Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: mGI+WRo7fdFFaaQWXo3UrBjJ8Rad+E3lCNKSwQZZfqI=
Subject key identifier: A2:69:03:C3:74:D6:E8:8C:C8:2B:8B:E6:0B:A3:CF:0E:4B:76:BD:D5
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 0197B77C36118CD79B185B44D8AC23D9DB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa (hash: 7Q2JdX8Sk5ec7oQfahOu2+Hx1b1UUmWGaNbADZbL4l4=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: HiYqyLlBuVPH9gI609J+DsxU4WOMGUwg7UNw/OlQKRM=)
3: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:36:11:8c:d7:9b:18:5b:44:d8:ac:23:d9:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=a26903c374d6e88cc82b8be60ba3cf0e4b76bdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:19:ea:d6:41:d0:bd:bf:ee:19:51:d7:b9:
6d:2a:30:6b:4e:f4:55:cc:28:8f:39:48:63:91:a9:
c9:22:1a:a4:f4:7e:83:24:8e:6e:49:dd:3b:28:bc:
db:42:9c:5e:b6:f3:fc:37:e7:aa:71:4a:5b:b9:82:
6c:12:dd:5d:09:6d:cb:51:b3:c1:81:61:19:a1:e1:
83:db:3a:0a:d1:c1:b4:fc:e8:00:a6:f7:21:0c:aa:
17:2d:c0:9f:9e:4c:51:18:a8:d3:9c:c9:ce:ef:92:
6b:7c:b0:3f:cf:65:43:2f:df:69:34:b2:0f:0d:74:
d7:fc:3e:4f:f9:05:9c:4a:3f:36:3b:cc:3f:09:a2:
ff:e8:0b:4a:bc:84:92:82:60:bc:66:a4:19:27:f9:
8d:ea:64:55:bf:4f:c0:75:49:6e:c3:4d:ae:c8:3f:
06:91:2e:8f:af:2a:2b:e7:30:2f:63:b3:a9:f8:a6:
e2:fd:a1:d4:e6:65:24:00:4e:8e:df:63:54:de:1b:
a9:d6:1b:d0:f9:35:1f:f8:b5:4f:0e:df:de:0d:86:
de:33:1e:10:2c:bf:74:ff:3d:0c:5d:1e:98:e9:8f:
46:17:6f:63:68:15:c3:79:a8:56:7e:f8:e1:2d:77:
8b:4e:80:8e:ef:4f:c3:ca:1b:ca:cf:dd:bc:95:33:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:03:C3:74:D6:E8:8C:C8:2B:8B:E6:0B:A3:CF:0E:4B:76:BD:D5
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:8e:1d:57:c5:60:77:ba:c1:d0:cd:70:e2:95:f1:83:a3:
cc:20:8f:e4:27:91:1a:90:b7:ca:81:68:5a:60:06:11:f5:69:
e7:ad:68:bc:cf:03:04:1e:f1:ea:6a:2e:23:db:00:8d:b2:c8:
0d:20:f1:ff:70:0f:51:26:27:2e:7d:3c:25:4b:fd:90:a3:77:
2f:f6:9b:9d:80:62:0f:a1:de:e5:cc:5d:51:96:98:0e:34:3a:
fd:fd:0e:f7:d7:9f:21:b1:9a:50:4a:cf:4f:f1:fa:8f:95:fa:
fc:0e:0a:ab:b7:c3:3e:ed:23:a2:a6:4d:8a:50:23:cf:56:01:
5e:27:93:af:ce:b4:07:15:34:97:59:4a:ca:b8:63:97:3e:d1:
e7:22:d1:2c:11:08:33:d5:da:09:45:32:a0:97:d3:98:31:d3:
6d:64:d5:05:a7:d4:14:aa:b9:c1:c6:83:3c:40:6a:7c:5f:8a:
49:2c:90:80:a9:51:89:26:0e:e7:38:36:26:a3:50:86:67:cf:
4d:13:da:aa:20:d3:ae:8c:20:27:f1:05:63:5d:c9:ed:c6:e9:
e6:29:38:71:b9:75:86:97:e0:5d:f6:ea:2f:5a:c9:ec:b0:52:
8c:fd:3b:84:75:33:0b:0e:15:0e:21:4d:92:33:e8:0a:b8:f4:
53:d6:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:31 2025 by rpki-client