Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: jfMn8B+CNBgbAXm6MKwm2w67O9PQ2cfZIr84cbeW8PA=
Subject key identifier: 6B:00:C3:C0:B5:AF:B2:BF:64:6B:38:50:9B:E8:8A:D0:9D:C0:19:2C
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 0197B6A080BE8C190148A1A2DB50EB895D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0B0D
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: /RfUI6KV8Q3Sp8hBRXcbMIZ+DyvHqZMtKPXw5ugzpio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:80:be:8c:19:01:48:a1:a2:db:50:eb:89:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=6b00c3c0b5afb2bf646b38509be88ad09dc0192c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:77:b2:aa:5f:4b:64:37:af:d1:bd:3b:65:
ea:56:94:e9:d5:a8:9a:98:e2:0f:20:55:07:76:51:
3e:90:42:9a:f5:53:8e:ec:14:d8:d2:a3:95:04:d3:
21:3e:e6:c3:5e:03:8f:02:3b:21:3f:49:c0:d0:1a:
d6:85:76:33:47:2c:02:d5:c6:f7:01:b8:29:a1:7e:
e2:6f:af:50:44:0e:75:e8:fe:21:f5:eb:58:76:69:
46:c9:5c:a5:f1:ec:e9:60:2f:97:92:ca:29:f7:0b:
8c:a3:95:b4:c3:ea:f8:27:71:19:4c:97:05:23:0b:
7f:cd:15:26:9e:c9:7c:2c:1a:14:e9:38:70:b7:1d:
2d:96:79:4c:c7:e0:ab:5e:58:6c:3f:dc:29:8a:ea:
fa:e3:1c:a8:58:d8:eb:ae:5b:58:60:cd:66:61:02:
5a:a2:eb:0b:62:7b:7f:14:f1:4e:3e:4a:ca:f3:0d:
fd:5b:c8:8b:20:0e:3c:ba:be:17:eb:d5:83:eb:58:
9e:3c:d5:f3:32:b0:02:97:78:d6:1d:fe:41:63:5d:
a1:3f:a2:c2:3c:fe:59:63:23:a5:28:8f:2e:c1:53:
f2:53:16:54:3b:c2:63:13:30:7c:f0:fc:87:f6:04:
83:42:2d:37:2a:fd:05:40:43:2a:b1:db:42:3a:f2:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:00:C3:C0:B5:AF:B2:BF:64:6B:38:50:9B:E8:8A:D0:9D:C0:19:2C
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:42:68:d6:09:f9:39:40:7f:3d:ef:f3:0c:06:86:3f:a0:7d:
ab:63:f4:16:23:43:ab:89:57:84:96:06:60:5d:1f:1d:1b:96:
d4:9a:c1:89:d3:4c:4d:39:e9:e6:a7:e7:47:90:df:3b:d1:49:
6d:51:f1:27:ce:01:9d:f4:4d:3f:c1:e4:fe:15:f8:d2:f3:2b:
c2:49:ad:02:f9:24:4a:6a:d7:8e:96:2e:d3:c2:93:39:e4:17:
8d:e4:ce:e7:44:74:f1:74:54:ef:52:2a:a6:94:63:0f:7c:0b:
88:62:b1:46:c1:8b:54:15:56:65:5d:6a:53:ba:9a:45:50:47:
f2:50:b6:f2:48:6e:6e:a6:c9:70:91:1c:7b:6d:5a:09:25:e3:
2a:eb:89:bd:ee:37:38:79:40:d8:81:8c:6a:9e:9b:c0:3d:6e:
79:24:f3:08:c2:e9:17:c8:07:f4:df:54:5e:30:c6:d7:1e:6b:
fb:b8:0f:61:9b:bd:4c:de:68:73:97:64:02:26:75:60:82:11:
09:b9:d6:cd:7c:cd:17:e0:87:83:f1:71:fc:96:39:fa:ac:74:
d9:6a:d1:60:75:94:4a:7c:f4:ef:34:eb:a0:30:44:62:5f:49:
0e:05:13:9e:a4:42:2c:3c:96:6f:4d:8f:fc:44:a3:b5:b8:10:
8e:3e:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:51 2025 by rpki-client