Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: ylEgXoE7JzVAC7paBysIXG0I1tbDd4PoYqfdtcCNaGM=
Subject key identifier: F2:BD:B9:90:1C:50:89:27:FB:41:52:85:32:B7:56:61:1C:99:EB:5E
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01968CCB33011B162E932DBD5C54B3E24F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0E54
Signing time: Thu 01 May 2025 17:00:49 +0000
Manifest this update: Thu 01 May 2025 17:00:49 +0000
Manifest next update: Fri 02 May 2025 17:00:49 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: BZdxHN47dZGgeKVR9K+anEmqo8sTzq+oS5Mgdn+BZ/8=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:cb:33:01:1b:16:2e:93:2d:bd:5c:54:b3:e2:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: May 1 17:00:49 2025 GMT
Not After : May 2 17:00:49 2025 GMT
Subject: CN=f2bdb9901c508927fb41528532b756611c99eb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:c5:92:96:a3:2a:83:97:73:ab:30:22:c0:
6a:f4:8e:8d:2a:7e:b7:cf:b0:f3:6b:7f:73:3b:de:
f7:8f:91:76:61:e2:63:21:62:fa:72:e9:bd:a4:49:
29:ac:97:42:45:b5:03:ee:d8:2a:16:79:3d:3b:d2:
53:5e:53:65:5c:fc:ff:e3:76:82:7e:90:6e:bf:97:
1d:a2:e5:18:95:e0:f2:d0:66:09:8f:8a:70:6f:53:
28:f7:09:ff:e2:25:0f:26:4b:cb:c7:5b:d3:84:f0:
09:ea:72:d9:7f:4c:35:56:45:a6:65:d7:12:6d:8e:
2a:ac:3f:6c:4b:5b:98:24:6f:1b:f6:68:99:7d:ac:
c3:2a:31:eb:e1:9a:1d:e3:62:cb:ae:c3:11:c8:5e:
e6:5c:8c:4b:d1:1e:a4:44:d6:7c:c3:29:32:a0:80:
28:3d:b5:c2:18:51:ab:7f:48:61:7a:b1:cf:60:20:
50:3d:d1:c5:0a:15:b9:63:5d:76:d1:9e:70:35:1d:
05:3a:a0:10:f3:50:2d:fd:5f:7d:5c:e5:fc:37:75:
92:9a:ec:14:00:ea:1f:72:d4:a0:96:2d:1d:1a:76:
91:7a:37:7f:16:82:30:22:6a:1c:bb:03:71:88:93:
d1:9b:25:b3:92:eb:d5:5a:ac:e6:b0:6e:73:48:69:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:B9:90:1C:50:89:27:FB:41:52:85:32:B7:56:61:1C:99:EB:5E
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:82:47:6f:d7:f3:d8:34:48:f4:e7:d7:e4:a8:45:87:28:
5f:1e:65:e1:bb:3a:71:09:de:f0:65:48:c8:c2:3d:27:6e:a0:
ea:0d:49:60:6d:15:2b:d7:a5:e7:99:f7:4c:51:b1:16:a3:32:
64:44:55:f6:00:1b:3f:cc:1e:bc:89:16:e0:0a:f5:2e:9b:dc:
f5:2c:a0:f2:48:0e:44:60:08:df:cb:90:e8:5f:5c:f3:38:5d:
d2:19:96:06:03:4f:31:30:3f:8d:44:61:0d:e8:49:18:f1:2c:
00:70:8f:2b:c1:e7:aa:18:5a:3a:16:b0:8c:94:25:ba:01:d1:
37:21:9c:fa:d7:9b:3b:ad:16:64:89:7c:f6:8f:a4:8b:6c:72:
42:d6:c6:16:46:bf:8f:5b:06:a2:8a:c5:d0:78:d6:ee:59:55:
80:e9:fa:ae:2d:6d:29:80:f5:3e:b4:b6:97:5d:45:b8:a1:d2:
4d:fb:ed:d9:1a:4e:69:c5:74:11:86:3a:68:cb:6d:0c:4e:cd:
aa:fd:84:af:29:db:c9:3e:bb:9c:47:da:b3:c4:7f:90:2e:cf:
09:2c:90:b9:a5:fb:b4:23:38:fb:ff:3b:c1:01:67:2d:74:63:
b5:af:aa:17:23:68:d3:b9:54:a2:52:fd:60:06:66:f2:a5:60:
e5:a5:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:02:49 2025 by rpki-client