Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: GCMfdyq4nSXmb0SuZkAiVYZUHPvBZpjlrAlwfuom/v8=
Subject key identifier: 51:1B:9A:81:54:BF:DD:5E:7D:FE:4B:38:82:F3:53:0E:1C:E3:2B:91
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01976CCFF0CDAB551A866A28FF32C098C814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0EC8
Signing time: Sat 14 Jun 2025 05:00:56 +0000
Manifest this update: Sat 14 Jun 2025 05:00:56 +0000
Manifest next update: Sun 15 Jun 2025 05:00:56 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: xjtwCLe9co52YFj/QmxJit3J+snkS1X1lsOFH0maqc8=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:f0:cd:ab:55:1a:86:6a:28:ff:32:c0:98:c8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jun 14 05:00:56 2025 GMT
Not After : Jun 15 05:00:56 2025 GMT
Subject: CN=511b9a8154bfdd5e7dfe4b3882f3530e1ce32b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:57:3d:d3:88:72:1b:a1:d9:78:15:43:b6:
bf:46:47:c9:c2:48:ad:01:0e:32:a5:66:dd:95:f6:
6e:c0:39:a0:ca:26:74:6a:82:83:58:d2:db:12:6b:
60:19:60:48:4e:b0:73:83:1f:38:1d:14:d2:eb:87:
f9:19:5f:fb:74:93:7e:9b:d2:9a:ab:bb:4d:d2:6e:
6d:a2:f4:7d:7a:f7:c8:75:29:98:6e:8b:62:64:76:
f0:b9:c8:26:f6:19:13:eb:f0:b8:30:21:66:a1:09:
7c:be:ab:a4:a8:48:27:e4:51:a3:d5:6f:ed:cb:48:
f1:22:f3:72:32:0c:ed:ab:6e:d5:02:0e:a7:65:da:
33:d8:d6:82:7f:c0:8e:c6:22:18:5f:56:d0:67:ce:
73:bf:1f:ee:09:4f:1b:91:21:4d:c1:43:82:4f:78:
e8:d6:ce:c7:a6:d2:33:1d:e0:f0:82:42:10:e0:e7:
79:9c:f1:bc:d3:1c:4b:69:41:1d:03:85:f4:b4:16:
c9:14:05:cf:fe:96:5b:b1:3e:01:d3:4e:45:78:74:
5a:70:19:f0:83:8c:04:0e:62:65:4f:26:d6:07:8d:
fd:9d:bd:78:17:d5:a5:ce:e8:84:60:f0:c2:24:79:
6c:08:af:22:4a:2b:1e:64:ca:22:fc:2d:4f:1e:62:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:9A:81:54:BF:DD:5E:7D:FE:4B:38:82:F3:53:0E:1C:E3:2B:91
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:13:0f:97:18:09:89:6a:2c:11:6c:4f:95:96:9c:21:cc:
ce:5f:61:ff:05:56:41:f7:11:a8:59:00:dd:95:a0:7d:dc:50:
69:d6:c8:a0:bf:41:13:4e:4e:7e:64:c0:58:51:c5:7e:8a:e2:
8c:02:41:47:2f:be:45:1c:a2:21:e5:77:36:51:53:22:61:3e:
ed:7d:02:14:8e:bd:23:a5:8b:66:40:92:69:22:85:b5:2f:b0:
87:1d:ca:1a:d4:d3:96:ec:9d:15:11:bd:11:e0:92:5c:33:75:
0a:58:ec:ac:10:80:76:7b:08:df:60:13:5c:65:99:8a:be:ba:
7c:8a:bb:42:0a:04:86:c1:53:fd:ec:e2:43:1f:c2:5c:74:01:
81:f7:85:95:1f:ae:68:d6:cf:0c:42:4e:f9:83:7a:86:c5:8c:
ca:59:5f:a4:b0:1e:a9:a8:ef:8a:77:9f:fa:95:b7:bf:34:8f:
e9:b4:2d:ac:e1:98:c5:b1:9b:bb:fa:e5:f9:88:d4:3c:22:43:
3d:23:85:67:d5:af:a4:fc:71:e7:46:d2:73:01:80:6a:2e:4e:
a0:1f:b8:ec:5a:a0:7f:6c:c1:ed:5b:91:f3:05:97:fa:b2:09:
13:86:3f:6c:50:52:ac:9d:ab:22:a8:44:1d:a1:33:69:10:31:
12:86:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:46 2025 by rpki-client