Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: QkVypwVfoiAkTUEz6Ywm7BDmjHJCqdNCW08IS+ltKb4=
Subject key identifier: 3C:C0:4F:09:21:32:6A:AC:97:A8:75:4C:11:F7:2C:03:26:95:0C:70
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0198D4A7B6A83D9326B127A081EE501412A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0281
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: zNC5GkbeBWt39TLSNCl5pWYzCjoGwSw5Ddr9WQiZTpc=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b6:a8:3d:93:26:b1:27:a0:81:ee:50:14:12:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=3cc04f0921326aac97a8754c11f72c0326950c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:00:62:15:23:61:88:ed:cf:e0:17:56:4d:
58:59:a9:db:e1:0a:9c:2f:48:eb:a2:2a:76:ee:e9:
64:c8:21:b8:57:3a:4e:5b:64:a9:78:98:de:1c:0e:
b0:1f:fd:98:d8:f3:4d:b4:9d:a0:c2:a9:b9:7b:81:
ea:0a:31:6d:42:3a:d4:4d:2b:3f:71:50:2e:43:96:
98:6a:30:02:3c:a3:28:9a:b7:09:35:c1:cf:ba:88:
58:e3:43:4b:c8:3c:50:c6:d3:b4:88:44:9f:75:0f:
0c:72:11:dc:1f:f3:ab:c5:4a:f2:5b:e4:4b:22:8c:
42:9d:90:0f:d0:11:9f:01:38:80:75:8b:1f:1d:5d:
2b:c3:82:69:3c:68:b9:fd:ae:f5:e0:63:2c:26:64:
70:84:04:0e:0f:4f:3d:e1:df:04:5b:9a:94:f5:c7:
44:6b:8b:84:56:b2:2f:dd:d4:57:84:50:66:7c:ad:
70:db:7a:7c:db:06:5f:86:76:fc:9d:4d:f9:5a:8a:
f6:24:31:1e:f1:b2:5b:83:42:c7:29:0a:0b:f3:3b:
d2:eb:c4:84:c1:c7:ed:6e:2f:ce:8c:1a:3f:63:8b:
fb:d9:fb:9f:55:db:86:25:49:6d:5b:5d:e6:0f:65:
1e:9c:ea:e1:c4:b4:df:db:9d:1b:58:1e:39:eb:8d:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:4F:09:21:32:6A:AC:97:A8:75:4C:11:F7:2C:03:26:95:0C:70
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6f:82:a7:48:21:e2:b4:f1:f9:e1:fd:0b:b2:f0:b1:3c:9f:
3a:ff:ba:da:77:91:e7:0c:7f:20:73:d6:f5:64:ef:6b:b0:a4:
cb:b2:8d:e9:17:2f:a6:8e:0a:50:94:49:59:51:62:86:bf:02:
bb:4d:4d:ac:25:68:6c:bf:10:0f:4f:e7:68:7e:ba:11:22:3d:
b6:b6:2f:88:a7:08:a2:be:f0:5d:60:8b:15:a4:86:d4:9e:c3:
cd:dd:0e:e2:87:d9:e8:b8:d1:24:bc:a2:2b:92:27:56:6a:2a:
c2:93:d3:77:86:54:8c:44:a6:c4:5b:de:a4:01:83:6f:ca:65:
c2:dd:8b:bf:c2:a9:6d:39:87:21:0d:0a:7f:fa:0c:73:1d:c7:
3f:03:15:f5:31:5f:86:88:a2:e1:95:a7:88:c4:30:11:da:ee:
51:cb:ee:a1:bb:75:56:62:30:bd:4c:18:e0:54:e9:bd:7b:10:
10:9b:d0:8f:18:ac:a1:52:be:2e:31:1d:8a:03:f3:9d:d2:b7:
36:6d:83:67:df:7d:2a:7a:27:33:a1:d0:cf:26:5a:d2:06:32:
39:3c:ee:64:c6:2f:f5:ad:e4:32:eb:69:4b:0e:7b:eb:f4:3c:
83:1a:07:d3:f2:5d:a2:46:77:86:b7:cd:cf:a4:45:23:9a:2e:
61:2d:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:02 2025 by rpki-client