Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: 6r7PqRhqn/xQCcFGMyzHY+Mq3eTT1BkUeKaiSLqOw+Q=
Subject key identifier: 6B:4A:C2:3B:AE:EA:EB:61:7B:CC:3A:91:F3:AB:F3:E5:DF:09:AC:36
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0197B6D7737E0A0E42316553488CDDA80AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 01ED
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: a1Rx1Mwn5GRBLK/pyafMdFxxZzXd9lr9GC3Ia4+5XZI=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:73:7e:0a:0e:42:31:65:53:48:8c:dd:a8:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=6b4ac23baeeaeb617bcc3a91f3abf3e5df09ac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:8b:63:81:80:64:bd:72:aa:1e:06:04:9e:
71:9c:0f:b4:c0:26:af:e4:3a:0e:72:4b:10:1e:56:
58:73:30:4c:1b:d2:6d:18:dd:87:fb:1c:35:70:ad:
72:23:0c:95:77:0c:0f:35:cb:e5:32:14:c6:51:ab:
9a:e5:4a:6f:24:e1:09:23:31:1d:5a:16:71:d6:d0:
7f:08:54:d8:7f:3f:ba:5e:fd:4f:a3:15:a1:2b:52:
68:3a:37:0f:fd:3b:9d:39:c5:ce:1a:72:aa:de:a5:
19:14:c0:27:0f:e6:1d:60:b7:68:44:4d:00:65:cc:
20:b5:20:10:1c:85:a9:b4:d9:8b:8a:5c:22:bb:fc:
7b:14:8a:ec:a1:bd:86:47:61:b4:ae:90:e2:ff:27:
bc:9c:36:4d:7d:d8:86:f4:93:59:f8:42:ce:11:47:
ed:a7:8e:ef:cf:a0:2b:de:22:b6:a3:94:61:e3:24:
35:4b:87:1b:f6:0b:60:bd:16:d2:7b:db:ed:ed:ab:
82:48:f8:f7:f1:47:89:00:3d:8d:0a:0d:c0:18:96:
b7:d8:fa:82:5a:e0:a3:3a:fb:7b:23:92:5f:c8:52:
37:c6:fc:87:0a:cb:01:ab:e1:bb:64:87:70:d5:4c:
43:28:aa:c1:bd:e5:b9:f5:73:3b:62:2a:5b:e9:10:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:C2:3B:AE:EA:EB:61:7B:CC:3A:91:F3:AB:F3:E5:DF:09:AC:36
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:88:ff:98:1f:f2:21:f5:31:cb:0a:13:dc:a3:81:1f:93:22:
a1:00:97:54:f6:c6:2b:1a:04:0a:74:fa:c1:69:72:62:ab:41:
28:6b:e7:93:e2:87:29:44:5c:92:40:00:a5:4e:de:9f:f4:67:
66:ea:f3:b0:4a:0c:c9:ff:39:09:b7:94:8e:4c:4e:5f:15:27:
af:fd:b7:ae:cd:f4:16:bb:a0:44:f8:7d:50:7c:e8:a8:0b:ea:
54:76:e8:b7:92:78:ca:d9:a3:b0:31:ef:86:d1:9f:51:33:5e:
e3:46:f3:88:82:5f:16:96:d6:fb:1b:27:ad:59:77:2b:44:42:
1d:92:12:1e:03:86:ea:c6:87:72:8f:37:1a:0c:03:09:a5:29:
5b:82:1a:f4:57:78:48:e9:82:1a:76:af:11:71:59:f1:bc:bd:
b8:7d:3d:75:ee:27:28:96:a5:a1:ed:c7:14:5f:e6:0d:83:35:
17:70:b0:9c:d7:50:58:44:1f:b6:97:e3:b0:44:b5:4b:84:52:
c0:f0:07:15:fc:8c:44:6d:a7:fe:99:b3:a7:7d:c7:9a:b1:b0:
be:fb:34:ec:5d:db:39:d3:2a:19:c0:37:6a:3b:26:59:72:3b:
13:01:a6:52:c3:90:cc:50:03:ab:23:42:6c:26:99:b8:cc:94:
25:57:7f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:29 2025 by rpki-client