Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier: DAgl0iWDhQSRox1NbYGGcG7vu9TZ4uu2JB3cAOpWcHk=
Subject key identifier: A5:F6:9D:56:19:7B:DD:BA:6F:BF:DE:3F:56:E8:A3:72:89:3E:4A:61
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial: 0197B6A1AA5BE29EAC76EB502191E78BF7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number: 10F9
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: D53G6FPRG+l7QpI5i47kMD3t9uQDuS7bgJfPMBhsjbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:aa:5b:e2:9e:ac:76:eb:50:21:91:e7:8b:f7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=a5f69d56197bddba6fbfde3f56e8a372893e4a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:4a:94:ad:5c:93:51:78:19:72:d4:21:97:
39:23:ef:cc:1f:6c:28:70:d7:f2:77:07:02:87:3e:
f5:4c:8c:0f:d8:b2:0b:f7:0a:e2:36:03:ae:a7:e2:
c6:90:b0:ff:b6:56:73:4d:e2:ed:36:3a:e1:ac:a9:
dd:fb:c8:ac:90:75:20:f4:f0:70:c8:aa:4a:1a:d5:
fd:79:8c:c1:ed:73:78:29:a8:9f:be:2e:d8:dc:00:
81:f8:22:8d:99:49:92:57:ef:48:5a:03:d9:6f:39:
e2:cd:57:9c:e4:51:9d:ec:fb:3f:39:8a:6e:f6:e9:
1d:9d:d8:5d:5e:8e:45:ae:a6:d7:c0:1e:29:40:c0:
75:d4:74:da:2d:cf:55:61:d7:0a:da:87:c0:79:ee:
a6:6c:30:04:8d:fd:fd:a0:15:60:70:dc:73:68:86:
fb:6a:6d:31:ba:50:6a:42:7c:4a:7d:4b:3c:be:18:
4d:96:07:9d:22:37:02:8e:ca:74:02:9a:1f:c9:14:
50:2a:45:76:c2:1f:bc:69:e1:46:4a:f4:0a:f7:6c:
8b:79:89:e3:ac:bf:ce:b8:55:ab:fe:f1:75:03:5c:
c5:e8:19:7e:e1:39:19:e3:89:4b:62:df:3d:af:28:
a5:8c:ee:71:43:a2:0f:0f:d7:9c:72:0e:b3:47:21:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:9D:56:19:7B:DD:BA:6F:BF:DE:3F:56:E8:A3:72:89:3E:4A:61
X509v3 Authority Key Identifier:
keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:67:c9:0a:b7:06:73:05:09:c6:bf:70:08:05:67:53:0e:
a9:97:ae:56:ed:98:9e:01:82:d1:13:75:98:e2:4e:62:50:a0:
44:20:ad:6e:99:b7:5f:2f:bc:76:44:fc:0a:98:ac:25:8c:30:
da:3b:39:03:a0:11:6c:db:46:1c:a7:95:2c:08:87:65:98:b5:
34:39:c4:34:03:52:63:dc:f7:0a:29:1c:a6:1c:f4:92:e4:61:
38:4e:a5:95:d5:b2:3f:8c:41:a6:f7:a4:8f:24:4f:5e:e3:2e:
60:3f:50:95:83:c7:df:73:ab:b5:ef:0d:91:57:8b:75:19:e5:
24:ed:e5:50:e4:e0:18:67:2e:4b:4b:62:93:af:06:aa:40:20:
6a:3e:dd:fa:b1:c3:4a:7e:61:e5:36:c5:0c:e2:9f:ef:ab:f0:
09:c7:83:63:5d:6b:c5:b5:f8:25:44:77:c0:a9:fe:6b:1d:63:
91:03:2d:74:28:dd:60:1f:83:f9:40:44:e9:10:87:3b:ab:c1:
f4:9a:9c:33:85:e0:59:63:41:c7:d1:e7:ea:44:c9:74:b5:15:
b4:2c:e7:de:1f:7d:54:95:0e:fa:f5:5f:64:49:5d:0b:39:e7:
7c:44:46:91:25:84:d5:93:2d:e4:8d:65:d9:b7:60:bb:d7:cc:
80:c6:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:18 2025 by rpki-client