Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: +8JqlwGn1oTa/kApGT8hGWyo65AG865AW6cW+VLVvLc=
Subject key identifier: 66:17:AD:37:B0:C9:12:71:B0:1C:54:87:45:96:3F:32:49:0C:BD:05
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 0196790D217754A7434219322ADD21014E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 0B2F
Signing time: Sun 27 Apr 2025 21:00:25 +0000
Manifest this update: Sun 27 Apr 2025 21:00:25 +0000
Manifest next update: Mon 28 Apr 2025 21:00:25 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: ORn99/vC49MJbyD+k5NCAV/OESHFhnuRQIsEG+4rQqM=)
2: CzS60ntrl-ifakYiPMHnNys_2hg.roa (hash: gJEVLSYuR5fsAEatKrGL8Os1DpygWBOtVxsvnHWW9x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:21:77:54:a7:43:42:19:32:2a:dd:21:01:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Apr 27 21:00:25 2025 GMT
Not After : Apr 28 21:00:25 2025 GMT
Subject: CN=6617ad37b0c91271b01c548745963f32490cbd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:15:24:b9:0a:9c:02:6a:65:e8:69:f5:2b:
93:ef:07:2b:ea:b3:3e:11:0d:b1:76:a1:f4:4c:01:
ea:1c:40:a3:99:11:4f:9e:c7:a2:59:be:31:b4:67:
f3:fe:9c:6c:b9:8b:5c:f1:57:10:99:7c:37:7c:ba:
15:f7:53:3f:70:1b:83:3e:1a:93:bf:c8:96:02:3f:
b3:c6:0b:66:a3:4c:fb:fc:45:ef:4c:96:e2:f9:f5:
d9:b3:37:f2:48:a1:1f:8e:9f:ed:6c:57:fb:4a:f3:
d2:c5:79:11:8c:3e:40:38:70:3d:ac:06:d9:9c:b4:
b5:f4:6e:87:ff:c0:8e:cb:ad:5c:7f:b6:ee:bc:84:
66:05:5e:3f:2e:ab:3e:f6:ca:69:aa:63:b9:de:16:
7b:8e:c5:0e:88:79:26:20:2f:56:50:40:81:57:42:
d2:99:f7:b1:26:85:ee:18:90:74:1e:67:ee:60:62:
5c:50:e0:ca:6a:85:86:fa:ed:0a:fd:44:93:57:94:
b7:5d:b3:8c:ba:b6:42:a5:f8:6a:8e:58:ed:7e:9e:
58:3e:ad:d3:da:b8:2e:6d:f5:70:7e:93:ed:93:17:
f0:5c:c5:1d:56:8d:ce:e6:7f:01:a7:03:a9:66:70:
75:3e:54:7c:f4:78:55:ed:38:ec:f1:f8:4e:67:91:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:AD:37:B0:C9:12:71:B0:1C:54:87:45:96:3F:32:49:0C:BD:05
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:df:0c:5d:8e:65:90:84:ff:85:ab:d1:cf:26:97:07:e7:54:
3f:71:7b:7b:d6:71:99:21:ce:ef:fc:50:ca:39:51:aa:f1:5d:
0a:3a:c4:30:da:aa:49:be:10:be:0e:ca:0d:a8:39:f4:e1:3e:
b9:47:8c:24:1f:da:e2:27:2a:78:97:53:7d:a2:68:17:5f:f3:
3e:c2:ac:57:53:23:13:cc:d0:fd:8a:e0:8c:01:07:d5:17:ce:
5a:9b:b1:15:43:64:36:b6:50:7c:ec:75:f9:66:03:09:a3:ec:
b8:45:d2:99:f3:4f:a7:58:4d:70:0a:e8:e4:d5:d0:d1:d7:72:
4f:59:9c:f7:ca:64:53:21:2d:8a:22:54:0b:cf:9a:d2:86:85:
d5:a7:62:68:00:bb:e8:1d:cc:37:d6:ec:04:b1:c1:66:6a:19:
1a:53:e7:01:bc:d0:d7:4b:00:ca:d1:8f:86:f7:61:11:a0:5e:
1c:a3:71:b6:90:7d:5d:0f:48:14:a4:15:96:a3:4d:ab:a9:9c:
8b:b6:8b:63:9e:06:aa:0d:d1:ed:2f:3e:20:9a:eb:97:09:d2:
24:31:bb:44:00:c2:16:d9:c2:b9:aa:99:72:60:0a:ae:f7:5a:
90:6b:06:47:11:55:b1:72:f6:37:20:69:af:4d:f0:de:ce:22:
45:c5:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:23 2025 by rpki-client