Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: Ta7WVMp64VW/6Lm2ItOJ0+UovjB7jYIxxmieDRdTsG4=
Subject key identifier: FF:8B:0F:36:93:DF:A1:A9:7A:E8:DC:18:28:2E:C2:14:89:5E:75:C4
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 0198D5F1A3B2FB6F0AE9A1E369B3A21409F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: wcEaMMzkcYwp+4OPTJrsHKqSVF1UnEHZDPJceBt3QkU=)
2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a3:b2:fb:6f:0a:e9:a1:e3:69:b3:a2:14:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=ff8b0f3693dfa1a97ae8dc18282ec214895e75c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:d9:3e:ad:48:0f:1e:08:c4:34:55:0d:f4:
7f:4e:f9:63:4b:14:70:46:ac:01:40:63:ba:e6:d6:
49:1d:49:cd:e2:07:64:4e:a1:91:3f:ea:52:e8:d4:
bf:66:6b:6e:c3:ae:9f:77:ea:bb:89:b2:4f:0c:5f:
4f:b8:42:3e:e6:c5:0c:38:36:7b:9b:84:8b:d7:4a:
c4:67:8d:78:42:90:57:a7:df:c8:cd:18:bb:cb:e5:
48:47:91:70:39:d6:fe:80:4e:9d:d5:4c:48:c3:25:
4a:f3:a8:ca:2d:4e:43:ef:46:af:9e:ae:b6:4c:c0:
65:42:e1:e9:8a:d8:84:ed:6f:bd:7c:07:8c:80:69:
19:ad:5e:05:f7:41:1a:aa:3b:98:48:91:7c:6c:87:
58:9c:81:1a:04:f4:92:36:4d:0c:d3:27:77:f4:a3:
74:30:84:0e:5b:fd:c4:55:53:5d:59:41:86:f7:4f:
86:5c:e8:ba:09:3e:51:62:ca:8d:24:36:b7:60:6c:
c4:41:31:26:77:56:09:10:67:09:58:6f:38:3b:51:
76:a1:1f:57:a7:0e:64:b7:dd:fa:57:3e:e0:9d:ad:
3c:98:7a:25:0f:e8:33:0c:26:c9:20:2a:33:25:4a:
29:ef:4f:7f:0c:7f:f7:d3:e9:57:90:e3:38:bc:07:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:0F:36:93:DF:A1:A9:7A:E8:DC:18:28:2E:C2:14:89:5E:75:C4
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8a:f7:ca:ac:62:51:e5:74:a3:f5:3b:a9:ac:18:ca:60:72:
fd:90:c2:16:7a:20:85:cd:63:aa:e7:07:03:eb:de:83:8b:34:
a0:ea:de:2d:b6:aa:4c:84:3c:08:84:a5:e7:80:ba:9d:fa:ee:
da:8d:1f:8e:2b:fb:a2:00:db:e0:ac:b8:69:8e:99:37:d1:06:
ba:9a:43:69:e2:00:99:60:c8:6a:56:c7:d1:ac:df:f5:08:bc:
d1:fe:24:67:89:fc:62:42:4d:5f:d3:5c:44:7c:70:54:a5:41:
3e:fe:3d:e5:42:aa:db:aa:c4:06:b5:b4:3b:96:fb:79:68:fa:
dd:06:df:de:9b:4c:ae:db:63:56:af:13:8d:68:59:eb:d0:de:
9f:c9:8d:7e:3c:1e:cf:ec:78:6e:fa:fe:18:fc:f7:78:c1:00:
cb:d7:88:68:a6:0c:29:79:e6:86:56:cb:ee:cb:49:f3:4a:58:
07:49:73:e4:e6:f9:24:d2:14:52:d5:e6:48:4e:ae:52:f3:7b:
ab:5c:33:a4:49:5b:ec:da:75:f5:1e:8e:6c:78:2f:71:5c:b7:
f9:ff:fa:70:ac:76:8c:71:f2:9a:fa:87:75:26:38:b4:d5:e0:
d5:bd:39:2b:30:c2:29:2f:62:ab:08:25:50:a8:12:1e:2c:3e:
e6:80:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:31 2025 by rpki-client