Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: bOrUzZ7iceCEAATJuuO4CWjZHFv1rRPwxoo1nd/JAFc=
Subject key identifier: 3A:96:F6:BC:48:2F:C2:E5:E2:0D:A0:9B:A6:DF:CD:92:0F:B6:74:F1
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 0198D515DB2B75C6A1A8094AEFB89BDE9AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 0452
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: TiERWQqu8E/rHR1GLpwIPO1pB+yzkSTTakodDa+WGtw=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:db:2b:75:c6:a1:a8:09:4a:ef:b8:9b:de:9a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=3a96f6bc482fc2e5e20da09ba6dfcd920fb674f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:46:12:3f:90:fb:1f:83:48:a4:8b:ec:f5:
9f:6e:43:5f:39:32:02:cc:23:5d:09:38:be:32:74:
b7:f3:d1:25:d7:de:64:5e:64:53:01:43:2d:ad:b9:
2d:2b:fc:6b:af:42:c6:a7:6b:7a:81:a2:21:85:8f:
2f:a1:ea:b2:4e:11:4a:8c:17:75:89:f2:4d:23:8c:
81:25:ee:ac:3c:ac:7d:90:cf:fe:14:e2:99:6a:e6:
eb:e7:7a:10:72:92:f4:81:96:b6:37:82:1a:95:fa:
7e:bb:9b:bc:ff:65:bb:b7:98:96:00:ad:d8:1c:f9:
5b:4b:4f:ea:c7:05:f2:a3:3d:70:e4:17:ce:ed:08:
81:f3:27:cc:78:0c:63:de:5d:45:26:87:ed:89:5b:
3e:70:3e:e6:63:b6:28:77:d7:66:d3:ce:76:f3:1d:
7e:fd:71:44:47:b3:28:83:8b:29:a1:44:6c:1e:af:
87:c6:f9:cb:b7:67:f7:50:24:db:4d:9d:da:51:27:
7f:64:b3:c4:7b:e0:a1:a6:1b:f7:16:08:80:d3:b9:
63:50:e1:e9:72:ec:9e:fd:40:07:da:f2:fb:95:af:
e0:6b:61:70:4c:22:59:d6:00:c8:4b:62:2f:6d:ec:
66:7b:3d:01:26:7c:e6:c2:d0:e2:6d:2c:82:ba:1f:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:F6:BC:48:2F:C2:E5:E2:0D:A0:9B:A6:DF:CD:92:0F:B6:74:F1
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:21:fb:ef:e2:f0:84:4e:b7:a2:7e:1d:aa:b7:36:c8:08:1c:
aa:7f:67:1b:ba:73:cf:9e:04:10:63:29:b8:e6:be:33:0b:13:
aa:aa:9e:ce:0d:2f:79:1b:f5:5e:fe:62:72:fd:23:5b:4d:62:
b0:d8:d4:f1:a8:21:82:1b:ba:97:6d:34:e6:d3:84:de:3b:08:
9b:69:db:e1:0c:76:00:8b:3d:6a:7b:92:96:6a:0c:9d:5c:4c:
aa:60:1e:11:3f:8f:a8:3c:2e:77:23:b5:f8:9c:8e:59:0d:a1:
1d:9c:94:29:3b:63:87:f9:b6:af:ec:77:ee:ca:dd:2e:3f:dc:
2b:35:97:f9:c2:bb:1d:48:39:8f:ac:1a:87:46:dc:8a:5f:0f:
e7:6b:b7:b8:4a:43:59:b3:d8:59:e4:4b:54:b1:b4:80:ec:fe:
63:63:cb:13:74:cd:b7:0a:e4:66:63:7e:1e:e9:09:8f:a8:b6:
18:71:6f:74:1d:f4:8d:4a:a5:22:30:a6:4f:55:96:00:cf:6c:
5d:73:65:af:86:5b:e1:97:65:2e:ca:11:72:bf:58:50:e9:1e:
f5:ca:e6:62:8b:b2:bb:40:37:43:d0:58:57:70:7b:37:fc:b9:
ff:73:77:2a:60:d7:7e:24:95:db:84:4e:09:f7:85:3c:3e:c0:
2d:bf:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:45 2025 by rpki-client