Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: mjiBvg+C1IDn0fhuRycW2O6F5k/24tG+5a8C6YVSrO4=
Subject key identifier: C5:F4:65:EB:4D:BA:42:EB:C6:23:BC:E2:40:20:22:2C:83:CC:CA:17
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 0197B6A087362327117DE51A5ACF37B80185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: 6uePqlHdACrmp0xZrJ6PQkXNHR+E06CY1U7SmfeNiKs=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:87:36:23:27:11:7d:e5:1a:5a:cf:37:b8:01:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=c5f465eb4dba42ebc623bce24020222c83ccca17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:26:7e:b4:f7:bb:03:0e:88:37:59:8e:fa:
ca:46:fc:1f:7a:37:61:8f:5b:aa:b6:b3:34:b6:fd:
8d:0e:a0:62:3b:bb:c0:cf:08:43:37:7a:35:07:a7:
74:b6:70:8b:dc:4c:5a:af:8b:74:79:3b:11:ab:18:
07:3d:1b:c7:e9:10:11:c3:d6:6a:3c:93:53:26:c9:
8a:1e:e0:4c:cf:ae:fa:a3:ab:cc:e8:23:fd:62:76:
5c:80:b4:44:5f:09:dc:1b:e4:f5:14:37:36:20:e5:
27:1d:4e:ca:f6:8a:13:98:6e:17:63:9e:1a:38:33:
35:ca:a8:5f:51:8a:c4:c8:cb:05:8c:18:2f:c7:2d:
dd:e9:b6:34:e3:1e:52:fc:21:d4:7e:e1:2e:49:05:
b4:b0:1e:c7:a9:76:8a:08:f4:35:44:27:bc:d6:b5:
11:5b:16:26:64:5d:d1:6f:62:1a:1c:ed:9a:c8:a6:
80:36:8a:27:98:b8:da:da:63:d8:c2:e3:5c:ad:9a:
7d:83:23:d7:9f:df:e7:a7:0d:6b:9d:2a:fb:00:25:
f2:6d:0a:eb:6a:bc:fb:0e:9c:2f:a3:c3:de:7f:8e:
8c:19:4d:cc:5a:a3:f3:fd:13:63:58:b4:6a:87:60:
a7:6c:4f:0d:e2:60:c2:e9:ca:e7:95:e3:53:95:c7:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F4:65:EB:4D:BA:42:EB:C6:23:BC:E2:40:20:22:2C:83:CC:CA:17
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0f:12:18:4d:87:40:f8:af:cd:60:2f:7b:25:68:9b:6b:cf:
2a:a8:48:7d:59:c8:91:d6:c9:6d:80:3d:22:dc:0b:a6:8d:97:
32:06:49:eb:c9:27:68:55:81:7f:93:84:e9:bf:df:51:07:65:
ad:fe:f7:22:c5:ec:cd:2f:1d:89:cc:70:1f:7e:eb:80:41:e0:
35:22:aa:b1:cf:a3:9e:c7:a0:49:3b:5b:fb:41:22:d6:f5:85:
2f:f6:bd:cc:f6:73:46:51:48:b9:1d:74:c5:5b:10:04:cf:24:
42:d2:ec:dc:d2:47:26:f6:cd:72:17:63:ef:a5:3e:d8:0e:5a:
72:40:a8:65:bc:c7:87:74:24:64:55:50:b4:03:2f:30:24:ce:
c0:fe:d1:7b:55:3d:39:32:fb:44:de:f6:9b:72:bb:25:dc:68:
d5:da:d5:cc:43:9b:95:d1:67:3d:97:56:38:4c:2d:ab:0b:bb:
05:93:b2:6b:91:c0:1f:1a:fa:79:16:27:9c:12:b1:6b:cf:54:
26:9e:ac:70:e7:a6:aa:6a:46:bc:c5:22:7b:0e:05:de:37:5a:
e0:d9:09:3c:8b:21:69:30:39:a4:f0:b9:ea:fa:ea:67:b1:6d:
33:38:91:b7:1e:3e:7d:5e:4e:f1:b9:5f:75:64:01:e2:11:a3:
dd:b9:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:45 2025 by rpki-client