Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: J+ZSqkx6socMPgDatmCyVZAuzP4h3Mr3HghmZiU5k58=
Subject key identifier: 70:ED:01:A8:E5:0B:B1:19:AB:28:2B:98:B1:74:CD:8F:6E:5F:BA:54
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 0198D5BB9A3DE123187663D8DBA287267C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 150D
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: T+e1FtSJ0+C3I5RXpKZVh+gDHFC7pK8UH4CgUR1LXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9a:3d:e1:23:18:76:63:d8:db:a2:87:26:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=70ed01a8e50bb119ab282b98b174cd8f6e5fba54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:6d:9f:19:78:15:1c:e0:b0:e5:e3:44:5d:
8d:53:1f:dd:c6:ff:83:30:2c:2c:f7:ca:9f:78:37:
1d:a1:1b:86:aa:7e:09:35:0b:bd:bd:0d:c1:02:7a:
6c:c1:89:01:83:b3:39:e8:2e:5e:c2:68:1c:c0:42:
91:d6:c1:ac:67:59:2d:08:84:69:8f:6f:69:40:5d:
b0:84:8b:c6:0d:11:31:54:1b:a6:cf:d5:1b:f7:49:
d6:ef:d3:a9:b7:f5:b2:18:74:a8:38:4a:7f:9b:f4:
6d:a7:3c:e2:4f:be:4f:83:5c:17:a1:2f:ed:ee:08:
af:0b:d2:0b:80:7b:46:d2:dc:15:7d:c0:d3:5c:eb:
5a:3f:5e:bf:4c:1b:e5:4a:3d:ae:8c:f7:4e:69:3d:
de:64:8e:09:3f:d3:35:35:3e:f6:ee:0a:9a:61:83:
44:b1:03:10:d8:83:d7:ca:9e:1f:53:fd:83:ab:ca:
d0:11:23:5b:a9:8d:4f:99:c6:64:ad:f4:36:e8:62:
c2:37:38:e1:29:19:9f:d7:6b:cb:e9:d4:32:77:a2:
38:0b:9e:eb:cb:05:3b:10:9b:f3:05:24:9f:34:c6:
1d:66:a8:39:85:c0:a7:d6:e3:92:21:de:bb:ab:28:
e3:af:aa:25:09:af:77:27:f5:10:c1:e1:57:1c:24:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:01:A8:E5:0B:B1:19:AB:28:2B:98:B1:74:CD:8F:6E:5F:BA:54
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:4c:f7:78:e6:e3:63:6d:c7:54:96:42:02:37:c4:ba:3a:
69:0e:53:d6:86:a6:02:af:43:31:0b:5e:87:0a:f5:10:eb:2a:
d9:30:05:b3:29:98:ea:85:d8:79:d8:08:04:c8:71:2b:7a:07:
6b:ef:f4:28:c7:d3:d8:5c:9a:49:ab:4f:6c:dc:57:51:8f:6b:
fe:64:38:b0:0d:43:34:59:3d:23:95:8e:da:68:43:f4:2b:a9:
f7:96:1d:74:0c:8d:35:d5:dd:ce:36:8b:ff:a3:92:41:55:a5:
cf:cb:a9:c7:cc:a3:46:ce:f2:fc:58:b5:ed:bc:41:c9:9a:50:
99:a3:29:67:0e:94:b1:ef:e7:de:fd:b3:ec:fc:f0:f4:eb:b6:
92:29:fe:ca:6d:3f:44:e8:01:b7:68:f8:99:32:17:79:dd:4d:
6a:36:5e:71:88:82:05:c6:51:61:7e:f0:bc:c9:1f:ae:7d:72:
71:3f:67:76:c0:54:df:bd:37:7c:c4:fb:20:c6:a6:69:8a:cf:
80:16:67:17:85:3b:3f:14:9a:c3:f4:00:de:3e:16:f0:4a:67:
4a:ba:1c:28:40:d7:7d:85:44:8d:13:82:f4:6d:b8:22:4f:a7:
2b:c2:90:c9:1b:ae:72:8e:ac:51:99:4c:04:33:2b:f1:56:d6:
08:fa:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:50 2025 by rpki-client