Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: zwAJlEoH/E0CPg9/Ihf+O0TI9XujVLfJ/smWiJ9bURY=
Subject key identifier: 32:A7:12:09:27:84:2C:89:CF:D5:C6:FD:94:16:FC:24:0C:82:D0:F1
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 0197B70F4D6A978F6BFBEA6A4E222A4EFFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 02BB
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: EuOn4aDQgyVUH7su3NYTxDyuhO1dD9GaH6EQPuh5CfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4d:6a:97:8f:6b:fb:ea:6a:4e:22:2a:4e:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=32a7120927842c89cfd5c6fd9416fc240c82d0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:bb:bc:2f:a4:98:28:52:ce:78:84:d7:03:
8f:e9:cd:7e:5e:85:30:8c:2c:ec:b9:2b:f6:3f:7b:
aa:ca:99:04:79:71:d7:47:80:c1:b4:78:9e:9b:50:
dc:1c:80:c4:78:25:83:2d:91:f8:3f:dc:59:36:fb:
ab:7f:fb:97:40:85:10:f8:22:75:e0:ce:38:01:f1:
f1:02:06:11:f3:95:06:6d:41:06:cd:61:40:5c:70:
d3:34:1c:28:a0:68:cc:eb:42:40:3d:63:93:44:22:
10:a8:7a:0a:bc:44:28:8b:09:0c:32:27:72:13:84:
d9:5c:1c:8e:e7:e9:58:cd:39:5e:75:7f:a5:3c:9e:
62:ee:ce:0f:3f:0c:d1:11:fe:42:de:c1:59:91:70:
e6:74:42:4a:e1:7f:e8:d5:5b:b2:f7:9c:ba:1e:4f:
f3:e1:60:3c:0b:2c:33:2e:64:ff:18:1d:5a:ed:3e:
c2:49:6e:e6:5c:08:89:03:5f:79:1b:a4:e9:14:f2:
61:c0:36:1d:f9:10:a4:8a:22:7c:01:66:4d:b4:29:
89:cf:e7:ee:95:00:49:b1:b6:b6:3f:70:18:d1:71:
25:6e:4c:cd:d1:d1:c1:35:e0:fe:cd:c7:f9:9e:37:
e0:65:46:a1:83:45:43:eb:4d:aa:91:0f:52:80:76:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:12:09:27:84:2C:89:CF:D5:C6:FD:94:16:FC:24:0C:82:D0:F1
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:56:d3:8d:33:61:e8:17:c5:0e:bf:cf:82:69:b1:fa:97:05:
00:51:b1:11:04:2d:2a:70:04:70:b3:ba:1b:5d:de:4c:a4:91:
52:86:ac:6e:64:e7:9b:35:a7:25:40:0c:9f:4c:68:ae:2a:78:
c0:6c:80:88:46:ad:71:06:b7:4f:95:bf:fb:3b:6a:b0:78:fa:
b2:36:2a:a9:4e:95:aa:77:fb:23:90:c5:ef:03:6f:19:ea:dd:
9d:f5:64:f9:9b:3f:96:2a:40:5e:66:85:c8:a5:5c:49:61:4b:
ef:24:78:a7:18:a1:84:a5:23:e9:34:40:4d:2f:34:3d:06:8c:
b7:21:26:2f:8b:91:27:7d:24:63:af:1a:b2:fd:47:f9:82:a8:
b7:94:b5:43:ac:42:ba:a3:5f:29:06:7f:1c:70:f5:d9:94:cc:
84:ef:ca:14:c8:da:48:6c:7f:e3:fe:4e:0d:64:26:bc:0c:1f:
9f:38:ca:7e:01:45:29:73:8d:29:0b:3f:9a:55:e8:7c:2c:f8:
7d:05:a9:1f:7a:fc:7c:24:bb:ae:8b:2c:fa:7e:4f:dd:a4:9d:
19:51:d1:b7:73:1e:14:00:ef:57:97:07:2a:63:73:68:40:71:
86:c7:aa:8b:5b:55:ea:4f:a6:26:b9:cd:8e:d0:cd:4b:e7:ef:
79:92:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:59 2025 by rpki-client