Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: D5NYbznHZpFwCUaR7nmT7yZiRAEedgRc2CII76nYWWI=
Subject key identifier: 00:13:E7:5B:DE:59:C3:5B:C5:3A:5C:F2:D0:99:4A:9C:34:EC:C2:43
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019672D45081C0CBA396BA8DD258A906C9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0BEE
Signing time: Sat 26 Apr 2025 16:00:38 +0000
Manifest this update: Sat 26 Apr 2025 16:00:38 +0000
Manifest next update: Sun 27 Apr 2025 16:00:38 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: ltsBh9ybijbwPR6EAhhDbP0F5oOniPZRavWC/106KQk=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:50:81:c0:cb:a3:96:ba:8d:d2:58:a9:06:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Apr 26 16:00:38 2025 GMT
Not After : Apr 27 16:00:38 2025 GMT
Subject: CN=0013e75bde59c35bc53a5cf2d0994a9c34ecc243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:f3:84:0a:93:40:9e:e6:09:46:e1:8a:04:
4c:53:16:6e:5e:fd:88:a4:d3:91:3e:9e:cb:5c:c7:
2b:a9:27:b4:2a:d9:eb:ff:e6:12:4a:f6:fe:c4:65:
d2:6b:8a:52:00:f2:44:48:e9:ab:70:52:3a:37:b1:
62:a2:b7:fc:c9:ae:05:f9:0d:c5:b5:d4:98:19:d6:
50:4d:85:6e:cc:e0:a3:67:e5:10:db:6e:d3:ff:ec:
93:e5:6f:d5:e1:5f:b4:d8:23:da:10:2c:c5:3a:c0:
8c:5c:02:56:8f:51:15:69:f1:ae:d7:88:2c:25:68:
20:89:ea:60:da:40:d7:6c:40:24:3d:df:39:9c:c0:
47:33:f7:21:9c:54:ac:3a:ab:a2:6c:79:33:00:54:
a3:c3:0a:15:f3:26:e5:f0:bc:d3:f8:74:d9:69:05:
37:36:06:9b:c4:f9:33:c1:14:67:d7:60:4b:1e:5a:
db:0f:0b:3c:60:58:de:04:2e:61:fd:46:b4:46:66:
21:c4:02:0e:8d:f2:b1:04:c0:a5:c1:22:20:e0:d4:
7a:c3:19:bd:9c:fa:96:01:11:56:71:d1:40:4c:00:
86:78:b2:a5:bb:e9:32:09:72:f8:f5:f7:94:ce:f7:
c1:c1:44:71:60:db:81:8a:b2:01:69:90:82:63:cd:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:E7:5B:DE:59:C3:5B:C5:3A:5C:F2:D0:99:4A:9C:34:EC:C2:43
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:16:78:b2:d3:c0:31:aa:bc:22:78:d3:b5:53:f3:ec:23:32:
68:45:f9:46:cc:88:c7:8b:02:a4:da:c0:95:35:4b:69:3b:d3:
07:5b:41:e5:d0:49:68:af:3e:64:9f:e2:a6:1d:5d:44:f9:be:
d6:86:c6:cd:de:92:1f:d6:a9:ae:52:10:f6:92:c0:20:90:4d:
b6:8d:e6:97:ee:41:6c:05:f4:2b:da:d2:a2:ad:90:80:3a:bc:
59:b8:6a:f5:37:59:58:3d:92:d1:0c:af:7f:6c:80:9e:f2:3e:
15:66:64:f9:bb:f7:30:4a:95:72:7c:4a:fb:0e:2e:a7:9a:cc:
3c:85:04:a2:9c:4b:2c:70:a6:b0:11:30:3a:31:63:3d:74:d2:
3d:4a:e7:1c:9c:6e:d7:7a:23:e8:11:9e:d6:1d:13:6c:4b:e9:
a5:6d:e6:f3:1b:9b:26:d2:e9:f1:0a:e9:23:4e:bc:f1:28:28:
57:fd:f7:ee:66:a9:f2:9c:bc:1b:75:8f:28:04:fe:6e:1a:e6:
5f:cb:a8:7d:81:11:db:68:54:38:c1:68:ae:82:9c:41:a8:de:
64:1e:0b:46:e8:cf:dc:db:38:5c:b4:f1:a6:56:11:c3:dc:d5:
dc:f3:a2:d1:ba:60:ae:85:f2:4a:d8:28:01:ef:19:bd:09:b6:
26:b7:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:27:15 2025 by rpki-client