Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: KEB8gvwO6jzq8sGf0iWMoff2LRUnHGu6Y/RmuumD/Zw=
Subject key identifier: DE:F4:28:4C:C6:8C:4E:9E:52:A9:1E:47:BA:7B:1F:8F:7F:FD:42:51
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 019765164655C54196A7E0CB09914BBE3458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0EC4
Signing time: Thu 12 Jun 2025 17:00:47 +0000
Manifest this update: Thu 12 Jun 2025 17:00:47 +0000
Manifest next update: Fri 13 Jun 2025 17:00:47 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: wo1v3b5zv/lKLoksHB2Ji7nCynJuXtcPz9xpQ9PyF/M=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:16:46:55:c5:41:96:a7:e0:cb:09:91:4b:be:34:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jun 12 17:00:47 2025 GMT
Not After : Jun 13 17:00:47 2025 GMT
Subject: CN=def4284cc68c4e9e52a91e47ba7b1f8f7ffd4251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:23:0f:85:0b:ba:36:f4:d0:40:8d:fa:b3:
9f:54:48:d0:e7:d6:10:76:3c:a1:38:1d:0a:0c:ac:
f3:cc:9f:13:ea:1c:89:4b:e5:61:46:07:67:67:b2:
24:eb:14:ef:fc:ce:d5:82:c1:bd:73:67:6d:11:c3:
2a:83:c5:90:ab:34:b2:9f:bd:e7:76:55:7d:c8:05:
ae:94:36:0c:8e:2a:8e:28:59:f6:d1:17:53:53:94:
ae:6a:b9:12:2d:27:4f:8d:a6:a3:44:ac:30:9b:c0:
f0:16:7f:3a:7a:dd:a9:dd:15:3c:ec:11:56:f5:df:
1c:a4:53:4f:b4:0f:10:c8:49:23:88:f8:57:7e:9f:
5e:b3:ca:bb:e6:b3:cf:e9:75:48:a6:72:d5:a3:0e:
c1:4b:47:f0:29:e8:a3:25:de:58:5d:30:73:5c:99:
a9:0e:fc:7b:3b:c5:b2:13:96:35:c1:7c:46:c9:63:
36:91:71:4c:e2:66:00:6d:66:8c:71:0c:ac:b1:96:
59:3c:96:98:07:de:1c:4d:d2:fb:21:b1:9b:82:58:
37:27:1c:fa:11:a5:e8:88:48:61:1f:fb:c7:49:60:
d3:73:3b:90:ff:36:50:27:fb:10:2a:8b:af:07:bf:
9a:7c:29:27:85:eb:39:bb:33:e8:4b:0a:69:63:91:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:28:4C:C6:8C:4E:9E:52:A9:1E:47:BA:7B:1F:8F:7F:FD:42:51
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:25:8b:2e:10:e7:92:9a:21:d5:45:f1:4f:92:66:df:31:b6:
0b:ce:db:d5:7d:77:0a:2c:df:36:e4:d5:4f:53:e2:bf:ae:af:
fe:40:ed:b8:ff:07:21:df:b4:e2:98:9b:1f:c2:c6:dc:a3:32:
d9:8c:8a:2a:34:65:ca:ef:f9:ea:d2:3f:0d:94:2a:71:09:01:
7e:f3:c0:39:6d:c8:18:55:11:61:39:80:d0:18:9c:4c:85:15:
f4:32:e8:5f:30:7d:a9:1b:94:a8:f8:12:a3:bd:c2:d2:13:95:
9e:e5:7f:4d:4a:fe:8f:b7:9e:7d:52:97:4b:d9:ac:29:6f:17:
c1:53:e3:9d:c2:c6:d2:85:97:48:05:e6:1c:4f:84:86:bd:86:
5d:2c:e6:1e:28:20:f9:08:8c:b8:16:93:91:01:9a:91:90:14:
c1:97:f4:92:99:04:a7:e1:85:61:77:47:2a:e6:0d:59:30:f0:
f3:d1:03:24:d9:7f:74:d0:dd:a4:e9:10:da:ac:8f:01:c3:97:
13:80:28:14:ce:9a:1d:51:ea:3d:1d:19:e4:15:15:a3:1a:92:
7e:4e:10:6c:de:b5:66:68:f5:b3:b6:06:fc:f1:b4:12:e3:55:
52:72:a9:48:d9:cf:ac:e5:43:c2:c4:86:28:40:19:11:2f:b3:
cc:bc:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:05:34 2025 by rpki-client