Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: c5MgKlGAiBB3iFTf5UjeAfoSeiBI6JcmoQ4TSqT3H/M=
Subject key identifier: BD:7C:03:B4:23:5A:49:FE:4E:9B:49:F0:3A:21:9D:B0:85:14:9E:E3
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01968EB9174923F0C0256ACE80F7CCA8B4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0E55
Signing time: Fri 02 May 2025 02:00:16 +0000
Manifest this update: Fri 02 May 2025 02:00:16 +0000
Manifest next update: Sat 03 May 2025 02:00:16 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: AEn/ID+0M8s3R9VjLc/LXumsca6WGPMdDR+z9UXeTdM=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:17:49:23:f0:c0:25:6a:ce:80:f7:cc:a8:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: May 2 02:00:16 2025 GMT
Not After : May 3 02:00:16 2025 GMT
Subject: CN=bd7c03b4235a49fe4e9b49f03a219db085149ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:b5:a2:9f:d3:b7:9f:d4:65:e0:03:f4:55:
07:07:f1:e8:80:71:db:69:55:bd:7d:07:c2:79:c6:
19:9e:c5:9b:92:f2:ea:51:8f:9c:fc:90:fe:4d:9f:
ed:d7:c4:8a:89:74:e1:d4:1a:22:14:12:a9:c2:95:
46:ad:fe:f3:54:39:d4:76:d8:cc:4a:68:2d:73:7a:
c9:4d:8f:0f:40:fb:cd:5f:b1:c5:63:07:8e:7e:d6:
6a:63:5f:0a:df:a1:9d:57:93:94:98:b0:f2:6f:58:
07:b2:23:b2:9d:89:ca:f9:0a:14:9d:30:c8:46:27:
d0:3b:3c:ab:df:d4:01:21:97:fd:fc:3e:01:2e:45:
bf:31:ac:cc:e9:68:ed:80:6c:d3:ec:a7:77:8f:95:
a6:6c:05:f6:cc:3e:65:ac:15:a4:0a:f1:13:09:e6:
61:9c:dc:07:f9:4d:4b:72:45:e2:95:52:d5:f5:a6:
a5:7d:3b:bc:7b:89:b3:af:99:35:b3:24:bf:d2:49:
f1:60:a6:36:02:24:fa:1c:8d:ab:f5:e4:0f:57:ad:
81:28:a8:44:f9:6e:31:d6:26:31:93:ef:82:df:67:
b2:f6:af:10:b8:ab:85:8c:e5:cd:93:1a:d7:c2:a6:
58:3e:5a:89:50:5c:3e:a0:08:02:37:64:7f:c5:bb:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:03:B4:23:5A:49:FE:4E:9B:49:F0:3A:21:9D:B0:85:14:9E:E3
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ca:db:00:85:f6:d3:2f:b8:c3:be:c5:0c:db:10:05:85:3b:
d2:5f:1c:c1:ca:49:42:21:0e:6e:1e:c3:37:8d:f0:17:d2:28:
a8:5b:90:a2:e7:7d:05:3d:bb:23:89:3a:3d:c2:af:8c:0c:af:
cc:a3:10:ee:97:f1:13:18:c8:99:dc:6f:a3:dc:a6:19:5f:1b:
6c:30:99:39:7c:7a:f5:0b:d7:bb:ae:29:b7:e4:15:b9:04:d7:
82:f6:ed:de:a4:62:e8:19:8d:79:06:8d:02:22:f3:cc:db:40:
c1:e2:74:58:06:52:ce:8c:3c:d2:71:6a:ca:97:3e:c4:04:6d:
10:be:34:7a:2e:2d:e0:c9:90:6b:59:b9:f8:a3:56:3b:f0:1c:
21:ac:81:61:21:c7:c3:f6:52:00:52:0b:22:0a:c5:ac:5a:28:
c3:bd:87:c6:f3:b0:11:1f:3b:3e:b2:15:7f:c8:ca:47:b6:19:
ca:93:98:23:75:be:bf:52:fa:d9:e6:1a:15:de:1e:8c:03:3b:
6b:6e:eb:34:b9:01:32:f7:8f:75:62:24:4e:79:8e:c3:05:06:
73:db:81:12:6b:80:73:0c:fe:d0:14:8b:12:6d:ad:1b:cd:b0:
db:f8:3e:0e:d2:96:bf:f6:32:0c:d9:70:6c:50:17:80:c5:5d:
03:61:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:30:24 2025 by rpki-client