Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: eor/QKa3CNknrP7T4CqNRQV9QXJ4WKNDgogOfNYgZyo=
Subject key identifier: 81:1F:8F:8A:9F:AC:6D:E1:84:A1:BE:9F:3E:D3:4E:C6:EF:F2:C8:A7
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01975B6E00F4A918843A18540FF8D613969C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0EBF
Signing time: Tue 10 Jun 2025 20:00:25 +0000
Manifest this update: Tue 10 Jun 2025 20:00:25 +0000
Manifest next update: Wed 11 Jun 2025 20:00:25 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: 4jNib7HL/4W0yL5h9TIdbJWHEBd+3A73f3VxpTkcny8=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:6e:00:f4:a9:18:84:3a:18:54:0f:f8:d6:13:96:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jun 10 20:00:25 2025 GMT
Not After : Jun 11 20:00:25 2025 GMT
Subject: CN=811f8f8a9fac6de184a1be9f3ed34ec6eff2c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:27:38:ec:90:63:da:8b:84:9c:96:d1:76:
7d:4a:26:d0:33:b1:22:6e:2d:c9:12:32:73:76:ac:
fc:64:82:9a:b8:38:19:9d:6b:56:ad:bd:36:84:c8:
a8:c1:24:f4:95:ac:1a:56:3c:45:2f:c0:d9:f1:7a:
a1:54:76:a6:a0:6b:42:d4:ea:c9:49:1a:86:09:ca:
7c:8a:51:b5:9f:6d:5f:51:dc:0a:33:24:2d:70:02:
90:7e:49:6e:4f:35:fe:45:50:91:ef:65:9b:b4:09:
a9:00:b8:7e:c5:0a:06:c6:2a:c5:1f:dd:45:45:f1:
c1:00:6e:b3:b3:22:f6:42:58:32:69:31:b6:f7:2c:
45:a3:ea:e7:c2:a8:f0:ca:69:01:cb:1d:05:d6:bf:
f2:1a:48:37:2e:73:5f:ba:2f:b5:0a:62:9a:22:46:
91:0a:01:ee:cd:38:7d:16:c4:40:24:98:3d:a7:b6:
86:bf:30:93:bc:2d:fd:91:3e:69:74:3f:2d:6f:82:
10:55:a8:9a:12:42:d0:ba:89:d1:ac:c5:ec:1e:3f:
00:6c:3b:91:03:1e:48:7b:8e:cc:29:bc:d9:93:1e:
aa:c4:c7:c4:de:2f:87:74:fa:93:b5:a6:5f:10:95:
37:58:7d:c7:da:0d:83:7c:d2:43:80:f7:e6:9a:64:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:8F:8A:9F:AC:6D:E1:84:A1:BE:9F:3E:D3:4E:C6:EF:F2:C8:A7
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d6:2e:c0:b9:56:43:ea:04:1c:3a:f1:ce:1e:3a:6e:aa:c3:
39:13:f3:75:41:5e:12:e5:60:51:b3:6e:fb:96:a0:95:dd:ea:
77:8d:e7:7c:8f:5e:68:7c:96:42:23:b2:e8:a2:a5:35:8e:fd:
a6:e1:6e:61:29:e4:28:39:90:0e:99:6f:30:8e:3e:88:46:e1:
2d:65:c8:cd:b5:16:28:3a:df:fc:11:96:2b:c6:c4:1d:91:90:
50:84:bf:ef:f7:e0:b6:79:45:04:87:9c:b9:19:75:35:f0:f7:
b1:35:5e:4e:3c:62:86:ed:db:a9:b8:02:7e:89:88:b8:84:82:
ce:12:df:f4:b2:0e:a7:9d:43:2e:ac:79:bc:06:10:c5:40:2d:
d2:46:29:76:f0:99:18:cd:3d:0a:23:34:15:0a:59:65:2b:33:
3e:26:5e:9d:dc:e5:98:50:bf:ab:b9:ea:4c:b1:27:ad:54:f6:
8a:4a:ea:c3:e0:c2:30:8d:76:78:fa:f3:34:39:d6:01:29:e3:
90:46:38:a4:48:70:0c:63:b2:1f:ee:5b:44:28:5f:3a:00:8b:
44:28:d7:fe:8a:bf:57:4c:67:92:19:6d:d0:ee:04:b1:70:8d:
4d:3c:3d:1c:13:ad:f1:26:8b:44:65:30:03:d8:99:d2:d2:e2:
78:83:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:37:15 2025 by rpki-client