Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: FTvnGmE0l50sBwfdAeQ0I9sngXJgB+F2tt5Y+a0wG8g=
Subject key identifier: 66:AC:64:5A:EB:73:84:34:5E:2C:A4:4F:06:7E:DC:25:50:EE:88:B1
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 0197B7455D1C8C242183A8FAC71395C76B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 03BE
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: tUDzw9qvKeK9wvvK0GbXqx9ipcanUOFg1C27Qaz78gc=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5d:1c:8c:24:21:83:a8:fa:c7:13:95:c7:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=66ac645aeb7384345e2ca44f067edc2550ee88b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:b6:ca:0b:0c:d7:e5:50:a1:3d:fa:56:60:
d1:d4:f2:b6:9c:ff:19:b4:6f:35:e3:8f:16:49:2a:
32:d6:cf:ef:d0:0e:70:39:af:cd:d6:0e:ad:33:bb:
b2:96:30:5c:e0:79:c1:d6:15:83:36:98:f0:77:a5:
ac:6b:61:45:60:78:90:4c:7b:cd:60:0a:03:95:8b:
b6:5c:6a:a1:12:dd:ff:e0:59:eb:ad:d4:44:8e:ee:
34:0c:62:90:87:04:40:11:05:c4:a9:58:5a:e2:53:
98:af:56:d6:83:99:ec:1f:60:95:7e:32:9a:8d:6c:
1c:3a:83:86:34:9d:b5:67:2e:4e:2b:f8:3c:07:ba:
ba:93:52:8f:41:d7:0e:7e:61:86:7f:45:e6:f0:7d:
58:62:1a:29:69:7c:b5:c3:da:79:08:c5:d7:89:89:
61:b1:85:f0:5a:79:a4:42:42:6f:cf:5b:03:47:79:
a1:51:be:82:33:5b:8e:e6:43:82:98:04:11:00:a3:
23:8f:08:6d:64:92:8a:53:d7:d8:56:d5:ef:5e:d1:
f9:7a:aa:77:ca:1f:e2:80:05:f7:07:a1:b1:e3:19:
ba:0e:f1:92:e1:69:85:fb:7d:e2:65:35:cc:3e:18:
c9:37:2a:13:ba:21:b0:a9:35:69:e8:ff:35:86:6f:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:64:5A:EB:73:84:34:5E:2C:A4:4F:06:7E:DC:25:50:EE:88:B1
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:34:5c:1e:41:92:e2:c4:2e:15:cb:22:fb:0a:5a:64:62:53:
cc:26:bb:78:58:47:e1:ca:28:cf:f1:88:6b:e3:f0:24:26:b3:
64:c6:de:da:4a:7a:3f:d2:0c:3b:c9:c8:a6:03:9c:9e:e5:81:
e1:7c:ca:a8:9d:b3:84:dc:bc:a6:41:03:87:8f:1e:c1:e1:60:
63:5e:cf:3d:d0:c1:5c:51:c9:13:7b:a8:4a:2f:2e:72:5e:63:
f3:24:7f:99:45:04:0e:b7:cc:3c:5b:89:ea:d4:1f:26:26:c3:
61:e8:13:f7:fc:cd:43:27:9b:d9:d4:52:4c:e1:f3:b7:79:90:
b1:fa:55:30:03:a4:31:59:e8:2c:9d:0b:ed:82:53:6b:c7:b5:
e3:c9:f4:1f:25:5b:6c:ef:b8:54:06:8e:86:18:26:b3:85:44:
e9:c4:0d:d9:64:e7:ba:14:fd:0c:f7:22:4d:1f:a2:ce:fc:4f:
33:03:f9:06:0d:a6:92:3b:62:20:ad:6d:75:dc:31:bb:33:4f:
e7:3a:d7:7b:2c:e8:0b:13:26:97:31:2f:32:e7:15:bc:12:c8:
ff:0a:7d:41:3b:ff:4d:82:4b:0f:30:47:0f:d0:87:80:3d:14:
97:9e:8d:a0:30:71:c7:14:34:bd:6c:3b:fd:2a:aa:a3:92:35:
82:ac:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:56 2025 by rpki-client