Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: kO2jzH03rM7jLuQXNwFz6qPx6YS68gDgDH7M4gHj+Rs=
Subject key identifier: 21:45:1E:CC:70:76:22:7B:AE:DC:0D:99:BA:DC:B6:F5:5A:30:DC:C4
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 0196C1CAF43641596564C0CCD8209097169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 0678
Signing time: Mon 12 May 2025 00:00:25 +0000
Manifest this update: Mon 12 May 2025 00:00:25 +0000
Manifest next update: Tue 13 May 2025 00:00:25 +0000
Files and hashes: 1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: axkKHxzkkD6BOH+MZR8IYHZ9qWAmgC4xWQXnZT9PEYw=)
3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:f4:36:41:59:65:64:c0:cc:d8:20:90:97:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: May 12 00:00:25 2025 GMT
Not After : May 13 00:00:25 2025 GMT
Subject: CN=21451ecc7076227baedc0d99badcb6f55a30dcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:0d:ff:91:cc:ef:98:ce:64:40:a1:a7:c5:
04:40:7f:e2:82:ba:7d:d2:c8:36:ea:92:08:de:69:
87:fc:16:b3:55:7d:a5:4a:c3:07:07:e1:f3:7b:98:
7b:9f:1e:11:47:c5:d9:85:6e:95:ed:ed:cc:31:40:
ac:41:7d:22:b1:6e:72:f5:43:f0:bb:53:6e:f7:01:
c5:52:a5:51:6d:97:1c:e9:ba:e4:78:0c:1c:90:21:
6f:ba:f0:51:0f:7a:fe:7f:d3:f5:ff:62:0a:47:f5:
4b:e9:eb:d2:91:62:ea:16:44:76:dd:00:d2:bf:02:
51:39:72:ad:a3:38:49:37:be:26:37:9e:dc:d0:62:
18:ef:bc:ed:5a:3e:6b:72:f3:fd:73:7a:ca:6c:44:
9e:eb:f9:80:ce:4c:9c:5b:29:61:60:8a:31:b1:a5:
18:c2:aa:e1:5a:7a:40:90:58:00:20:92:da:05:49:
bc:3e:8f:96:09:dd:1c:32:1c:77:52:e3:11:40:c1:
4a:9b:e1:34:6e:6a:43:c3:15:ac:b5:d7:4d:03:03:
df:64:9c:ce:7f:f0:d5:27:51:62:86:8d:76:ef:d6:
01:06:cd:1b:26:b9:5c:38:7b:db:6d:4f:0d:7c:b9:
49:77:82:f3:81:70:27:48:3f:56:18:fe:57:3a:fd:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:1E:CC:70:76:22:7B:AE:DC:0D:99:BA:DC:B6:F5:5A:30:DC:C4
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:58:cb:95:09:c1:65:e9:99:7c:8f:3c:20:0f:0d:9f:0d:0f:
3a:fa:89:81:8e:b1:db:10:10:d1:6e:db:15:d4:e5:f3:0b:bb:
c5:77:a0:ee:f0:d4:c3:ef:1e:bd:61:0b:04:a1:07:69:41:fa:
57:ff:41:b1:53:71:71:b4:ce:45:53:60:a3:f6:49:8a:28:35:
19:b9:85:c2:71:04:8b:3a:ef:26:9a:73:1f:17:4c:04:aa:99:
b1:a9:93:7d:0a:08:96:48:af:b1:c0:00:01:51:c6:09:91:bb:
60:d8:e5:57:05:1a:85:d5:0f:75:6b:b5:f7:7d:ed:2d:68:e4:
0b:5b:89:03:0d:46:20:4c:3d:f3:14:57:6f:96:86:ab:f7:28:
a1:27:94:c0:00:04:25:8c:3a:88:6b:9c:38:1e:ed:4b:6c:4b:
14:7a:af:39:97:c0:f9:8e:0e:47:e9:55:55:d4:9a:00:1e:fe:
98:15:3e:cf:d3:a1:ad:9b:29:2a:84:2c:ef:93:0f:31:c4:de:
d3:fa:df:b2:3b:69:dd:65:42:c6:8a:cb:3c:f4:fd:57:26:2e:
c8:3a:97:fa:5c:05:19:bc:46:57:9a:56:50:2e:bc:9f:01:55:
66:3e:48:d3:76:80:f4:75:6b:ce:4b:29:9b:23:35:22:23:b2:
25:fd:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:37:50 2025 by rpki-client