Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File: GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier: ZSwMBycDlDoLimatpuBfQ/gPccsii2E90prqKcgeNQw=
Subject key identifier: 9B:1A:6E:B9:FE:03:E0:11:B3:36:E8:66:AC:32:7E:71:2E:3B:A2:E7
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer: /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial: 0195116C34B09B880DA06746DD9FFFF2DBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number: 0E51
Signing time: Mon 17 Feb 2025 01:00:58 +0000
Manifest this update: Mon 17 Feb 2025 01:00:58 +0000
Manifest next update: Tue 18 Feb 2025 01:00:58 +0000
Files and hashes: 1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: PRirDsBKbfMlj3us0NedbabuARi+3/LfX26otVwdbyU=)
2: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (hash: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:34:b0:9b:88:0d:a0:67:46:dd:9f:ff:f2:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Validity
Not Before: Feb 17 01:00:58 2025 GMT
Not After : Feb 18 01:00:58 2025 GMT
Subject: CN=9b1a6eb9fe03e011b336e866ac327e712e3ba2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:ee:a6:94:c2:35:67:be:ee:dd:b8:82:9d:
71:bf:df:74:2c:19:8e:f9:da:6f:8c:cb:6a:76:06:
1a:6a:a8:1d:3a:50:3e:7d:ea:66:7c:c4:e7:47:43:
bb:85:39:0f:24:a4:24:ee:7a:77:0f:08:d9:57:4e:
fd:47:db:82:c0:bc:04:43:30:07:f0:28:d2:6b:dc:
26:7b:3b:47:6f:21:4b:47:66:a1:4e:f2:07:6b:a9:
6d:28:ac:f0:eb:4f:5d:87:32:70:3c:17:f4:4c:3e:
31:dc:ef:d7:f0:bd:4e:e0:bc:25:50:dd:98:09:98:
86:ea:b4:25:95:a0:46:53:9a:e8:8b:f6:aa:7e:46:
d6:eb:70:dd:b7:35:23:71:d9:5e:16:26:4e:b3:0b:
9d:ad:a3:d7:e2:50:43:c8:cd:5e:23:9c:77:0d:b6:
b4:5e:d7:ce:bd:4f:fa:75:ca:c4:53:b4:88:9e:38:
e7:ea:20:e9:6b:51:d5:cf:26:a7:3c:04:71:46:81:
f1:1b:cd:52:32:ad:37:09:4d:35:70:69:8e:62:ce:
6b:44:3d:be:69:2e:ab:e7:18:d7:e2:48:80:8d:13:
cd:58:55:c2:26:9c:12:8f:e7:ce:55:0d:bf:20:98:
1a:13:d4:a0:91:93:84:df:9e:a8:65:c3:da:a3:58:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:6E:B9:FE:03:E0:11:B3:36:E8:66:AC:32:7E:71:2E:3B:A2:E7
X509v3 Authority Key Identifier:
keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:92:1e:44:c7:1c:25:9e:54:b4:78:58:f4:df:87:86:6c:
cc:e3:28:63:5c:b6:db:c6:f7:90:a1:57:e0:e2:9a:f1:72:fe:
c6:78:40:bd:37:bf:0b:55:c6:62:2b:fa:0f:99:8d:72:d1:20:
46:56:e9:3e:a6:31:eb:0c:f5:ba:dc:76:7b:49:70:47:a9:bd:
02:34:9d:47:d9:59:c2:b2:a2:d7:f4:5d:64:df:25:81:24:a2:
60:7a:06:02:1a:fd:d6:a3:7a:80:da:71:0e:6f:ee:d8:89:af:
cb:3c:8e:52:8f:fb:05:1d:5f:13:ec:86:29:01:84:f1:8e:3f:
ae:6e:45:4c:42:70:e7:18:45:f6:19:98:22:b1:28:44:90:ae:
47:f7:e8:0f:0d:7e:7e:3d:bf:8c:07:20:ad:cb:06:73:30:37:
74:a9:b3:86:6f:2f:3a:fe:68:e0:8c:21:64:42:22:05:6c:a5:
29:0f:dc:ea:38:8e:09:26:78:58:e0:89:7a:72:6d:1b:2a:a6:
6a:03:c0:e2:37:17:35:55:92:16:b7:77:43:be:45:64:80:28:
3a:50:3f:d1:64:36:ee:91:a3:fb:6b:ef:18:28:18:f7:6c:66:
b9:6f:34:52:cb:c3:f0:ca:42:88:b6:56:19:12:9d:e5:4a:71:
87:ce:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:03 2025 by rpki-client