Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: +In3Ouo2Mim6DuaJ47b0nsRl20FlkGJHf3+ZWmiBHqY=
Subject key identifier: E2:A3:88:57:2E:84:73:30:54:72:5C:86:8B:48:56:F5:4E:96:34:2B
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 0196B7B5E73461A7A45AAC1A35BC1F8E7AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 01:01:13 +0000
Manifest this update: Sat 10 May 2025 01:01:13 +0000
Manifest next update: Sun 11 May 2025 01:01:13 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: wKdX38vN5V5vrKVnMnCJlidbO3nLR7yC9glAZd+QsSc=)
2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:e7:34:61:a7:a4:5a:ac:1a:35:bc:1f:8e:7a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: May 10 01:01:13 2025 GMT
Not After : May 11 01:01:13 2025 GMT
Subject: CN=e2a388572e84733054725c868b4856f54e96342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:69:09:46:85:60:82:48:df:8d:18:4c:22:
a5:7e:de:cd:2c:54:13:b7:95:c9:ea:5f:8f:c8:1e:
89:9b:6e:01:45:ca:c1:47:d6:00:01:04:08:83:6f:
fc:ec:7e:dd:8b:4c:3d:d0:b2:5b:55:07:a9:d5:04:
20:71:da:18:1c:d1:0f:57:1a:80:13:04:a1:2a:b4:
f9:16:22:b0:a6:a4:38:01:4b:4f:4b:7c:08:90:cc:
4d:09:3c:ca:79:68:19:51:8e:0b:c6:6d:c1:d7:f5:
46:d7:84:e1:12:33:c1:48:0f:b4:af:e0:72:e9:19:
d5:49:32:bb:e6:88:94:4a:89:11:4f:44:4e:a9:1b:
bd:52:6c:ab:69:5c:46:de:6a:ef:e4:72:ef:8b:7b:
cb:f4:2f:61:e2:39:b8:d4:a7:5c:e3:f3:95:8e:17:
69:8e:c3:28:36:13:3e:d6:9b:0c:7c:e2:80:37:10:
37:12:98:82:01:e3:8c:f9:f7:13:4d:de:98:e1:2a:
9c:03:66:ea:1a:52:dd:7e:8a:5a:b0:85:99:0b:81:
c5:d2:ea:5c:c8:52:21:5a:4d:ec:dc:c4:95:b6:0d:
3a:d5:f1:d3:48:5f:10:80:c9:b2:6e:36:d7:fd:e9:
e4:fe:93:e5:7f:bd:0a:20:2d:65:30:c1:92:41:4b:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:88:57:2E:84:73:30:54:72:5C:86:8B:48:56:F5:4E:96:34:2B
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:00:9e:78:97:56:d2:c8:3d:ab:c9:d7:35:68:71:32:b5:92:
a1:18:0a:90:6c:6e:be:f1:4a:fd:05:ef:1d:52:83:ae:5a:a2:
49:56:13:69:dc:c9:b8:d0:d8:64:9c:ba:6a:66:99:d4:a5:92:
69:cb:cd:b4:f1:d2:2d:0b:2d:75:38:d4:49:66:5f:2d:6d:15:
c3:ea:2f:3d:21:a3:ea:95:7f:fb:2e:e2:c9:3d:c5:db:3e:c6:
f9:14:ba:12:33:26:37:85:c6:f2:fd:d4:5b:a9:d5:c7:a9:e2:
b7:d5:47:d5:5b:d1:3c:69:d6:ff:ad:d1:1d:7f:64:5c:9a:91:
57:03:28:eb:67:41:66:00:07:be:75:04:e7:4a:0d:ea:ce:84:
c3:6f:da:19:1e:de:51:93:87:4b:3e:a6:8e:c0:05:6d:e9:ce:
cc:54:6f:ba:b1:56:24:2c:af:a2:db:e0:24:9f:2e:3e:d4:68:
ad:c7:b6:8b:25:7c:15:dc:b7:60:0d:50:2b:0b:9e:3d:5a:8b:
93:44:e9:71:b3:54:0e:96:6d:91:cf:a8:5f:fa:d3:63:1a:6a:
b0:5c:1f:f1:64:b4:5d:ce:4f:ce:ba:19:53:ce:d5:02:7a:23:
71:ee:72:eb:8d:2e:d3:e6:18:83:0d:0e:2b:35:d4:4c:3e:f7:
f2:d6:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:32:44 2025 by rpki-client