Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: gFYZYwRWDsesUrvdBgT7skChEfVAG6gcMOq3Dc6q3U0=
Subject key identifier: 1A:B8:48:BB:D7:F7:53:AA:EE:22:D1:A5:4A:EC:63:D5:14:DC:EC:83
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 0196C427E0169C11282391E96E9B165B67E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 11:01:09 +0000
Manifest this update: Mon 12 May 2025 11:01:09 +0000
Manifest next update: Tue 13 May 2025 11:01:09 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: TFogIcO/LUgoGn4UjbM5sKPfsibnX75VWggenQD0HbQ=)
2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:e0:16:9c:11:28:23:91:e9:6e:9b:16:5b:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: May 12 11:01:09 2025 GMT
Not After : May 13 11:01:09 2025 GMT
Subject: CN=1ab848bbd7f753aaee22d1a54aec63d514dcec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:5b:c8:ae:fc:f8:fd:c4:27:a9:22:42:0a:
dd:ec:f8:25:ba:7d:1b:8b:c4:38:85:b2:5c:e4:21:
30:1d:52:4b:58:f8:d5:82:eb:7b:fe:68:c8:09:4e:
dd:1d:35:22:7d:6a:0e:b6:7d:0d:a9:95:18:cd:0c:
65:f8:a1:d3:f0:d7:fc:23:c1:17:82:7d:49:e9:df:
17:a0:9a:f2:95:16:23:0c:b1:44:4e:e5:37:9c:38:
ab:58:4c:fe:8f:b3:a7:6b:45:97:53:8d:d7:b7:ab:
39:df:19:37:7d:58:c3:32:35:6c:55:7f:60:5f:f1:
68:75:7c:f7:67:24:23:26:d8:12:9f:7f:1c:09:27:
60:bb:14:69:f3:1e:a0:9f:73:62:43:2e:22:07:35:
9d:a2:7a:34:e6:d0:bd:bc:46:43:3c:af:c4:5b:be:
c7:1c:ed:da:52:b2:97:c3:b3:5c:48:36:7a:0b:dc:
6b:51:18:b0:c2:7d:9a:f7:b4:31:c1:c2:1f:22:b0:
da:5d:e3:af:6a:0f:26:c1:24:ab:03:45:15:c1:d0:
c2:de:40:43:1b:60:f8:db:76:89:b4:bd:2d:c7:41:
16:06:8e:ce:16:01:1d:e0:c5:a5:39:46:0d:f6:4d:
ea:15:2c:72:7f:2a:b9:23:59:de:3e:ad:7c:ce:fc:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:48:BB:D7:F7:53:AA:EE:22:D1:A5:4A:EC:63:D5:14:DC:EC:83
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:72:87:58:34:03:29:c1:aa:e7:bd:12:5c:44:3d:09:94:e9:
27:67:00:ef:4f:bc:58:72:a6:a1:07:6f:75:be:9f:be:70:37:
94:e1:e0:f6:83:e0:27:85:1e:37:e2:d9:ed:66:58:cd:4d:eb:
b0:8a:8b:2d:54:bc:02:7a:3c:4b:2b:45:44:c6:05:f7:04:62:
91:50:b4:a2:77:eb:04:d9:aa:4d:2e:00:8a:49:6f:5f:ff:0b:
36:3f:46:a4:d5:55:09:34:ce:43:69:96:89:9d:2f:42:ec:56:
5d:91:de:f9:d5:6d:1f:25:af:d1:5e:dc:2b:e5:82:4f:1a:3f:
8d:97:e2:87:18:f9:e9:10:59:fa:b8:68:6e:7a:4c:49:5b:ab:
19:7f:35:11:c8:fb:aa:80:bb:b4:53:ff:5d:74:5d:d0:57:a2:
0e:7d:70:e0:a6:95:f6:19:4c:cb:7c:ee:a1:19:13:62:c2:c5:
04:da:e9:9d:1d:49:58:6d:47:ab:33:8f:28:f2:da:27:55:da:
b4:89:ff:a9:0f:0f:14:f4:1f:92:5b:09:fb:1e:97:c5:d4:e8:
82:4a:ba:35:ec:d6:62:78:30:10:9d:f7:3e:ce:ee:80:f1:41:
1a:c8:e2:27:51:26:b8:4f:ef:cf:6d:8d:6f:fa:c8:86:51:cf:
0d:ed:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:44:24 2025 by rpki-client