Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: 58Kxl+yKK0ScapQo8p2XDe5+R5+VLnrDZ5kJzAqbxJA=
Subject key identifier: FC:A3:32:A8:2A:B9:8C:BC:44:B1:67:13:25:0E:D9:BF:32:F3:64:6A
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0196C2025D9A97CB66815AE437EBF4284987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 03EC
Signing time: Mon 12 May 2025 01:00:56 +0000
Manifest this update: Mon 12 May 2025 01:00:56 +0000
Manifest next update: Tue 13 May 2025 01:00:56 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: TjXzw70P53abX/q4yhCQjRmjyt+jGLShpfPOfMxdLwk=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:5d:9a:97:cb:66:81:5a:e4:37:eb:f4:28:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: May 12 01:00:56 2025 GMT
Not After : May 13 01:00:56 2025 GMT
Subject: CN=fca332a82ab98cbc44b16713250ed9bf32f3646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:27:ee:54:04:f9:45:a0:ba:ea:a7:5d:b6:
96:37:e2:e0:01:7d:44:1c:fa:8d:17:cb:38:67:98:
53:bd:cd:6c:e3:e7:ed:d2:f0:70:ab:6e:23:52:1a:
3e:42:08:db:b9:fe:c0:65:b1:64:95:9f:ea:df:ea:
93:a3:95:c5:64:da:a6:87:b4:c3:f3:61:7e:39:38:
95:d8:4d:86:d8:89:1c:89:a3:5a:6c:4a:db:a1:63:
c8:14:fb:bc:c6:83:1f:f7:ba:ad:43:05:00:13:27:
66:e6:68:12:99:c7:b3:91:87:e3:35:a6:79:af:23:
df:8e:64:eb:9c:b5:02:ad:d3:02:29:7a:67:57:6f:
4a:47:f7:91:1b:85:4b:d7:11:92:9b:48:9a:de:c3:
0f:ec:13:00:3f:49:57:35:e1:aa:5e:81:61:6f:68:
09:d1:a1:7a:df:64:8a:68:bd:6e:b5:d5:6b:51:52:
12:21:2f:c9:c6:26:99:c9:94:9a:7f:5b:e3:ce:11:
28:b3:9b:70:f0:cf:31:51:3f:18:d1:da:b7:55:96:
0c:08:da:f0:f9:f3:0d:47:80:ae:08:6d:94:91:0e:
ea:8e:bb:10:bc:88:93:d0:59:48:b6:b9:49:5c:4e:
00:9a:c0:26:8e:0a:43:af:37:45:25:51:12:9b:40:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:32:A8:2A:B9:8C:BC:44:B1:67:13:25:0E:D9:BF:32:F3:64:6A
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:d7:ae:44:1c:64:b1:04:96:51:9e:f3:a3:fe:0f:12:35:
71:ea:55:63:85:af:07:97:db:cf:6d:80:c1:34:63:e6:7d:3c:
25:3e:0a:50:e6:6c:86:30:cb:94:b6:76:aa:e4:44:7f:f7:87:
12:cb:aa:1a:b9:d3:76:d7:6d:5c:44:c8:92:c7:c7:79:cb:0c:
5d:79:f3:c5:70:e0:5a:f9:36:06:2f:d6:e3:24:fd:d5:00:88:
c7:3e:98:f6:c4:d4:7a:d8:84:40:a1:70:46:16:1e:26:8e:4a:
66:8c:a0:23:95:98:fc:6f:eb:1a:c9:df:0a:d3:83:3e:a3:85:
34:6f:37:0b:06:78:90:41:4f:3c:c5:97:7f:d1:a5:a0:70:b0:
37:ed:63:35:13:6e:1f:09:0e:7c:09:b6:d6:04:82:f6:33:19:
bb:c5:b6:d5:66:fe:d7:f4:f9:4d:12:04:e4:bb:d3:0c:0b:44:
d8:3d:aa:92:89:e6:76:93:91:c3:e8:dc:32:25:3f:62:5d:e8:
9f:ee:ee:90:ee:7d:ff:38:b8:3b:79:9c:ee:61:b2:83:cf:24:
6f:76:bb:e3:a7:6d:38:41:67:27:de:a7:ee:69:ea:77:2b:09:
c6:9f:1b:ee:c3:35:5e:73:8c:d3:98:62:7e:5d:5a:87:40:4d:
f2:a6:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:24:51 2025 by rpki-client