Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: KU+g8FIttM5Jf3GfiZzrQm5k7Wlvo4vTPUTHajyUfVU=
Subject key identifier: E2:F9:26:B0:11:5D:35:97:6D:8E:AC:A5:95:4E:06:5A:F7:C5:78:52
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 0196A12D7549B7A10E8D6A222E92E148E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0C06
Signing time: Mon 05 May 2025 16:00:32 +0000
Manifest this update: Mon 05 May 2025 16:00:32 +0000
Manifest next update: Tue 06 May 2025 16:00:32 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: gjhDtOM6NqmlXN/7F2356Buj03TDZkadHPg2GD+43IU=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:75:49:b7:a1:0e:8d:6a:22:2e:92:e1:48:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: May 5 16:00:32 2025 GMT
Not After : May 6 16:00:32 2025 GMT
Subject: CN=e2f926b0115d35976d8eaca5954e065af7c57852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:c6:e7:5d:07:d3:28:94:35:ed:9d:d1:ee:
79:8f:b3:07:bc:b4:6f:ac:47:80:f1:47:24:ed:a4:
09:87:05:22:ef:42:72:e0:5e:32:8e:8a:c7:c9:59:
c2:fc:d0:d3:2f:88:05:53:0f:85:f2:c0:ab:79:5c:
22:6a:15:50:85:4c:b7:f8:8d:91:3b:6d:e9:2a:e6:
93:e3:a0:d5:7c:ba:5c:a5:8c:3c:82:e5:81:30:43:
c3:a8:f7:8c:1c:7b:96:a8:67:57:bf:0f:69:b9:21:
3e:7f:e0:59:2a:15:64:7f:ca:fc:21:48:ac:31:69:
08:a5:cc:13:cc:40:eb:5a:60:23:5b:bc:94:82:4c:
0a:5c:75:41:ee:6b:97:dc:98:d7:a3:44:eb:db:5a:
ca:95:65:f0:1f:8b:44:6e:d4:f0:15:02:16:5b:94:
f9:7b:ec:f5:a2:86:e9:ce:2e:4e:4b:65:4f:b6:a9:
4a:78:8c:5c:49:13:4e:10:6c:94:74:b5:e0:ed:6c:
10:51:30:01:79:8e:eb:31:76:c0:ac:bb:d6:93:81:
35:90:cc:8e:62:d2:40:bd:14:5d:68:d3:95:86:1c:
56:f1:77:e1:78:12:a8:00:b1:fc:c6:70:ad:76:6e:
d6:34:13:60:f7:be:35:70:11:9e:c1:88:b7:09:30:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:26:B0:11:5D:35:97:6D:8E:AC:A5:95:4E:06:5A:F7:C5:78:52
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d9:aa:60:bf:ef:c3:74:66:5d:33:1f:59:2c:65:65:9d:51:
22:d3:44:05:eb:d6:19:50:80:05:82:2f:89:6e:7f:24:45:76:
3d:89:43:f2:be:d0:0e:50:02:29:3a:60:6f:e7:4d:14:c4:8e:
b2:63:ff:c6:71:0d:e0:1c:f2:4e:10:39:53:87:99:67:65:c4:
86:f3:13:2c:77:ac:93:5a:ab:e0:9b:fc:df:39:13:5c:a7:ab:
da:c8:02:c9:fa:7f:a5:3a:46:8c:c0:f4:e3:9b:48:c6:90:74:
97:61:f9:f7:c8:71:00:0c:e7:cf:45:0c:47:bd:11:90:de:f7:
83:49:fa:63:47:81:6e:05:c6:80:62:53:25:48:2b:de:02:27:
1c:54:29:68:4b:83:bf:98:7f:7d:49:98:3e:99:a6:4d:12:ed:
ed:7c:88:3b:ca:45:7b:ed:80:fd:2e:df:f9:39:53:c9:6d:06:
3a:4f:10:9d:88:b5:ac:ae:0e:4d:4b:8e:2d:bb:3f:5b:30:9e:
f6:c4:73:ba:bd:86:6e:88:66:d8:8f:cf:17:c7:c8:62:1b:7d:
1d:c3:dd:54:18:ef:c9:60:d3:bc:9d:28:3a:08:ca:e1:70:08:
83:38:d2:d1:31:88:eb:c4:77:c1:48:52:b3:41:f1:53:8c:15:
96:33:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:20:36 2025 by rpki-client