5f:d6:39:2b:8d:0e:
83:9c:f0:9b:17:96:fc:9c:85:b0:a5:36:b0:1a:a4:30:b5:05:
5f:c8:b1:f3:59:a3:cb:fb:8e:0f:a3:ff:a8:95:00:f1:db:7a:
96:f9:05:e7:c8:99:2a:2e:56:23:74:57:f8:4c:5c:27:10:52:
8e:6f:fc:43:83:dc:0f:4d:0e:cd:c1:1a:89:5b:73:58:80:f3:
6b:4b:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:34 2025 by rpki-client