Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: LxSZUJq5PIvzZzJ1ofqZguKAHTwyfyQzndVKWSgLMog=
Subject key identifier: 98:74:54:73:67:9F:C7:66:B4:37:4B:B2:4E:A9:0B:F1:AE:E1:48:8F
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019655DCE9F0B6C6AB21BFC3741DC557D722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0BDF
Signing time: Mon 21 Apr 2025 01:01:03 +0000
Manifest this update: Mon 21 Apr 2025 01:01:03 +0000
Manifest next update: Tue 22 Apr 2025 01:01:03 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: RDuHKFCXEoS7v2VVCT0sN9kNHq6PeYjQBOizoCRYZwg=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:e9:f0:b6:c6:ab:21:bf:c3:74:1d:c5:57:d7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Apr 21 01:01:03 2025 GMT
Not After : Apr 22 01:01:03 2025 GMT
Subject: CN=98745473679fc766b4374bb24ea90bf1aee1488f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:fa:9a:ae:b8:6d:cf:d5:2b:c1:bd:4d:a5:
98:c4:fc:c5:fb:d9:07:5c:a4:7c:88:ac:db:7f:c7:
a7:af:ef:bb:c3:1c:c5:e3:5a:c9:c5:39:f0:0f:b5:
6e:0f:70:1d:13:e6:d1:83:2b:e1:f5:e2:63:39:97:
07:00:b2:3d:a4:73:c5:bc:aa:1e:38:9d:fa:3e:34:
3e:04:18:1e:01:89:7b:f5:a3:a5:bf:40:b0:9e:1b:
b1:dc:68:0e:c8:30:cf:42:fb:c8:65:a1:19:79:3f:
49:25:47:ad:db:6c:45:e6:14:fc:ca:6c:c3:f6:b3:
48:2a:f2:ef:86:41:67:2f:e1:ae:fa:6b:fc:cd:39:
ba:92:9c:2c:13:e6:0b:cd:8e:39:08:3a:5e:07:eb:
ea:7c:c9:f8:3a:e3:30:52:71:00:a3:e5:ee:f3:99:
69:1b:f6:c1:ca:cd:f7:5e:d3:76:77:a3:e1:d8:e4:
61:6e:b9:4a:b9:40:d5:e2:4a:ae:ed:5f:f5:b3:a7:
3d:35:19:b1:12:27:29:9f:f5:5a:fd:06:bf:cb:e6:
d0:7a:26:24:a8:2b:3c:30:f3:bd:e6:dd:44:db:1c:
d1:15:cf:57:07:c3:78:bf:33:35:e5:cf:74:f1:2e:
58:36:af:72:ca:bb:7b:82:b1:15:55:61:48:94:98:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:74:54:73:67:9F:C7:66:B4:37:4B:B2:4E:A9:0B:F1:AE:E1:48:8F
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ac:70:83:b5:35:56:86:36:9e:24:74:a2:6a:f9:00:49:80:
3e:2c:d5:e3:55:48:6a:68:c0:cd:02:9b:7d:6b:be:57:34:68:
e6:04:63:e2:6d:c2:24:e4:a3:4e:27:5f:03:e8:61:48:df:91:
6b:ad:20:26:5d:b8:e5:75:44:a9:6d:58:8b:0a:35:6a:c3:56:
0b:e3:5a:f6:5d:40:f5:c2:c1:df:f7:6c:aa:fd:cd:e3:95:c9:
1f:ca:fd:9f:76:e1:63:5b:72:28:5d:61:28:d8:7d:0c:50:b9:
65:cc:cf:51:15:a1:1f:8a:eb:ca:fa:db:c5:9f:b4:f8:07:7a:
27:4e:d9:79:c2:84:aa:62:cc:c3:59:ac:b5:7e:f8:60:61:96:
e7:32:3f:0a:25:23:96:a4:02:c5:4a:10:87:ed:31:5c:57:61:
07:52:fe:b5:2a:c9:5e:d6:ff:34:c7:73:3a:6d:b7:c3:4c:53:
b3:0f:30:e8:44:0e:56:12:29:60:30:1a:b9:49:f3:a5:00:4f:
0c:50:51:86:50:87:a1:57:6f:09:95:32:fd:de:2a:84:33:05:
52:76:17:06:0d:63:2c:55:59:1e:bc:e4:c9:a2:21:20:66:f6:
a4:3b:a1:ee:81:ac:41:51:60:cc:fe:e0:4e:a8:2d:55:fd:44:
85:c3:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:04 2025 by rpki-client