Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: BBgbzmIcjebsXf86JiluiHqzCzlKmkZVICbpRktWQqY=
Subject key identifier: C9:D5:3A:A7:1D:5C:37:F0:43:56:94:35:13:34:11:27:91:12:87:BA
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 0197B745A5F517EFE0B700A0B93A265B20AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: VQZxVW03Vjb4WcfY11CfjPIhHhqP4GWRM9qnUMJXHtk=)
2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a5:f5:17:ef:e0:b7:00:a0:b9:3a:26:5b:20:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=c9d53aa71d5c37f04356943513341127911287ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:e9:72:4b:da:ab:1e:ea:08:ed:04:06:c2:
c7:50:b5:8d:d9:73:22:1b:0b:6a:ef:b3:de:f6:96:
85:b6:d9:aa:a5:cc:a3:92:5b:d8:8a:78:13:9a:4a:
88:a2:94:b2:6b:ed:d4:6c:fe:0c:09:6e:18:a9:1f:
51:7d:10:83:6d:68:fc:c5:3f:6a:9a:0e:b7:bb:ba:
b4:3e:96:b3:be:06:e3:75:d8:bb:92:b8:0c:37:50:
a8:c9:f9:db:43:55:06:d4:8c:0f:57:ae:ec:08:fa:
13:18:63:28:25:25:94:25:7a:6a:ef:21:53:44:2e:
a4:9a:2b:e5:77:e9:fa:d3:0c:a9:30:2d:3f:66:da:
fa:70:2c:8b:45:4b:19:1d:5b:fd:0f:6b:92:ba:a5:
88:64:01:75:f8:c5:b1:46:a1:2e:be:60:1e:4c:3f:
70:ba:aa:33:a4:71:04:f2:c2:fe:1a:0c:64:a6:83:
37:c6:df:8f:02:ec:fb:bb:ae:14:6b:a3:a0:9e:74:
32:19:bc:54:d8:13:99:45:e8:ef:7d:a9:ca:e5:28:
d9:3c:b9:23:af:b5:92:f6:5e:77:e6:47:a4:d6:84:
d1:f6:03:3d:9f:35:b2:42:09:b2:f2:3c:74:55:21:
7d:80:72:32:ce:d6:17:97:a1:73:1e:8e:45:6e:b5:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:3A:A7:1D:5C:37:F0:43:56:94:35:13:34:11:27:91:12:87:BA
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f4:0d:75:47:60:3b:7b:3b:3b:0d:3a:12:3f:39:19:2e:13:
48:63:5f:87:59:ae:d3:f2:b1:ac:10:83:47:9e:7c:4a:f8:79:
41:c9:41:e4:ea:c4:02:f3:70:63:90:bd:54:fe:51:4c:c4:17:
ed:4b:86:ea:ef:ce:f0:68:c7:37:de:3f:e2:13:79:11:c7:19:
a1:30:15:1d:5c:82:8e:75:56:b4:d7:9c:ec:cd:4c:00:9d:90:
0f:37:3a:30:0e:41:d6:50:fb:cc:07:49:c8:d2:e7:42:fc:1b:
72:fe:ac:5b:a0:cc:55:aa:f6:98:6e:53:67:53:c2:e8:43:9e:
43:33:3a:59:69:51:ae:2f:ea:ce:2a:c3:32:eb:b3:50:ce:20:
27:56:f0:b6:4f:d4:c0:06:3d:5b:23:e2:45:7b:cd:47:ad:b2:
2a:5a:c9:3e:a6:03:78:70:60:89:d4:50:77:79:73:93:ca:a6:
58:73:f0:71:81:c6:6a:cb:da:18:e8:5f:43:00:83:85:69:bf:
22:f9:dd:1e:5e:cf:bb:2d:32:37:a6:b6:ca:a8:0c:e9:77:ca:
bd:9c:25:de:75:f6:a5:6a:ec:2f:1c:aa:7d:f8:b0:3b:1a:c2:
39:42:16:95:d1:26:c7:ff:96:3a:80:f5:51:ea:80:89:7e:d4:
11:81:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:23 2025 by rpki-client