Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: pIpzLfbQi64qObCecyuTmJpvxDRP9xwhJYA97zU0Tds=
Subject key identifier: 1C:51:23:A5:43:C6:A7:BA:46:6E:6B:58:55:4D:6C:D2:13:78:E3:44
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 0196B5C70EE2FE07D49C0AA0866FD03D3624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 1074
Signing time: Fri 09 May 2025 16:00:43 +0000
Manifest this update: Fri 09 May 2025 16:00:43 +0000
Manifest next update: Sat 10 May 2025 16:00:43 +0000
Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: UMSVrbtM5ubJqVR1HekF4qXOtVJUKrQM3h7JzAhzVGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:0e:e2:fe:07:d4:9c:0a:a0:86:6f:d0:3d:36:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: May 9 16:00:43 2025 GMT
Not After : May 10 16:00:43 2025 GMT
Subject: CN=1c5123a543c6a7ba466e6b58554d6cd21378e344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:d6:28:44:63:11:bb:e1:8f:ab:2a:ae:27:
34:e4:5e:44:24:60:ea:05:11:8e:23:58:fc:4b:8f:
b5:85:9c:74:46:68:53:9a:06:0a:35:82:95:5b:58:
dd:fa:0a:51:43:ae:91:86:0a:cd:67:e4:bd:53:f3:
85:89:7a:0c:3b:3b:9c:9c:c5:55:b3:1f:7b:6c:c5:
35:63:8a:5c:89:e5:e5:1e:74:3f:22:25:eb:b5:62:
0f:50:92:a5:3f:29:56:b8:d6:3a:1a:16:76:28:ce:
73:9b:51:4a:9d:a7:13:86:dd:e8:18:7d:01:e1:ed:
d9:10:d9:d9:08:92:e7:3b:e9:b9:a9:ac:70:47:5e:
cd:91:50:b7:b7:78:a3:fa:5d:22:e5:64:64:bb:3b:
ab:45:5a:18:06:4c:8a:c4:07:c1:18:a6:95:80:04:
18:23:e4:91:eb:51:71:4a:db:ba:3b:db:10:27:52:
14:13:90:65:cf:69:8b:02:82:96:ed:5d:38:c9:7c:
aa:ee:bc:c2:56:af:a0:2c:86:ac:f9:ce:82:b4:bc:
a3:76:dd:c8:8f:48:fd:5a:72:4c:a6:38:24:64:66:
7a:49:cb:92:c2:ac:a0:a2:9d:a4:14:06:71:d3:e0:
fb:4a:16:2a:70:69:90:76:40:a0:fc:dc:d1:02:c3:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:23:A5:43:C6:A7:BA:46:6E:6B:58:55:4D:6C:D2:13:78:E3:44
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:15:fc:6b:62:3a:37:2f:4d:84:7f:02:bc:b9:de:53:a2:72:
3f:a7:91:86:43:49:af:6c:56:5e:eb:bf:28:b8:82:97:79:18:
9d:48:2a:76:48:88:3e:bc:14:3e:7e:dd:f4:e9:78:45:01:52:
5a:ac:37:26:10:8d:40:fe:3c:4c:ec:41:82:cd:c2:52:d8:a1:
67:ce:f9:da:e4:6e:ed:7c:98:8b:72:66:24:1e:57:55:e7:54:
3e:d4:9e:17:ef:bc:96:84:c5:d1:46:30:f8:b6:41:c7:44:64:
50:4b:fe:80:aa:7d:7c:3f:d6:b1:47:6b:2e:17:87:a7:a3:81:
82:9a:55:f4:da:bf:b4:8b:cf:2b:cd:5d:89:f7:1e:88:59:ce:
95:59:11:5f:d6:d7:11:52:f8:5c:a9:9d:c7:3e:82:a3:51:c4:
81:cd:83:b4:10:9b:85:52:d8:81:b0:18:9d:a0:94:e4:7b:56:
a3:42:a6:47:29:9d:ff:b8:f6:bd:d0:bb:f0:7b:1c:94:24:30:
d5:90:09:8b:32:5a:d5:82:de:c9:64:9f:17:00:f1:93:2b:7b:
70:ab:fc:cc:25:4b:10:89:a0:40:91:4c:d1:45:13:13:a9:b6:
ee:28:a9:03:3c:13:58:8d:01:93:b7:ad:ca:36:06:b8:45:e0:
fb:97:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:29:24 2025 by rpki-client