
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: PFunvDg/nIT3FUEgoZy09bl019Hqw/4YjDhsSLL/GEY=
Subject key identifier: 59:85:D3:AA:BD:68:D7:AA:E0:EB:35:8E:D3:FA:2F:7F:4D:A7:DB:76
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0197B745308823270B196D574A298BFE6E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 046B
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: p7bmBJsD+8Ed+yd5qZtYnXDc9JxumPNVwzXPVX1M9gk=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:30:88:23:27:0b:19:6d:57:4a:29:8b:fe:6e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=5985d3aabd68d7aae0eb358ed3fa2f7f4da7db76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:d2:a5:12:51:69:9c:2c:f5:7f:63:18:3b:
5e:dc:47:8b:09:4d:7a:40:96:59:87:59:4a:19:f9:
cf:63:98:b9:1e:95:29:9e:67:7f:e9:80:68:79:90:
06:f2:fb:0d:4e:c5:01:a6:8d:fa:23:fe:5e:e0:fd:
74:56:62:7b:90:2b:f5:f7:41:e2:1b:d0:9d:9f:10:
4d:ca:dd:01:e9:31:77:de:4d:cf:83:48:a0:44:63:
c9:bf:b4:b3:51:9f:c1:bd:85:9b:b3:6d:9c:92:96:
d6:25:a1:76:0f:9c:52:6c:dc:6b:a1:c7:fd:bb:12:
35:a7:3c:fe:54:db:d0:e2:56:94:a8:ac:4a:33:4c:
45:d8:f4:c2:86:2f:33:9f:e7:7d:5f:db:30:8f:41:
93:76:41:e2:45:53:e9:be:d2:2e:98:8b:d2:8b:86:
17:f6:e5:6d:a5:e3:1f:e1:23:33:b4:39:2f:19:8e:
b7:d6:66:cb:19:22:66:69:e1:fe:38:47:8c:13:63:
71:55:0b:9b:fc:39:03:57:52:35:fd:cd:08:d9:7c:
20:bc:1e:7d:17:4e:9d:df:cf:69:1b:91:45:d1:61:
10:26:ad:ec:d3:31:41:54:8a:33:f4:d3:fb:16:41:
d4:8d:89:68:74:41:fa:52:e8:66:d6:4e:65:1d:63:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:D3:AA:BD:68:D7:AA:E0:EB:35:8E:D3:FA:2F:7F:4D:A7:DB:76
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:da:3c:42:5a:85:58:8a:26:ed:09:55:84:5f:cd:24:67:
9e:fe:eb:d5:70:a1:98:d3:71:e8:7a:e1:1b:d2:91:04:34:0a:
3a:2a:22:ad:f1:a1:ed:ab:2c:e6:4a:b3:c2:d8:e8:99:48:a4:
45:f3:04:ce:35:d5:f6:0b:12:f1:fe:16:95:de:5b:78:84:a8:
a2:01:e4:b0:ea:b1:13:c8:f2:75:d5:71:56:61:06:47:d7:a1:
f8:e8:7d:8a:58:34:30:99:4c:e7:b1:a6:4c:7f:29:99:d3:47:
d8:e3:15:67:be:99:94:ec:16:41:ff:2b:a0:7f:1a:0b:24:7a:
c7:e8:2c:7a:97:f2:11:a9:94:48:92:ce:b0:f7:89:56:df:28:
f2:f9:13:2b:17:dc:7c:54:69:48:ef:25:af:da:fc:b4:47:1a:
63:ac:f2:8a:55:07:b1:7d:a9:8a:2b:c3:90:67:b1:ec:ea:50:
d0:60:4c:2e:ff:4d:89:72:09:e9:74:d9:1a:d9:a2:e9:47:af:
8b:29:96:99:c2:b5:ef:47:6d:81:8a:3d:88:ec:ff:41:5e:ff:
90:e9:31:80:02:6d:c6:68:4a:49:df:4c:b8:e0:71:7d:c6:e1:
b6:84:05:90:f6:77:f4:8a:30:f8:c3:fc:50:ef:73:d5:dc:13:
b4:ab:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:08 2025 by rpki-client