Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: JZF0iMgzD+Yjm8v9T997ywDK1lZ441JlAosQQlJPheE=
Subject key identifier: AB:1A:09:59:53:97:BE:69:EC:E2:FD:D9:7B:05:06:FB:DF:25:79:C6
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 0197B6A15F662163B6D5CDBDC0B412BFA75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 04FB
Signing time: Sat 28 Jun 2025 13:01:58 +0000
Manifest this update: Sat 28 Jun 2025 13:01:58 +0000
Manifest next update: Sun 29 Jun 2025 13:01:58 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: i/RtgOsUJ/WxarfMlUc16FatnhbRD2u1b1zMsqwGcCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5f:66:21:63:b6:d5:cd:bd:c0:b4:12:bf:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Jun 28 13:01:58 2025 GMT
Not After : Jun 29 13:01:58 2025 GMT
Subject: CN=ab1a09595397be69ece2fdd97b0506fbdf2579c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:fa:59:44:92:16:45:44:ec:32:ed:a5:d3:
4a:77:b1:4e:16:8e:59:03:25:a9:8d:19:d3:a3:e4:
56:8b:f4:db:e1:bc:01:f9:91:ea:5d:db:fe:cf:88:
29:b3:13:dd:d3:62:98:44:c9:8b:ef:42:27:fc:04:
f8:76:42:c5:fd:e3:c5:50:52:63:79:27:69:4e:9b:
52:49:85:64:bb:f7:f9:82:f7:46:a4:3a:9b:17:94:
6e:12:de:0a:f1:11:95:1c:1e:39:d7:8c:1d:7b:d4:
c7:c5:26:a4:2d:f7:ab:b1:ef:b7:b8:7a:a5:6f:81:
59:4f:c9:71:41:65:8d:0c:ec:c5:cf:84:69:10:f4:
fc:a3:74:e7:63:94:23:fa:44:83:26:5a:18:99:44:
b8:ab:d9:26:7c:e9:03:fa:8f:50:b5:c7:30:c5:7d:
ba:dc:c3:57:40:97:c7:38:87:59:ea:c8:1b:85:28:
a4:56:68:d5:53:92:3e:b1:ac:e6:76:1a:62:83:c3:
88:16:8d:27:48:55:58:76:32:ef:f8:56:68:02:44:
13:83:68:63:92:2c:c2:c8:ba:33:96:d9:9a:78:b6:
ae:91:6a:1f:0e:38:02:04:81:63:09:b2:76:64:ed:
8b:3b:f3:05:f9:ce:17:91:62:7f:49:f7:f9:b1:27:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:09:59:53:97:BE:69:EC:E2:FD:D9:7B:05:06:FB:DF:25:79:C6
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:27:d0:03:0c:88:8a:78:d5:18:ce:69:0d:64:3d:c2:c9:fa:
49:98:71:86:2c:d0:df:52:c4:6a:01:e4:33:31:ef:a3:93:61:
95:e3:14:9e:93:97:93:d9:3f:e0:be:29:86:72:00:b9:f3:04:
60:4c:04:52:c9:7a:6e:21:d6:0c:3d:ea:75:17:04:ee:e8:be:
28:39:92:7b:94:18:79:c6:76:d3:d8:9a:16:4f:7f:0e:16:ab:
a4:1b:4c:a0:4e:97:4a:79:06:0d:02:a6:a0:46:94:7a:41:62:
a9:68:75:05:5c:51:dc:0a:23:7a:60:10:c6:4f:32:61:7e:51:
0f:f1:9b:99:c1:04:b0:fb:16:d6:53:76:aa:80:12:aa:39:60:
92:30:3d:25:2d:0f:f9:8b:53:09:f4:77:e3:5e:08:db:a9:c9:
eb:42:53:e4:e5:ee:7e:5f:48:57:d6:ba:a0:5f:ce:a8:d6:1a:
cc:21:48:c7:61:9c:a5:11:4a:96:48:32:a5:34:f7:db:39:81:
a9:ca:17:07:ba:d3:02:cb:8c:5d:d0:0a:50:7a:13:72:70:54:
a0:03:4b:b1:11:21:16:98:cd:0d:25:02:08:bc:c6:72:74:13:
8f:66:23:4a:38:20:4b:3c:72:c1:e7:0f:d9:dd:06:20:5c:5c:
30:67:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:16 2025 by rpki-client