Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: BX+yc2NV8wT42XiI3o5pHwacB0AozdO/8QxYa0O0AWo=
Subject key identifier: 70:EC:CD:21:AB:C2:7E:CC:EE:71:D9:BC:03:EB:B9:F3:15:E2:27:0F
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01958BF27401CBE666C66F9445A598758CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0DCF
Signing time: Wed 12 Mar 2025 20:01:17 +0000
Manifest this update: Wed 12 Mar 2025 20:01:17 +0000
Manifest next update: Thu 13 Mar 2025 20:01:17 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: 9QKH3nwl4QLWPr7JaHkXV8OlvuLk582vIrUxt17g4r4=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:74:01:cb:e6:66:c6:6f:94:45:a5:98:75:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Mar 12 20:01:17 2025 GMT
Not After : Mar 13 20:01:17 2025 GMT
Subject: CN=70eccd21abc27eccee71d9bc03ebb9f315e2270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:85:f8:7a:d9:ca:2d:6b:ef:98:70:45:e3:
83:33:00:01:cc:e7:a0:33:59:d3:32:16:ee:4a:37:
4a:c0:2d:af:4c:91:37:87:ed:b1:61:0e:56:bf:ab:
cc:97:87:36:2d:26:57:68:c7:cf:42:b3:6e:df:c0:
83:90:97:5b:9f:6d:68:6f:1a:50:f4:5d:37:45:f7:
11:4a:35:31:50:65:b6:dc:4e:c6:d6:25:3a:b5:6f:
b1:ee:74:ef:ce:29:c9:86:1c:55:df:08:0d:45:03:
f8:fa:64:45:93:92:0c:a5:d7:cc:a5:24:1d:18:ba:
56:0a:05:a5:d8:34:24:13:c1:97:9c:6f:3b:8d:86:
4d:db:ef:db:54:41:5a:4f:34:17:42:bd:aa:ad:2c:
7b:68:a2:4b:d2:8e:63:0b:fb:c7:32:6a:40:65:d2:
77:95:67:86:79:55:30:97:36:48:34:69:a6:7c:1a:
8f:56:91:fa:21:dc:91:81:cc:c0:e8:5b:86:ca:4f:
23:c0:f8:fb:17:02:92:51:ff:2c:99:a2:10:e3:d8:
ed:66:5f:66:57:97:f5:0d:0b:85:7c:17:e3:1d:25:
cc:9e:73:75:c3:31:55:52:03:8a:f9:8c:9b:ea:21:
2e:4a:a3:63:f5:72:1a:7f:77:c0:0f:77:1f:35:a5:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:CD:21:AB:C2:7E:CC:EE:71:D9:BC:03:EB:B9:F3:15:E2:27:0F
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cc:43:d7:85:23:6c:9e:c9:59:64:e5:da:1e:67:d5:38:36:
38:3f:97:2a:8d:e4:44:ee:b9:d8:4a:4c:e3:79:60:1c:21:97:
3e:46:eb:11:d1:42:ab:ed:fa:59:25:1b:68:0f:bf:c8:6e:b4:
d7:77:dc:67:5a:c1:76:33:51:23:5b:b6:df:f2:c8:19:8b:a8:
48:ec:0e:05:f9:6c:78:83:16:9c:78:34:cc:18:f0:42:66:4f:
27:12:54:84:09:19:a4:a3:fc:f5:67:51:81:6f:14:cd:e3:a5:
bb:71:10:81:c4:d6:74:e5:e1:c0:3e:c7:f7:ce:58:79:79:8e:
71:f2:9c:a2:86:a1:bc:93:ba:83:b1:73:bc:d7:2d:7b:3a:97:
f3:1c:f3:16:93:e6:07:02:03:c1:d9:20:c5:eb:da:be:fc:c8:
c7:8c:66:07:28:3f:1f:4e:58:31:27:4c:7b:85:c0:f1:52:76:
51:e0:d6:2c:2e:44:82:d0:98:ae:de:e9:d1:81:64:84:95:ff:
ec:47:af:f2:3d:61:fb:40:2d:96:80:0c:d2:e8:0c:40:0b:c3:
20:62:6d:77:f7:4d:9c:78:af:38:46:ef:c5:fc:be:d2:12:e4:
28:31:d0:0d:42:19:e3:1b:86:05:91:83:7f:d9:67:03:0b:90:
cd:48:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:55 2025 by rpki-client