Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: rOjNZEiC9eafH2saYal5gx9ENza3thPjerH7XTxHlV8=
Subject key identifier: 51:2A:0E:9F:9E:2D:05:6C:06:C1:5A:94:3B:85:11:EA:DB:67:E4:39
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 0196BFDCEE7C403A4D48C1B611CFB49CC09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 15:00:49 +0000
Manifest this update: Sun 11 May 2025 15:00:49 +0000
Manifest next update: Mon 12 May 2025 15:00:49 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: Y9Dz+sS2i+BhW3Hf5mp7sq9ykvjAbEW2WiVunA9KZoM=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:ee:7c:40:3a:4d:48:c1:b6:11:cf:b4:9c:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: May 11 15:00:49 2025 GMT
Not After : May 12 15:00:49 2025 GMT
Subject: CN=512a0e9f9e2d056c06c15a943b8511eadb67e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:5e:01:52:2a:57:21:7e:9c:67:12:3e:b7:
6d:32:ff:df:45:4c:c3:b1:cd:c5:42:91:4f:4c:77:
83:d1:3d:89:10:54:d8:71:69:45:31:3e:7f:e4:9b:
c0:01:53:20:21:0c:28:a4:5a:f3:ff:a1:ab:d8:09:
55:ba:0b:69:eb:7e:ef:92:e6:dc:b4:72:ef:7e:50:
50:98:ea:9d:2b:75:8c:e4:a8:bd:35:c2:d1:55:e2:
c7:51:78:1a:41:de:ba:54:52:fd:ac:a9:cd:83:46:
a9:ee:7c:02:91:4f:d9:9f:e1:d5:ff:86:d9:3e:b7:
99:90:da:5b:1d:a2:57:05:70:c1:a7:b2:82:e5:ac:
ba:40:c2:da:98:5d:a8:46:b3:e8:2c:fe:6a:e5:d9:
b9:33:d5:70:6e:51:b2:2e:dd:7d:ae:aa:8d:a5:04:
14:0d:94:52:91:22:ca:f5:57:79:32:e5:4b:7c:9d:
93:f7:e7:ab:43:d3:5f:7b:11:69:62:98:d8:e8:2d:
ed:68:17:44:7b:aa:e4:51:43:9f:ee:87:44:aa:33:
38:65:71:1c:7b:8e:b7:3a:ed:7e:27:df:bb:47:a9:
b2:aa:6f:2a:9e:3a:b1:d2:7a:2c:b1:05:33:38:04:
85:bc:94:8a:5d:c0:b3:90:48:35:91:4a:e2:fb:37:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:0E:9F:9E:2D:05:6C:06:C1:5A:94:3B:85:11:EA:DB:67:E4:39
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d2:cd:07:4d:48:1f:c8:4a:3e:10:64:dd:a8:3a:9a:2a:6d:
65:b0:c7:a3:d7:65:51:fa:09:fd:50:ef:82:dd:4d:5b:f4:a8:
be:04:c0:80:ed:c8:29:c9:89:97:35:af:36:23:1a:23:7c:67:
2d:53:f6:64:52:8f:54:0a:e3:25:ac:fa:81:1a:4e:b4:76:18:
db:72:71:5e:96:4a:48:16:fb:8a:55:f8:8e:f8:49:b5:19:cd:
fa:3e:e8:ba:05:b3:60:ec:d3:c2:16:a2:22:c9:6d:ad:e6:c7:
db:00:a9:30:61:36:85:65:9e:51:09:5e:63:4a:14:04:45:97:
9c:f7:96:4a:67:c2:e0:93:94:90:7e:08:04:09:dc:4c:f7:c2:
b2:1b:95:bc:1c:1e:ac:e4:7a:95:b3:f7:b4:1c:b6:9d:18:9c:
93:16:f2:a0:c2:2d:1b:d9:5f:64:e9:8c:5b:ee:32:74:48:28:
cd:eb:00:80:30:a7:a2:45:c0:42:c1:8b:b9:e4:3b:b7:a7:17:
ed:cb:1a:4d:48:d5:84:3f:fa:f1:12:8f:68:f0:aa:63:5b:75:
b3:5c:a5:e6:f3:f4:56:5d:9e:76:e2:54:e0:05:d9:94:c0:09:
13:c3:15:30:66:be:09:c0:ff:de:c0:4f:15:9e:63:e4:fa:07:
9e:59:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:01:38 2025 by rpki-client