Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: oGOCs0BtZh1mFMXitmMVvFDb9F/IWXp0Usfq7loYCaI=
Subject key identifier: AD:86:63:2E:59:00:2B:96:26:CD:1C:11:5D:12:24:47:E3:3D:30:83
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0196C8A8F81C8EFB69CAE5A856E0940CC131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0E73
Signing time: Tue 13 May 2025 08:00:38 +0000
Manifest this update: Tue 13 May 2025 08:00:38 +0000
Manifest next update: Wed 14 May 2025 08:00:38 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: iJbnj7Wiyp7QPYbIspExBAs06j8BPHhsrHNS9gLXb78=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:f8:1c:8e:fb:69:ca:e5:a8:56:e0:94:0c:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: May 13 08:00:38 2025 GMT
Not After : May 14 08:00:38 2025 GMT
Subject: CN=ad86632e59002b9626cd1c115d122447e33d3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:32:97:d6:b7:f6:74:35:6d:44:dc:17:82:
c9:49:81:50:44:72:99:92:4c:72:a4:d0:b0:19:cf:
ed:87:6a:95:4d:23:ac:09:e0:89:37:e3:ea:55:a3:
a7:de:33:28:50:9b:6c:57:6f:42:37:c8:0d:d1:e4:
d2:a7:25:1f:b6:d4:85:b4:41:41:d1:ad:b0:eb:b1:
e0:8f:a6:60:bc:a7:65:da:ae:c2:da:b1:bc:d6:7b:
cd:7f:bc:37:41:dc:2e:8d:ae:d1:42:b0:97:ff:f2:
2d:ae:52:66:f8:91:79:5c:a9:44:76:e0:9c:e7:38:
35:3e:76:15:da:b9:18:11:a2:8a:e5:a0:a5:98:a8:
3f:f7:3c:65:70:9a:8c:f2:61:a3:bc:f6:a8:bc:87:
31:40:67:03:0e:bc:33:32:14:d6:58:1c:b9:53:10:
79:6a:59:90:1c:9d:ca:e2:f6:7c:ac:90:e9:d5:64:
30:26:4e:8f:70:38:49:e0:4c:e3:b9:cd:d2:66:65:
2b:48:cc:a1:86:af:be:0a:ae:25:08:5c:f7:0b:b3:
bd:6d:11:ca:eb:a6:3e:1b:e7:72:56:82:ac:8d:7e:
53:83:4e:f4:38:3c:c8:02:8b:6a:d3:16:d4:ac:38:
3b:bf:99:00:57:e0:49:7e:43:d2:9b:f3:75:a1:d8:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:86:63:2E:59:00:2B:96:26:CD:1C:11:5D:12:24:47:E3:3D:30:83
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b1:96:7a:bc:01:93:46:15:d9:c5:53:8d:6c:9e:69:89:43:
aa:04:ff:85:53:d2:55:16:10:bc:ac:9b:96:a4:7b:e8:38:70:
49:44:fb:e2:7f:81:a2:08:80:2e:67:21:ba:83:75:e8:ca:aa:
ce:a0:67:3c:1a:ba:7f:e1:95:01:49:38:94:33:fd:53:66:d3:
a2:fd:32:59:5f:89:55:04:f0:d7:e3:a6:28:02:67:c3:df:bb:
62:54:33:59:60:e8:83:46:97:80:38:47:08:94:82:b3:7b:a0:
a6:8d:ef:b1:92:00:f0:67:f4:a9:ad:9e:e7:8f:d6:7a:00:50:
dc:2f:15:bf:e4:94:a9:60:5e:17:b3:86:22:64:ae:c4:8f:bb:
74:73:69:8d:ce:d9:48:93:4c:46:a0:31:fe:04:8d:33:d7:f8:
74:3b:62:fd:77:f7:e6:38:41:05:72:9a:71:ba:69:34:40:77:
6b:07:e4:48:53:c1:52:1e:e4:9a:0e:81:3a:fc:e9:41:c4:13:
ca:4d:00:58:51:f9:7d:3c:ce:17:2e:ef:e1:e2:52:d8:64:14:
4a:43:81:44:65:ef:cf:c2:6b:a9:28:81:e8:0e:bd:af:df:7c:
fc:1c:fc:97:60:9a:e9:0d:1a:3c:62:8b:25:79:7a:f1:c0:fe:
a6:0f:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:02:39 2025 by rpki-client