Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: 9dzIFhlWb5qFe47IsuSwJ8n0HAP0uTlEgWCe6+pQPlA=
Subject key identifier: 1E:F9:41:F6:A3:52:8D:A3:27:9E:E7:0C:FD:12:1C:BD:B8:D3:DE:86
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 0196729D787393BD4D64FCE5519148987A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 15:00:44 +0000
Manifest this update: Sat 26 Apr 2025 15:00:44 +0000
Manifest next update: Sun 27 Apr 2025 15:00:44 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: 5GIeBOeuLilx3p5ZQd0e4pG0Zkcfm5oWjQRQ6FBV0Lw=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:78:73:93:bd:4d:64:fc:e5:51:91:48:98:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Apr 26 15:00:44 2025 GMT
Not After : Apr 27 15:00:44 2025 GMT
Subject: CN=1ef941f6a3528da3279ee70cfd121cbdb8d3de86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:1f:c2:52:ff:15:08:37:bc:46:63:fe:b1:
46:c4:dc:5c:01:27:cd:28:df:65:19:17:bd:76:70:
05:57:a3:51:81:9c:28:7a:b7:40:ed:27:13:74:72:
da:f7:a0:26:ce:5d:44:c2:c1:c4:32:a1:b6:c9:ad:
62:9a:40:c9:45:31:c5:4d:02:e8:b1:fa:be:fe:9c:
44:23:0d:ed:26:5a:b6:7a:3d:f7:09:c6:97:40:2a:
d8:44:45:3b:c6:bf:fb:5b:3b:cc:a0:8b:5d:f6:51:
8a:bb:1a:8e:4f:59:9c:63:cd:65:f3:f4:ea:f8:b4:
7e:01:d5:a0:ba:9f:a4:85:ca:6f:6a:37:b1:72:2e:
9b:a6:48:87:bd:d4:99:b0:04:5d:97:59:1d:6a:0f:
a8:1f:17:50:a5:f2:69:29:f4:2a:d0:43:da:40:1e:
3d:4f:ea:6f:d5:c9:03:06:97:04:90:08:06:4b:0d:
1b:3d:cc:57:dc:e8:71:38:1f:16:ec:6b:6a:ac:d4:
96:af:38:0c:22:c2:cb:45:92:8a:4d:51:4a:26:3c:
0c:45:70:1a:d7:2e:30:64:0b:3c:a2:c4:cf:19:43:
28:4d:df:c1:02:59:42:2a:02:f8:ea:ed:1e:ed:9d:
54:f8:b9:e7:98:e6:10:aa:a3:a5:5c:6e:97:42:12:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F9:41:F6:A3:52:8D:A3:27:9E:E7:0C:FD:12:1C:BD:B8:D3:DE:86
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bc:0c:cd:12:5b:da:0b:e6:7b:61:02:21:1d:39:eb:df:49:
02:15:8a:e7:6f:e3:b0:21:b2:ed:f6:b8:99:32:35:00:9f:3e:
01:30:fd:49:93:31:13:0a:d3:ce:53:72:03:76:47:cd:a2:2c:
a1:c0:85:53:5c:30:51:75:77:71:01:eb:b4:a8:2f:5f:53:cb:
77:28:0c:9d:f0:21:b2:31:cc:df:86:29:82:93:36:30:85:e8:
0b:10:7b:42:26:d5:d6:7e:94:d0:54:22:62:f7:cf:2d:e0:ef:
d4:64:1e:b9:bb:40:c4:0b:d8:62:6a:4b:8e:d4:f8:56:41:93:
5a:31:2d:18:00:03:f0:08:6c:b0:c4:97:36:56:f3:a9:d7:e7:
d3:b4:36:36:97:fd:97:f6:2c:58:55:86:b3:36:40:1c:b0:89:
3c:b6:54:e3:e8:17:8d:78:d5:4c:e8:b2:1c:f0:76:25:81:57:
d7:92:28:3e:0c:73:6e:3f:e4:35:a1:27:b0:6c:de:bd:f9:38:
9a:74:50:66:3d:b4:c9:c7:da:9a:da:81:d9:e6:da:23:aa:f6:
a4:6f:16:de:9b:ae:c9:41:31:09:d9:fb:e6:4e:16:f6:0b:9f:
cb:12:85:ee:0c:fc:05:1e:4d:b6:6f:86:e1:18:54:eb:6a:ea:
50:38:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:28:49 2025 by rpki-client