Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: a8SdAnRxsLUI01srKiv2+Qall+hAcBfp0RUL25KPKqE=
Subject key identifier: 52:ED:C6:6F:2B:51:01:D4:B4:58:5A:AF:E8:CE:4C:33:CC:38:9A:64
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0196A051B5705B01B82964270AA54D1C632C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0A98
Signing time: Mon 05 May 2025 12:00:31 +0000
Manifest this update: Mon 05 May 2025 12:00:31 +0000
Manifest next update: Tue 06 May 2025 12:00:31 +0000
Files and hashes: 1: _zuXBXmwRFvmj3CquvOmn8JheAE.roa (hash: ANk7ETqbrjmt4b+Q7G24ONiVGStPl7zVIgQWYmZPBCw=)
2: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: k2jKEiCK0yyxMUh0OvVABHDId9oAcPJ2QpzUhzNGUVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:b5:70:5b:01:b8:29:64:27:0a:a5:4d:1c:63:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: May 5 12:00:31 2025 GMT
Not After : May 6 12:00:31 2025 GMT
Subject: CN=52edc66f2b5101d4b4585aafe8ce4c33cc389a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:20:b5:97:04:ef:eb:6f:9b:8c:7d:3a:98:
fe:96:9a:09:e0:0b:e7:b4:9a:27:f7:ce:f2:32:cc:
8c:ed:66:39:a5:36:6b:64:b2:6a:3c:69:12:ae:dd:
7f:c6:4c:53:1f:b2:b2:bd:f5:47:fb:51:21:81:ef:
33:b2:c3:d3:41:82:94:63:75:e4:a2:09:d2:07:58:
41:1e:c9:c4:bd:7a:02:7c:5a:0d:38:00:ac:a0:be:
0f:85:27:da:ba:c0:c0:b3:5f:c4:0f:d8:07:7b:86:
04:e4:c1:90:64:70:15:20:6d:3c:31:bd:89:c6:66:
a0:d3:f0:d9:38:9a:15:95:20:3a:ac:1a:ba:6e:78:
ee:df:f7:07:d3:7e:2a:bf:c6:e6:72:84:3b:26:9f:
b6:08:05:1e:d2:c1:b3:10:e7:71:64:a3:68:54:33:
b9:42:84:43:01:c1:86:0d:e1:8f:fc:08:1e:4a:1d:
8f:20:91:3d:01:48:7e:ed:31:3d:42:51:0e:77:6d:
fd:43:a7:34:33:0b:cf:d8:e8:41:a1:0b:6b:52:63:
bc:81:37:ea:a5:59:c4:10:f6:ad:65:cc:4a:f9:04:
46:18:11:de:c0:79:25:e6:d1:0b:36:3d:d5:b4:73:
0c:ce:f6:5a:89:1a:87:85:b1:ea:b9:5b:8d:a4:a2:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:C6:6F:2B:51:01:D4:B4:58:5A:AF:E8:CE:4C:33:CC:38:9A:64
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b7:48:69:05:6d:5f:d1:89:f2:99:ad:a7:64:cb:68:f2:15:
e0:39:15:c2:74:dc:66:75:68:68:10:5a:17:10:e0:63:2d:95:
a0:40:3e:a0:44:52:12:19:49:2e:d3:3b:70:2d:77:f7:45:9d:
6b:35:16:8e:98:a5:94:27:81:20:81:1d:e0:f8:45:08:b5:3e:
52:fe:1a:a7:14:49:17:68:6a:4c:1b:b9:a0:20:25:d8:e7:12:
c3:5f:91:45:76:94:06:2b:0d:bb:76:42:cf:4c:b2:6f:c6:78:
30:39:25:53:18:56:11:93:2e:f8:5d:9e:e5:22:32:bc:57:1d:
c5:d2:fa:ea:91:09:54:d0:60:ae:52:ed:95:78:66:68:ef:fb:
c8:36:6c:f0:e1:12:9a:c0:fe:60:15:cf:0a:fd:64:34:1a:04:
f1:07:f3:d3:0b:6d:eb:fa:6c:ff:38:e1:03:9d:62:9f:25:24:
f8:6a:52:dc:0a:96:9f:5d:b4:2a:58:4a:39:3c:a4:40:32:a4:
24:14:54:b9:02:f6:40:2e:68:b1:0d:7f:dd:c4:56:90:6b:00:
f6:b5:f9:14:14:88:b5:7d:bd:5e:55:07:9e:67:fb:f8:5b:51:
7d:85:71:11:57:73:12:ec:3c:e6:ef:92:c1:06:7c:37:4f:2a:
dd:1d:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:48 2025 by rpki-client