Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: Ar5eGlcZo+58ogRgie70/kj5N2YDRRYL2AiWtUJxh7I=
Subject key identifier: 58:45:C8:F0:8C:36:81:9A:9F:3B:56:C5:CD:4A:E3:37:79:6C:21:47
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0196AA9E7EC70E8DFC282822B7B315E5636A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0650
Signing time: Wed 07 May 2025 12:00:35 +0000
Manifest this update: Wed 07 May 2025 12:00:35 +0000
Manifest next update: Thu 08 May 2025 12:00:35 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: 8BERuqg0OR+e2z8NMn69LYXCQ/17ECWyqBtmNo5NvmI=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:7e:c7:0e:8d:fc:28:28:22:b7:b3:15:e5:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: May 7 12:00:35 2025 GMT
Not After : May 8 12:00:35 2025 GMT
Subject: CN=5845c8f08c36819a9f3b56c5cd4ae337796c2147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:ce:a8:53:3a:3e:a5:16:85:a3:a8:54:42:
97:b3:66:4b:7a:29:86:b9:bf:d0:b1:23:9e:ff:e4:
52:be:b4:23:6c:7b:c9:07:1b:56:65:e9:2b:c3:66:
b7:f4:8c:b2:79:8f:35:52:97:e9:9c:8b:e6:d5:53:
d6:3c:c4:80:20:9c:a0:d2:0f:2c:77:71:91:10:df:
2e:4b:1b:76:f3:a4:ff:b0:a1:4a:dc:04:38:2c:1f:
d0:a9:25:db:c1:6f:38:b9:37:6a:ae:18:f9:05:fe:
e8:a9:c6:ce:7a:37:f4:1a:ce:20:75:ab:42:af:a5:
be:41:af:53:81:55:9e:a3:6a:a3:95:f4:2a:22:1b:
03:a0:b0:4d:45:3c:92:d5:b4:04:35:d7:ec:50:c9:
87:87:ff:70:8a:a3:f8:93:6e:8a:56:18:2c:39:96:
e7:6e:82:2f:c7:f5:a7:97:e8:5e:58:35:09:26:43:
df:45:6e:d3:78:d3:44:75:23:a4:df:93:5e:d7:fd:
12:b7:55:53:ce:6e:24:cd:49:16:d1:d3:3e:50:2f:
46:42:65:f0:cf:e5:4b:d8:64:64:1f:c6:a3:f9:59:
30:d0:69:67:bd:71:2c:8a:01:66:49:88:0a:62:e7:
cf:1c:bd:cf:64:07:ce:59:27:ac:f8:10:ec:ca:37:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:C8:F0:8C:36:81:9A:9F:3B:56:C5:CD:4A:E3:37:79:6C:21:47
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e2:5c:a7:01:e2:cd:88:d3:3f:23:00:dc:a0:a0:ad:50:39:
92:92:70:6b:69:0e:0d:c9:92:b8:e3:b2:00:29:ce:36:b9:d0:
52:12:7c:13:c4:7b:6a:36:12:d0:b2:e8:d3:9e:60:4b:64:a8:
29:37:d2:1f:85:8e:85:b2:bc:c5:88:8d:20:d1:e2:7c:af:3a:
13:f6:b5:7c:c2:52:6b:f0:06:4d:d0:d6:80:36:e7:b8:02:0a:
d1:74:0d:a9:ac:37:2b:86:ef:8b:bf:84:2c:5a:50:64:07:ee:
4a:20:08:a1:79:c4:e1:2d:36:af:74:04:d0:47:e5:fd:1c:90:
2f:6d:4a:40:cb:63:3f:b9:5d:b5:a4:e4:ab:f8:ee:ee:7c:85:
f9:2a:cd:fb:32:8b:af:52:4f:56:f2:89:cc:9b:30:bb:91:f8:
17:e4:b8:e9:1e:c7:11:55:8a:02:75:d6:f7:97:b5:b9:c6:44:
60:72:2d:67:bb:21:b9:3f:78:f7:8a:8a:8c:05:99:91:68:a2:
30:f3:f5:80:e3:8b:fd:05:2d:8f:32:92:21:c1:39:3f:11:9f:
98:5e:fe:c0:22:be:da:a0:0c:13:d0:d4:b1:d4:a4:64:f3:64:
26:6c:f7:bd:01:c5:16:92:14:dd:f0:2e:ab:4b:2a:e0:77:e5:
47:31:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:45:00 2025 by rpki-client