Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier: 3GXdmXh6YC+FgA2Mc2I8+0fGoQq0oWRnTLFFw0sDhOM=
Subject key identifier: 94:01:66:DF:E1:B7:07:D2:C1:02:EB:82:E8:7C:B9:46:85:E3:B0:FE
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial: 01967DFC6539AB38C04D8A31DD9C60ADA7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 20:00:15 +0000
Manifest this update: Mon 28 Apr 2025 20:00:15 +0000
Manifest next update: Tue 29 Apr 2025 20:00:15 +0000
Files and hashes: 1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=)
2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: kCdwHo2UeiawpErOySRDk9Bx3dwRNQ0q3LCYz+0ZOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:65:39:ab:38:c0:4d:8a:31:dd:9c:60:ad:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Validity
Not Before: Apr 28 20:00:15 2025 GMT
Not After : Apr 29 20:00:15 2025 GMT
Subject: CN=940166dfe1b707d2c102eb82e87cb94685e3b0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:4e:2c:e5:b1:f1:be:34:06:5f:c1:26:da:
34:37:b8:03:87:e9:66:ab:5d:fd:d5:87:00:53:71:
31:21:7f:6d:42:56:6e:d5:b3:c5:27:6f:74:44:48:
b5:9a:d2:24:a6:e3:f9:24:80:9b:fa:1b:6a:fc:aa:
b0:1c:a6:c6:b8:a5:84:fd:fa:7b:66:ee:9e:64:02:
bb:7e:68:89:ae:7c:ef:ef:64:2f:a8:e6:c9:61:fa:
42:84:42:dc:99:b1:ea:61:c1:10:5b:dc:15:92:0b:
14:6a:1d:fd:3f:bf:35:9f:e1:b2:60:86:6e:7e:72:
09:61:82:3d:58:b7:03:ae:7f:00:2f:ad:b7:9a:d5:
cb:e0:80:c9:9c:2e:0e:24:bd:1d:11:b2:c2:df:f5:
0e:59:41:23:60:be:6d:b9:2f:a5:9d:74:00:6a:77:
f2:27:de:3f:28:93:1e:fd:21:ae:7a:18:ef:09:34:
79:12:ea:f5:c7:2f:40:68:30:96:47:f9:27:fd:95:
02:ce:4a:b8:79:2a:f1:64:fa:55:a4:27:be:c2:2b:
86:33:c5:a3:a2:47:b3:0d:5c:75:f4:5d:62:9e:1d:
cc:6b:cc:72:f9:8d:30:eb:0c:94:58:4b:b6:e2:39:
f0:4a:ac:96:00:f2:a7:67:1e:6f:8f:e7:93:ff:35:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:01:66:DF:E1:B7:07:D2:C1:02:EB:82:E8:7C:B9:46:85:E3:B0:FE
X509v3 Authority Key Identifier:
keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:25:f6:33:dd:f0:42:c0:80:0b:f2:cc:93:95:d3:0e:74:
8f:7e:00:14:e4:d9:6d:37:ec:d5:34:5d:65:d6:b4:b3:56:52:
51:bf:51:31:39:7b:35:a3:12:cf:f8:82:26:f7:8b:c7:37:47:
8a:7a:c1:e3:b9:32:6d:79:1c:f5:9c:20:43:22:ea:33:07:02:
56:09:c7:d6:37:d5:eb:90:ac:f5:e2:03:8f:22:8e:a0:6f:3d:
e8:32:e2:b0:cc:52:48:0b:22:07:b1:58:0b:76:35:7f:f9:17:
3a:8c:a5:03:5b:e9:8e:ab:83:b7:96:c8:fd:59:61:62:b4:66:
39:92:53:06:08:df:86:ea:25:21:52:93:d8:47:86:76:34:bb:
0b:08:10:e6:66:6e:f9:0e:d1:6a:25:4e:e9:b6:37:b6:84:18:
2a:53:4a:b1:12:4a:55:e8:06:ad:ed:62:3e:30:7a:95:79:6c:
2b:79:60:f6:e3:65:ec:1a:f7:45:fa:2f:39:8a:17:52:16:43:
ce:88:dc:f9:5d:fa:99:bb:7d:59:34:c8:6d:7b:c6:32:56:22:
b7:43:29:ad:1c:9f:00:b1:bc:5b:31:56:3e:d6:9c:b4:45:e6:
db:74:7a:79:3a:84:f0:7f:0b:ea:4a:e3:4b:ad:c8:f7:20:e8:
aa:13:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:43:35 2025 by rpki-client