Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: 6mnfN5f5nntbJSK5Nni7jZyRBHYbpspdR7+7TuRXDI8=
Subject key identifier: CF:9B:BF:89:E1:C4:95:FF:5E:60:33:DA:D9:5D:A0:C7:D6:E9:1A:91
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0198D54E98D9BA5CA0362BA9C478A26B2B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: sYKwGasBSolt62Ja0ZXG5wsGgHcwXsdkx/dUlXbuuWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:98:d9:ba:5c:a0:36:2b:a9:c4:78:a2:6b:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=cf9bbf89e1c495ff5e6033dad95da0c7d6e91a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:40:13:e4:ad:f8:c8:a0:73:e7:a6:b1:72:
0f:c4:ab:62:36:e2:1a:93:0f:b0:d4:f9:73:c2:d9:
63:fc:55:27:40:42:43:ab:b4:d2:5e:aa:5b:99:0a:
ab:ff:b3:b6:df:90:6d:d6:ba:4a:29:95:73:b6:64:
fd:3e:5c:24:e6:f2:8f:12:20:e1:1c:a7:a5:e8:c0:
7f:c4:67:b8:c2:26:53:96:d2:ab:bb:3d:e6:94:a1:
90:54:de:73:be:cb:3a:7a:d6:fb:02:7a:2e:90:b1:
55:a0:11:8a:71:82:27:99:c1:9c:6c:15:ba:73:0e:
2e:67:1a:e2:6b:0c:03:64:11:c8:b2:42:64:60:5a:
18:c5:4b:d5:82:e6:d5:3c:11:91:88:29:05:86:99:
d5:5c:4e:fb:fc:6d:c5:ec:c1:36:e1:34:6e:61:1b:
8c:bc:f5:bb:f2:89:4e:20:3e:7e:15:22:a7:8c:19:
da:eb:08:4e:80:ee:39:4f:50:2e:9c:6a:6f:b5:72:
7d:9a:08:23:fd:c5:a0:11:d1:93:e5:8a:8e:d7:88:
4c:9d:0d:48:ad:96:18:dd:0a:fa:38:c8:e2:98:98:
0a:d3:62:91:66:1c:0e:cb:c6:e8:a0:a7:ce:51:50:
c2:43:4a:0f:23:f8:d2:ef:5d:88:36:be:25:db:46:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:BF:89:E1:C4:95:FF:5E:60:33:DA:D9:5D:A0:C7:D6:E9:1A:91
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c0:5c:d9:71:f6:5c:2c:4d:d4:81:f3:fe:80:69:5b:4a:cc:
02:7a:ee:2b:32:63:b5:93:57:f9:b4:8b:f3:06:17:f9:7f:fa:
4c:f6:de:33:9d:cd:bf:41:86:2a:9a:10:1d:08:23:fd:d9:95:
42:4a:67:7f:a0:01:cb:84:15:24:8d:5e:8a:ca:0f:4e:e3:ec:
e0:aa:1d:d1:64:6c:4f:cd:73:02:33:b3:64:69:dd:eb:b7:ee:
84:88:95:ce:29:eb:d6:11:a7:a9:e6:7a:5f:f4:24:d3:26:bc:
d5:ba:fa:86:99:85:01:08:69:b0:11:92:9c:9b:6d:4e:19:6e:
9d:6c:67:74:bf:cd:5d:d8:21:ce:e4:05:c1:1f:55:d4:0e:a2:
2c:5e:43:e5:0f:19:f0:f8:9e:68:26:1a:5a:bd:33:2c:9c:2d:
9a:cc:44:21:2d:3d:49:65:12:5f:a6:11:d2:49:d6:78:38:eb:
8e:18:a7:65:14:48:c3:c0:16:60:7f:f7:86:a8:2a:29:5a:fb:
7c:66:3d:b7:70:d5:23:86:0a:04:47:78:a8:81:82:29:92:e3:
59:31:d5:81:2d:5e:c1:bf:35:ce:e9:81:71:36:9b:d8:33:14:
86:8c:d9:97:9b:91:34:4b:72:e5:a1:7c:8c:ca:11:1e:25:50:
0d:57:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:18 2025 by rpki-client