Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: 12uaiDZ4jNMpGG0dJtE2RuKvycyNq29NtPYCIsdgY5E=
Subject key identifier: 29:F8:72:B8:F1:AB:B0:4B:0F:E0:67:F1:39:11:4D:F0:DD:B8:7E:DF
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 01969E2C8706C195A745E411AFB7AFE78538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 03EA
Signing time: Mon 05 May 2025 02:00:40 +0000
Manifest this update: Mon 05 May 2025 02:00:40 +0000
Manifest next update: Tue 06 May 2025 02:00:40 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: z8n5wyUUJPIii/X8U/klHm90z36GC0rLhMSWEHMImBM=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:87:06:c1:95:a7:45:e4:11:af:b7:af:e7:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: May 5 02:00:40 2025 GMT
Not After : May 6 02:00:40 2025 GMT
Subject: CN=29f872b8f1abb04b0fe067f139114df0ddb87edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:90:97:84:90:02:aa:34:b3:19:ed:be:1c:
48:e9:19:32:b5:6c:e5:15:a5:46:03:2d:38:b0:b0:
b5:a3:82:ab:2b:ad:07:ab:b2:29:42:72:2a:62:d9:
b8:e6:87:b5:f6:2c:bf:02:04:d5:85:28:50:1e:93:
e7:d1:02:67:9f:43:ba:59:c2:3e:e5:32:57:db:0f:
87:a0:2e:61:53:0d:b8:7e:a2:67:4d:87:02:90:e4:
19:e4:6f:30:47:15:6c:4b:98:ef:ec:cf:4b:df:32:
29:e2:e5:80:7c:a5:4d:45:0d:58:d7:32:b0:c3:b7:
c1:0a:33:82:1e:19:23:21:cf:41:7b:b4:fe:b4:e0:
16:ba:2f:34:b8:c1:0b:f7:7e:db:f1:7a:97:6d:0f:
20:72:40:7c:e3:0b:5e:e4:c9:e6:11:e1:f5:e6:1a:
24:6f:c8:b6:d5:2f:cd:c8:48:77:7d:67:fc:47:54:
3e:bf:02:51:e7:11:07:04:97:8d:d0:24:c3:38:16:
59:37:85:68:f7:c2:e4:37:33:b8:e6:52:2b:2c:f1:
0f:71:9e:27:d3:86:21:84:54:41:a1:2d:40:39:ac:
93:00:e9:9c:86:99:82:11:a8:97:3f:62:3b:de:63:
39:f3:ab:7d:8d:22:b9:40:b1:6b:d6:f4:33:2e:b3:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:72:B8:F1:AB:B0:4B:0F:E0:67:F1:39:11:4D:F0:DD:B8:7E:DF
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:06:c1:10:2d:9f:da:1c:50:0f:7f:e2:72:24:38:f1:15:01:
37:4f:ed:05:27:eb:49:3c:4e:11:6a:c2:1c:a8:e2:73:04:98:
42:0d:82:3e:f9:c7:6e:9a:1f:c9:fc:a3:3a:43:24:74:aa:c0:
20:6b:7b:fe:b3:40:75:08:37:eb:9a:9d:92:cf:53:52:23:e3:
c3:fb:46:03:16:42:b1:aa:ea:d4:0b:b7:dc:62:26:cc:0c:f4:
b0:2a:57:ef:7e:80:69:15:46:50:06:8c:d8:1a:28:d7:ba:23:
10:e9:6a:f3:9a:0a:83:4e:fc:7a:36:77:0f:d1:59:47:8d:b5:
24:2e:c9:64:15:59:88:61:61:90:95:da:63:f5:07:02:f8:c5:
fd:6f:37:b2:97:9f:3d:cb:d8:fc:41:25:7f:bc:f0:ae:17:e0:
75:c5:2e:63:33:56:8e:cd:c0:ee:72:5c:77:a2:52:2a:ce:03:
1b:d6:e8:17:69:34:9c:b3:5f:18:5b:d8:46:5c:91:ae:12:4d:
d8:b4:09:83:0f:d4:ea:89:75:d3:6a:30:f0:59:ca:7d:89:20:
9c:c9:b1:3d:cb:d9:45:17:6f:9a:c4:b8:60:47:6d:2c:ec:fd:
44:60:40:e1:a6:f2:14:22:0e:d6:e7:18:d3:95:2c:30:05:a0:
66:91:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:14:31 2025 by rpki-client