Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: C31P11RwgOYOb7X5pZSfj5M4mrpfoVr8ajQf6jXEtfU=
Subject key identifier: 7C:92:5F:B0:80:9E:8C:B1:43:A2:29:F8:6A:F0:01:EE:DF:12:5B:EE
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 0197703EDA685AFC4A6D9522C79820DC55F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 0BAF
Signing time: Sat 14 Jun 2025 21:00:56 +0000
Manifest this update: Sat 14 Jun 2025 21:00:56 +0000
Manifest next update: Sun 15 Jun 2025 21:00:56 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: FyyeHsQzRjsTPmS7d4E9RC27JeLghgXRlt7RnnJkObQ=)
2: CzS60ntrl-ifakYiPMHnNys_2hg.roa (hash: gJEVLSYuR5fsAEatKrGL8Os1DpygWBOtVxsvnHWW9x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:da:68:5a:fc:4a:6d:95:22:c7:98:20:dc:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Jun 14 21:00:56 2025 GMT
Not After : Jun 15 21:00:56 2025 GMT
Subject: CN=7c925fb0809e8cb143a229f86af001eedf125bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:cc:68:77:f9:32:34:66:86:c6:2f:5e:93:
6c:c8:a9:b7:a4:5e:14:e8:57:a9:96:14:1b:1f:29:
5b:52:69:75:08:da:59:dc:8b:1e:1b:19:f8:a8:32:
98:0f:7b:ce:17:02:b5:6d:ae:0c:0b:ca:c8:c9:8e:
b9:47:50:8b:1d:7d:51:b5:e9:5b:71:7f:fb:14:ff:
5c:c7:9a:2e:e3:94:50:27:81:23:b0:eb:5b:82:b9:
80:db:de:7f:20:0a:5a:38:25:59:f3:d5:8c:17:11:
a4:59:75:b5:c7:74:1a:25:ef:b8:6b:84:23:a5:6a:
f2:95:a5:e4:7b:86:98:f5:8f:e4:54:f4:a8:ad:0f:
d7:79:a7:83:df:f6:ad:73:9d:8c:23:05:66:3e:6b:
cc:5a:cd:90:ca:38:02:52:52:5d:73:63:a9:c1:5f:
e2:43:61:aa:12:9d:53:16:31:69:c7:a4:29:33:f7:
e0:81:84:b2:b2:f7:12:3a:b1:f7:f5:e8:37:b7:7d:
7b:a4:a5:3d:ee:7e:bf:c9:fc:8f:c0:30:2d:4b:2f:
6f:fc:ca:be:71:db:ef:f3:62:f8:a5:c7:13:61:f1:
1d:3a:58:13:3b:9a:04:c6:15:a0:8f:8c:25:cf:bf:
e3:c1:f3:52:a8:79:43:6c:56:c3:9b:8f:26:11:ab:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:5F:B0:80:9E:8C:B1:43:A2:29:F8:6A:F0:01:EE:DF:12:5B:EE
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:3b:a1:2e:1f:4f:e4:50:87:c3:63:d3:0c:29:c0:5b:b9:
16:43:55:a1:b0:16:94:f6:7b:ed:9f:d5:52:49:ac:23:f8:88:
c6:d7:b1:73:8e:ac:51:f0:10:34:e0:9c:0c:07:45:d1:45:25:
ba:f2:08:31:23:cf:ee:07:81:bb:b8:0b:ce:67:5d:54:01:e0:
86:92:f6:7e:68:0c:83:db:91:d6:14:e5:2f:a1:00:3c:b9:75:
de:2f:c8:39:39:35:96:88:42:9e:62:2a:3f:b7:c1:0a:a2:43:
a4:bf:8c:18:71:1e:49:f7:7c:b2:1d:38:58:c1:0c:55:6d:e1:
03:a3:f7:76:d5:48:cc:d1:99:7d:71:3c:9d:27:54:f1:cd:8d:
cf:0a:80:c2:19:05:fa:59:21:f0:3f:ea:25:7e:27:ca:f8:1e:
9d:ee:84:38:f9:29:f7:f8:ac:a0:30:4e:d9:2f:f0:27:38:e5:
4b:2f:86:a1:fc:93:a6:18:d4:5b:25:4f:f4:06:02:9f:f8:f6:
14:da:c1:5e:b0:6e:03:09:8d:21:30:84:a9:3c:d1:e0:eb:e1:
29:ae:8b:79:8f:9e:f4:d9:69:15:43:99:32:66:b3:14:5b:e8:
a5:d4:50:13:ce:49:fc:92:94:7c:a4:13:1f:38:df:71:7d:ba:
fc:e3:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:19:53 2025 by rpki-client