Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: a8oduTDP2TwDSZM75SBABqjJifjMSFSI/AIy1CcD9CU=
Subject key identifier: 12:C0:E1:1D:D9:D1:32:58:20:9D:14:D1:93:6C:AA:65:60:71:A5:EA
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 01963F8BC2A5010A4F48A9F5BE313E301CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 03B9
Signing time: Wed 16 Apr 2025 17:00:45 +0000
Manifest this update: Wed 16 Apr 2025 17:00:45 +0000
Manifest next update: Thu 17 Apr 2025 17:00:45 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: mjpbtFA0NdfF4infbsYOrVh2IPfPGswfu3PR0Frtv2g=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c2:a5:01:0a:4f:48:a9:f5:be:31:3e:30:1c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Apr 16 17:00:45 2025 GMT
Not After : Apr 17 17:00:45 2025 GMT
Subject: CN=12c0e11dd9d13258209d14d1936caa656071a5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:43:24:fc:0f:d5:9a:1f:61:30:fb:fa:23:
61:e0:0c:af:00:0d:c6:1d:cf:dc:f0:2c:af:00:6d:
0e:93:3c:05:07:96:00:68:94:b7:48:fd:a3:93:16:
0c:9f:23:1b:7c:d5:d4:e9:37:ec:bd:e1:9e:53:89:
54:e7:50:16:d5:6e:a8:29:53:b1:5f:29:80:d6:aa:
6a:9d:fe:6b:a3:a9:4c:f8:8c:c2:c2:96:c4:2f:67:
c5:1c:f3:94:f4:51:42:72:fb:c9:70:2a:47:c7:d5:
de:ee:7b:23:9f:3c:ac:66:6b:3c:4d:68:be:ca:a8:
86:7a:01:f1:e4:e7:01:21:36:9a:73:e8:c7:8a:33:
50:0b:eb:f4:43:b4:df:ec:09:7f:0c:0d:9b:ac:f1:
e7:ab:49:da:05:1e:19:3d:c4:15:49:aa:80:d0:f2:
89:6a:c3:00:ec:4c:ed:74:b7:34:8a:9e:75:36:53:
4c:06:fd:59:61:c2:30:8e:57:56:13:ea:50:a7:63:
e5:58:76:78:94:ed:0a:17:15:f6:81:6a:4a:ed:51:
87:e9:f7:0e:5b:21:b7:7e:49:2d:f7:c7:2b:ef:d8:
a3:e1:cb:08:fc:55:c0:3d:e1:1e:30:bb:91:56:3d:
1e:d3:cf:3d:9b:3a:33:97:96:64:4a:15:31:8e:6d:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:E1:1D:D9:D1:32:58:20:9D:14:D1:93:6C:AA:65:60:71:A5:EA
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:73:a8:01:ec:5c:66:0d:40:cc:14:16:79:44:10:06:a0:
1f:1d:98:96:01:a3:86:c6:50:fd:b1:a7:d9:ef:b2:76:36:8e:
f1:d6:5e:70:47:0f:98:f4:e7:5c:af:f4:0e:03:b9:c9:62:da:
6b:39:f7:0e:25:30:9c:cd:61:9b:22:57:84:f5:78:ee:54:ea:
b2:68:6f:86:35:4b:30:ec:b7:79:2d:da:d6:e3:f8:98:19:ae:
bd:84:35:eb:c3:5a:ef:ab:63:07:51:24:09:ec:06:00:f1:c8:
5e:4c:6e:df:cc:3c:0d:6f:3b:58:2a:11:04:33:f1:93:35:8a:
fc:e1:c1:4a:e3:fd:1c:19:94:74:30:86:f7:be:cd:e9:54:9a:
8a:fb:05:24:64:d6:cc:8e:1d:be:26:d0:4a:b6:a2:c7:54:bf:
61:39:a8:57:be:8a:2d:96:88:ad:03:3d:9c:bb:bd:37:33:8c:
e1:53:d4:45:12:5c:ba:30:65:38:89:ca:b5:87:de:d4:38:63:
49:de:5a:4c:99:81:87:49:74:8c:ab:78:93:df:ac:ab:76:61:
1c:d9:f8:f8:d3:2b:75:f3:19:9f:3e:4d:b2:93:8f:61:a8:8f:
29:ea:10:3f:6c:60:45:48:b8:5a:34:fc:5b:62:41:b4:54:d5:
7b:a1:26:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:01:25 2025 by rpki-client