Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: +t8ow568Pufn/Fjr/jV06hKcXVRkCmneGC6P5DKp9DY=
Subject key identifier: 4A:B7:A6:1F:E8:E3:43:76:BB:0E:55:21:8D:7F:0D:A4:3C:AA:B6:30
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 01968A0107B925946398AC129146B42ED951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 03CF
Signing time: Thu 01 May 2025 04:00:45 +0000
Manifest this update: Thu 01 May 2025 04:00:45 +0000
Manifest next update: Fri 02 May 2025 04:00:45 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: UeZuJjJ9QOaNjM6G04RfHpqOCUUf9wNgbnaq2Apdnwc=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:01:07:b9:25:94:63:98:ac:12:91:46:b4:2e:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: May 1 04:00:45 2025 GMT
Not After : May 2 04:00:45 2025 GMT
Subject: CN=4ab7a61fe8e34376bb0e55218d7f0da43caab630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:8f:51:fa:5f:11:7d:b4:d0:cd:88:f0:53:
02:3a:ef:e6:cb:ad:d9:5f:c0:4a:2d:e4:8a:06:ad:
9e:45:a8:ec:bd:d3:11:44:4b:9c:0f:89:8b:c4:de:
a5:d4:39:68:6c:48:a3:30:ae:38:de:f5:c6:1f:d5:
bb:d9:72:cb:d0:cd:d6:b8:03:a5:12:e9:15:bf:46:
7f:17:b2:0d:e5:b6:8d:81:ac:e9:38:70:16:32:cc:
cc:f9:8b:2a:11:8a:72:c7:d2:3b:09:4b:0f:36:4d:
41:e3:4c:7a:af:68:ab:4e:cc:ee:ec:6d:5e:f2:2b:
e8:fa:9d:75:69:ee:ec:cd:9a:fb:91:90:f7:bd:8d:
3e:2d:aa:ac:0d:89:b7:68:75:6f:68:f5:fb:b5:ad:
b8:20:0a:0e:4f:f2:99:d0:01:0e:0d:07:cc:83:8c:
f9:a9:45:9d:9d:cc:71:9e:c2:94:ff:5a:b4:0f:e1:
09:d1:75:31:64:68:d1:1b:f1:df:53:f3:a1:ab:03:
b2:f6:61:9f:06:eb:2d:a0:cd:31:f6:bf:45:ca:0b:
fa:12:40:fe:a4:d7:54:c0:a2:8d:bb:e6:24:93:9c:
f9:b9:77:e5:eb:d3:3b:2a:9a:29:b8:92:19:ee:3b:
fc:82:45:88:91:7e:52:9d:4b:fb:59:10:dd:27:2d:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:A6:1F:E8:E3:43:76:BB:0E:55:21:8D:7F:0D:A4:3C:AA:B6:30
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:86:46:34:8d:65:7b:a5:be:88:90:29:a9:e1:c1:d9:30:
7e:c2:02:a5:61:ff:5c:2a:52:7c:77:6c:10:ec:9b:9a:14:e6:
22:c3:a6:49:73:20:1c:c0:cb:b8:f5:0d:90:24:dc:33:aa:58:
53:c2:1a:e3:96:3b:cd:f3:58:0f:9b:e4:d1:c2:4e:4c:5a:9e:
7b:1e:76:c8:bc:a9:32:0a:d8:06:7c:1a:db:43:8a:93:62:a9:
bd:80:77:23:3d:38:9c:0b:93:6e:97:c6:82:98:9f:60:73:15:
bc:4f:cc:f6:21:c0:bd:59:68:df:72:49:63:87:88:a8:50:44:
ad:44:17:73:d0:d6:13:d9:66:6c:e6:50:e4:a7:7e:43:a6:d2:
4c:37:dd:98:79:60:ae:77:d4:ce:6b:bf:f6:0a:a9:5d:62:19:
3b:6b:f8:4e:05:15:04:51:23:0b:d9:22:63:65:52:13:0c:95:
77:f9:41:15:a2:c8:f0:d5:94:db:a9:89:aa:2b:a4:45:ea:b5:
0c:1d:2f:37:26:2b:8b:75:ce:1c:d7:db:e7:97:c8:d5:df:bb:
ec:58:63:6a:7b:e0:01:64:ab:1d:7f:ae:d4:4c:0b:29:9a:2f:
59:d7:68:7c:a7:43:d7:94:34:a6:78:5d:7a:ee:f1:62:8a:a7:
aa:b5:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:55 2025 by rpki-client