Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: Fhz68KI+Rfnqz5YlgW1NKZHgsxQlwb/AoOsN1higwlM=
Subject key identifier: 1A:97:88:86:A8:0A:D6:FE:46:CD:2C:47:F3:A5:F7:85:84:55:7C:00
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0196C94DCFF9DA771D3563E7968FBFBB55A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0172
Signing time: Tue 13 May 2025 11:00:42 +0000
Manifest this update: Tue 13 May 2025 11:00:42 +0000
Manifest next update: Wed 14 May 2025 11:00:42 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: sVwC1FYavNvFGFuEcrz7+SczTZyiDtWZiW4+6z7AEfc=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:cf:f9:da:77:1d:35:63:e7:96:8f:bf:bb:55:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: May 13 11:00:42 2025 GMT
Not After : May 14 11:00:42 2025 GMT
Subject: CN=1a978886a80ad6fe46cd2c47f3a5f78584557c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:0c:ab:98:84:1e:74:b2:d1:82:91:19:63:
19:60:c4:e2:9d:b4:5b:58:fb:56:f9:cf:ad:1b:af:
0e:be:37:ff:cb:5a:ee:ad:69:8b:c4:cb:d0:fd:b3:
2d:40:58:47:7e:02:69:51:d4:5e:f7:59:f1:b7:69:
42:4b:6a:8c:9e:27:15:16:73:04:02:30:d8:5c:42:
19:b5:f1:cb:67:40:6e:44:cb:ed:33:29:de:f2:e1:
56:27:bd:dd:b6:92:08:ba:0a:ef:3a:f2:1b:4a:0a:
ec:a7:b7:42:1b:22:ae:1f:43:7e:b6:54:7e:27:e8:
57:2d:55:1b:93:f6:f6:5e:f2:41:2c:59:ac:fc:24:
71:8c:ed:36:85:28:e9:12:51:c7:de:e6:10:1c:38:
29:47:d1:d1:89:c8:6e:7c:a3:e3:33:47:d8:84:95:
e2:8d:f7:9c:71:82:fc:3a:1b:9b:91:b6:fa:46:35:
9c:d1:e9:9f:5a:66:b3:21:f7:da:9f:30:40:4c:51:
e0:84:ed:83:77:a7:01:2f:7c:36:ee:f0:0e:a9:74:
d9:79:45:a0:51:6e:4e:2b:c5:a9:d4:b4:92:9e:35:
03:2c:f2:de:13:05:81:89:81:6a:77:30:a5:3e:ca:
b2:80:ee:de:ce:3e:9b:c4:53:19:ac:8b:2c:4a:62:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:88:86:A8:0A:D6:FE:46:CD:2C:47:F3:A5:F7:85:84:55:7C:00
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:c9:e5:4f:1e:54:be:c9:87:49:99:1e:1d:84:8b:29:fa:
5e:e1:16:0f:cc:a2:3e:0e:33:5f:9b:b1:8f:a2:a1:aa:70:72:
44:e3:6d:41:ec:24:e1:9e:65:75:e6:46:cb:14:9d:93:30:a3:
74:fb:40:2d:17:b1:98:81:bd:de:9b:7a:fb:b1:75:e6:b1:04:
18:c3:1b:d6:ac:6b:91:e0:5f:25:df:0f:b3:63:1e:e9:dc:e5:
81:69:34:cf:f8:0a:be:5e:37:65:d5:ed:24:5e:06:fc:98:94:
4e:35:9d:ed:0e:be:ab:4e:e8:53:a2:22:a6:e5:4b:60:63:71:
a5:b7:d2:79:b6:77:b8:fe:6d:07:b7:f0:2d:a1:f9:70:b4:e9:
04:f7:7d:91:dd:77:fa:92:46:38:0f:ee:18:eb:75:c6:3b:26:
0c:45:a8:c6:bb:0a:39:e2:82:57:27:1d:6d:8e:a2:f0:b1:5c:
e2:b1:c5:42:5a:85:6c:aa:c7:79:a7:4c:cc:14:d9:72:4e:23:
81:ec:1f:3e:86:de:2b:26:19:48:b1:07:16:f0:6e:ff:be:ba:
68:ea:81:58:5c:15:49:c8:6c:32:2a:b8:a9:39:86:3a:8a:79:
73:64:e8:66:26:bd:11:39:48:0e:84:85:fc:6c:c4:8a:57:d4:
42:2c:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:40:34 2025 by rpki-client