Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: c5Mw1lsbJofXdhZQs52Or2KqwDISJvsyKw0/scyAi2Q=
Subject key identifier: AA:BE:05:22:95:CB:9D:B5:64:48:F5:EF:C1:0B:37:8C:A7:91:B9:CB
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0196C23978E0AB34F3B4B885F6C43917C96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 02:01:08 +0000
Manifest this update: Mon 12 May 2025 02:01:08 +0000
Manifest next update: Tue 13 May 2025 02:01:08 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: WP+20Y1Zws4kKV/wVZZk9DoZV8lBpMSV0wBCSp8N7GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:78:e0:ab:34:f3:b4:b8:85:f6:c4:39:17:c9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: May 12 02:01:08 2025 GMT
Not After : May 13 02:01:08 2025 GMT
Subject: CN=aabe052295cb9db56448f5efc10b378ca791b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:57:7e:b6:45:05:cf:3f:72:74:0f:94:2f:
61:76:6b:42:12:93:dd:33:a8:c5:35:80:b6:b0:89:
3c:78:f4:ff:5d:c6:a2:4c:96:97:b6:3e:a0:2d:6d:
cd:b9:ec:6f:c4:88:db:3b:62:a9:0b:f4:c9:63:ae:
b0:21:a3:60:70:a3:32:d2:de:0d:8a:e6:e5:3a:3c:
65:8a:46:db:bb:2e:e8:86:d8:c9:db:33:72:e4:6b:
89:47:29:00:6e:7c:04:02:5d:a3:d1:a0:34:77:6f:
bc:f2:3c:45:3d:73:a9:94:a2:fb:a7:37:f1:aa:52:
6a:aa:be:cf:4e:96:cd:4f:6d:7a:62:42:13:d2:e1:
c7:c2:e8:8d:76:40:62:60:43:1d:d3:c5:86:e0:64:
77:10:2c:20:1b:39:32:6d:d0:e3:d0:54:f9:5e:de:
a2:06:7f:94:cf:e7:c8:50:c8:db:02:f4:2e:a5:7b:
87:93:77:19:46:38:9c:a8:c9:07:d7:b4:ef:22:a1:
ee:10:37:70:e1:8b:b2:0a:c4:19:ac:3b:3f:30:98:
20:e0:9d:16:69:f7:99:09:c6:ef:59:47:ac:40:3a:
75:74:07:03:d5:ae:73:70:05:95:ee:53:d5:d0:11:
bc:31:71:99:3d:1f:87:f9:5b:6e:fd:11:fc:19:4b:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:05:22:95:CB:9D:B5:64:48:F5:EF:C1:0B:37:8C:A7:91:B9:CB
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:ac:61:35:c6:4b:9e:de:ef:47:89:22:ce:93:da:4a:31:
e4:f2:db:1d:87:c2:d9:2f:b2:01:d3:b9:72:30:44:3a:cf:7d:
7b:28:1d:9d:4c:f4:6e:30:e2:cb:d1:77:1a:ab:8b:01:60:df:
e5:e9:68:31:b5:52:8e:1d:48:cf:09:25:fa:a0:6b:f0:b6:a4:
47:ff:fa:6d:c6:24:97:6e:5f:4c:1c:ef:ee:76:6a:d0:1d:6c:
dd:15:d0:70:b7:47:e5:88:2b:5f:0e:65:9d:52:76:0e:2d:a1:
47:9a:15:28:22:ce:70:0a:2f:7f:d3:ec:5c:5f:ff:a8:dd:be:
19:21:58:92:90:b0:51:fd:77:36:64:24:02:c6:34:96:ab:93:
8f:2f:67:55:06:f7:85:24:5a:d4:87:9a:42:f5:55:0a:6c:84:
dc:00:40:a9:93:96:0e:8a:ac:58:54:c5:b9:98:e9:fe:b5:6d:
6b:e1:07:12:b8:65:16:bf:33:20:dd:9f:9c:c7:3f:e0:6f:63:
b6:4f:e4:b3:76:63:fe:d3:7c:94:a5:9e:e1:7b:b0:3c:66:e4:
42:4f:63:7f:2d:75:13:1a:94:69:c5:10:5a:47:23:27:27:a5:
1e:d0:ef:6f:4b:7a:51:71:ea:fc:f3:e6:40:5c:09:f0:ed:8e:
a7:9f:d9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:27:09 2025 by rpki-client