Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: GJoj9BYCJwPJB2eXNhG6E4LqIygOh4ZwtROOiA0ZyEU=
Subject key identifier: 69:DC:0C:4C:CD:14:A2:C8:73:9F:A5:27:C1:D2:C2:3C:4B:96:6E:6D
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0197D32A68F4B68821CD8964E50338ECD965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0EFD
Signing time: Fri 04 Jul 2025 02:01:01 +0000
Manifest this update: Fri 04 Jul 2025 02:01:01 +0000
Manifest next update: Sat 05 Jul 2025 02:01:01 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: 14MLqZw1eoMpD+2ioJWvBfyzMHZ0Z86ev+XdZKPvDMI=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:2a:68:f4:b6:88:21:cd:89:64:e5:03:38:ec:d9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jul 4 02:01:01 2025 GMT
Not After : Jul 5 02:01:01 2025 GMT
Subject: CN=69dc0c4ccd14a2c8739fa527c1d2c23c4b966e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:0b:6c:25:f0:21:4c:f2:20:0c:c4:3b:12:
35:2e:8f:94:0d:a4:2f:87:65:a8:69:83:4c:83:ee:
fb:59:87:fe:ca:8a:69:a1:a7:bc:43:83:5d:16:55:
30:a4:57:14:36:a8:ab:3c:6d:46:af:13:09:b0:fc:
66:de:29:43:b2:1c:b7:4a:28:6b:92:57:aa:75:eb:
12:7c:86:7b:ff:b1:40:d9:38:fe:46:de:9e:d3:da:
1b:f8:94:9a:36:0a:2a:83:30:8e:12:66:3d:1e:f6:
3c:52:34:17:b1:43:0d:07:ad:a3:6d:8c:fe:df:5b:
30:32:ab:33:fd:ab:ba:81:e9:5c:59:95:93:15:8e:
f7:fd:ff:58:c2:fb:35:7a:b0:2e:49:c9:3e:40:23:
ff:0f:4d:34:c1:ea:d3:d1:95:98:73:ca:b7:07:3a:
87:3c:e9:57:e6:1b:4d:21:c6:22:21:8a:27:c5:74:
9f:f2:54:52:a4:ca:64:e1:2b:aa:41:4f:16:54:e9:
7f:4a:3b:65:62:c0:fb:95:8c:ba:ed:d0:bc:10:a4:
e7:72:24:ec:43:3f:14:64:75:04:60:b2:1b:da:63:
ea:21:05:17:39:19:e3:bb:92:30:b7:91:ff:fb:04:
e3:1e:2f:a2:0a:48:de:60:e5:b4:35:ac:bd:59:ee:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DC:0C:4C:CD:14:A2:C8:73:9F:A5:27:C1:D2:C2:3C:4B:96:6E:6D
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:db:b7:75:30:81:73:51:15:ec:48:80:fc:29:31:fb:a5:67:
82:ba:63:50:8d:27:d8:e8:60:6f:dc:b0:7c:00:b9:5f:ce:56:
6a:f7:d4:4e:4c:7b:c8:8c:e5:cd:a6:ba:ff:20:e3:f8:cd:3c:
75:d1:c6:fd:5c:04:a8:1a:c9:13:f3:42:ab:26:0b:4f:95:db:
34:a3:f9:1b:a8:04:60:a5:93:6d:b2:36:cd:83:76:83:9d:eb:
70:57:fb:84:11:49:86:10:44:52:12:07:e4:57:9d:e1:6a:f9:
e9:5e:c2:b6:b8:71:d2:d6:c3:7e:8a:e0:1e:2c:7c:c4:82:34:
7f:fb:41:41:be:d5:84:43:e1:5d:f9:f0:c5:58:80:9a:d7:0b:
1d:0c:86:0c:a8:4d:93:4b:0d:5d:d3:f7:d3:41:6c:db:0e:d8:
36:9d:6a:9d:d6:d0:a1:28:14:0a:a9:dc:26:97:e9:4e:7f:55:
7e:75:77:dd:35:aa:ed:f4:3d:90:a0:5c:f7:3e:a1:6e:eb:99:
c7:8f:83:9a:37:9a:4a:fd:07:8e:c4:f2:15:5b:1e:bd:93:fb:
19:30:1d:8f:7a:01:25:cf:12:fc:f2:9b:b2:32:33:18:0f:c1:
7c:ff:0a:37:96:9c:cb:51:6f:cb:86:39:e7:52:83:db:ae:7c:
b0:5d:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:00:16 2025 by rpki-client