Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier: h8AXaA0Kjpz9lppX8kRU0vxlQMUJ38c5sP0ee8LoIig=
Subject key identifier: 0F:19:C1:7C:CD:D9:63:01:F1:25:18:03:C6:76:A8:41:7C:95:DE:81
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 019686C8E9077537C3A585CBCCDF154C7594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number: 0DEF
Signing time: Wed 30 Apr 2025 13:00:35 +0000
Manifest this update: Wed 30 Apr 2025 13:00:35 +0000
Manifest next update: Thu 01 May 2025 13:00:35 +0000
Files and hashes: 1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: /Yy/p3ajJckkM73CvUmLmgZUrcXBTyEJ+2U8zARfofA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:e9:07:75:37:c3:a5:85:cb:cc:df:15:4c:75:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Apr 30 13:00:35 2025 GMT
Not After : May 1 13:00:35 2025 GMT
Subject: CN=0f19c17ccdd96301f1251803c676a8417c95de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:9f:ce:c5:01:47:e5:28:c8:2a:b4:fc:7d:
74:d2:fe:93:e2:fc:c0:57:fe:a6:c7:ed:5a:54:64:
d5:33:a6:db:92:28:41:5c:9b:ec:3c:3f:53:df:d5:
4a:a3:ea:2c:7e:a9:ef:33:58:98:0e:b5:b2:ea:55:
73:b1:ad:67:03:41:05:68:68:f6:47:84:44:45:e3:
45:09:a0:d5:3a:aa:e4:f0:fc:8b:84:4f:45:77:38:
78:98:c0:b0:9f:d4:8a:bd:ea:2d:b0:24:88:33:2a:
de:46:9a:ad:2f:31:00:33:09:a0:13:9e:54:9f:ef:
ce:99:72:e1:1b:4c:7a:05:c4:57:74:2c:2a:3f:bb:
58:97:b8:ff:cf:73:87:8f:ba:5f:92:0b:29:fd:18:
a8:1f:a5:f9:e5:ac:da:b2:05:d5:95:0d:d2:73:6d:
e9:3f:2e:fc:58:db:a9:b0:4a:82:f6:9f:f3:30:c9:
b8:31:54:8a:34:64:c4:80:eb:7d:a9:3b:6a:0f:8a:
b2:64:1f:58:52:36:9c:07:18:7c:e4:8d:e1:75:6a:
21:66:ec:80:41:74:4e:cb:14:5d:4d:48:7e:d1:69:
9c:30:30:91:26:65:2d:ef:fe:21:14:04:e7:f1:67:
ac:89:0c:36:b0:88:59:40:50:43:83:82:0e:77:10:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:C1:7C:CD:D9:63:01:F1:25:18:03:C6:76:A8:41:7C:95:DE:81
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f4:e9:51:83:b0:db:ed:c3:88:a2:3a:cc:27:01:e0:72:d9:
4f:a7:6f:d1:e0:11:4d:8c:d8:6b:b9:5e:e5:ba:fa:a5:6f:eb:
39:72:39:20:24:7a:61:72:b0:ec:5e:33:83:52:d9:12:16:81:
c3:6b:b9:c4:5c:fc:86:08:2d:e4:fd:b4:70:53:3a:96:49:39:
5d:41:c3:12:d5:0e:e3:b9:bb:84:0a:30:cb:b7:a9:9a:ee:76:
32:37:c2:46:8f:9d:77:3d:1b:83:92:f8:27:87:53:2f:7a:98:
3e:8e:1e:43:b2:9b:35:da:2e:38:e5:d7:ac:8a:6f:81:4a:20:
2b:43:6e:27:05:71:9f:38:0e:b1:ef:ed:63:3b:ad:ac:08:b7:
54:6e:7a:ca:73:78:b4:4c:86:d4:f4:1f:29:ed:07:3a:ae:9a:
9b:b1:56:24:3f:9e:aa:cd:68:53:b3:bd:6d:a4:81:ee:44:c0:
6d:9a:d5:b3:e8:73:4f:d8:1c:a5:43:a5:b8:d4:a7:6d:6a:1c:
f5:c6:e9:cd:f5:9e:a4:8c:e8:ec:da:95:43:f8:58:c9:2c:09:
2b:5c:d9:5f:22:c6:dd:f4:e2:b0:08:e3:ef:dd:1a:71:a5:c0:
61:aa:3c:64:21:14:aa:38:93:c8:ab:f5:31:75:04:0e:00:e4:
1d:91:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:54 2025 by rpki-client