Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: VCbEzNy8Q4n4YjbOciIty/X02UJirRnWKkTncZbUzO0=
Subject key identifier: 25:B3:AB:01:C5:C2:02:54:C9:09:AE:B1:24:67:1B:AC:A6:42:84:04
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0199FC2141CEC6763990DB6782BFA5473497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 031A
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: +ulMmKJYNo1L1LEMy2a0QdwhJldgWaYMIj7sdq8Zpm4=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:41:ce:c6:76:39:90:db:67:82:bf:a5:47:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=25b3ab01c5c20254c909aeb124671baca6428404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:cc:1b:1b:a9:cb:8f:0d:d6:63:f5:91:6e:
1e:bc:f9:69:d3:01:73:2b:0c:50:28:96:26:44:66:
ae:ed:2e:91:77:aa:8f:d8:2e:5f:b4:4a:b7:a6:b2:
cd:40:d0:3c:b5:35:89:bd:b2:59:69:72:c9:c6:bc:
a4:e6:cc:58:35:b8:cc:82:30:d9:78:cf:02:f4:6e:
f5:a4:8e:5c:54:af:84:fb:bb:cf:0c:83:33:24:b2:
4f:3d:c6:c1:86:79:9e:5d:94:c3:33:f3:b2:4a:45:
35:46:b9:f3:e6:60:2d:33:73:a7:3e:8a:23:71:2e:
b0:73:9e:2a:d1:2d:bb:1d:e8:9e:4f:49:bb:b7:15:
ae:28:ef:d2:df:8d:08:14:75:4d:bb:64:ae:17:6f:
c2:18:bf:60:56:26:ff:36:cf:be:f0:04:39:1a:a7:
41:0d:1c:6a:1a:f9:fb:31:c4:cc:04:97:cb:39:fb:
96:b4:f2:6f:c3:87:ef:e0:a0:22:ad:04:7b:26:fe:
e1:ae:6a:9f:d5:ec:5e:78:7e:e3:0d:44:fa:dc:6d:
4e:67:96:9f:13:7f:47:f4:9a:33:d6:31:34:b7:53:
c7:1c:81:71:c8:be:03:3b:35:9d:08:d7:12:46:2c:
c8:06:39:3f:d2:82:66:7a:94:ba:62:64:12:f0:36:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B3:AB:01:C5:C2:02:54:C9:09:AE:B1:24:67:1B:AC:A6:42:84:04
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:0e:38:07:7a:3c:ac:50:4b:00:36:f1:18:78:26:2b:e5:
4c:6f:61:31:fa:2e:75:fb:1a:9a:36:c5:f1:25:f9:b2:f4:63:
8c:4d:59:f3:4b:96:6f:a3:57:7f:22:a8:df:4b:2f:46:04:42:
04:33:35:e1:10:08:48:21:86:75:90:a2:e6:b6:80:3d:7d:9e:
09:d7:f4:36:05:03:75:c6:6e:ac:e4:4c:b2:6a:69:bb:4a:93:
91:e2:00:9b:7a:c4:2b:67:a1:f4:5a:73:04:18:34:d2:15:3f:
ad:73:3c:67:93:3d:41:5d:44:f5:d7:75:44:ef:9f:71:4f:5a:
42:57:fc:2b:aa:61:e1:f8:b0:6f:bb:07:96:01:28:44:93:28:
92:c3:26:9b:b3:3d:fc:a8:d7:de:05:b0:14:ea:24:43:11:da:
e7:e8:5c:5d:7a:14:97:ab:99:2d:8f:02:22:54:69:45:32:7f:
40:86:93:ed:92:72:e9:04:3f:46:8b:2e:0a:a5:16:35:e2:b6:
cc:8f:be:c0:20:08:df:96:7a:d9:97:f4:67:a4:c7:98:cd:d8:
b2:a7:8d:8d:e6:ef:68:b5:c7:db:29:8c:db:0e:06:96:0c:f5:
02:d5:59:97:4c:e0:80:a9:b9:a4:a4:e3:e3:a8:49:c1:9e:ec:
97:9a:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:41 2025 by rpki-client