Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier: RAk5moGZ0WBsMG62gIw7JjCBsKwJfOQ9ft0qPdNXWNw=
Subject key identifier: 0D:5B:FE:AB:04:34:84:52:AE:4B:E3:01:C3:B2:E0:E7:B3:1D:B0:3E
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 0198D73B70BBCEDC2ED578F4564C8E21BB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number: 0FC3
Signing time: Sat 23 Aug 2025 14:00:53 +0000
Manifest this update: Sat 23 Aug 2025 14:00:53 +0000
Manifest next update: Sun 24 Aug 2025 14:00:53 +0000
Files and hashes: 1: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (hash: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=)
2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: vJfTbmgqgun5hDKyiLQvAal/RzkurqIT3Cbrep8qgqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:70:bb:ce:dc:2e:d5:78:f4:56:4c:8e:21:bb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Aug 23 14:00:53 2025 GMT
Not After : Aug 24 14:00:53 2025 GMT
Subject: CN=0d5bfeab04348452ae4be301c3b2e0e7b31db03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ea:25:94:66:cd:a8:f8:7f:14:4a:01:a8:c7:
a2:a1:5f:8a:33:85:0e:8a:0e:5b:ad:2e:47:76:63:
6d:9f:eb:1a:b0:08:88:b5:33:92:cd:40:8e:69:85:
54:d9:0f:be:cc:6e:86:54:c6:6c:f9:c1:3c:10:06:
97:61:8f:d6:7b:be:1c:ca:a6:4c:2c:46:ba:4a:b9:
d1:16:bc:d2:d0:67:76:d5:b3:46:d9:d6:9f:7d:e9:
a8:b5:14:44:eb:e9:05:84:05:60:5d:83:a9:63:f9:
66:08:5f:ea:70:36:bb:37:01:bd:86:fd:d1:70:53:
7f:0a:ce:ee:38:de:aa:a6:7e:7c:7b:12:11:0d:d6:
1c:65:68:6a:73:9c:60:69:0b:b3:54:5b:11:bd:69:
0f:69:e0:05:37:60:1c:c6:7d:e0:b5:9d:40:f1:3e:
22:64:d2:79:5f:f9:b5:50:ce:f7:5a:33:1c:66:06:
c4:bc:4b:a4:52:d3:0b:74:28:ae:2a:da:55:c7:67:
fa:1d:6a:e0:29:db:22:60:6b:d1:12:d0:f3:de:83:
28:8d:b8:a7:27:53:96:8d:ca:8a:75:84:55:36:0a:
01:50:08:12:1e:44:d3:f1:1b:9d:fe:30:1d:cd:d5:
b6:8f:a4:24:21:03:9e:01:5b:c7:c7:af:ac:41:9a:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:FE:AB:04:34:84:52:AE:4B:E3:01:C3:B2:E0:E7:B3:1D:B0:3E
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:a6:52:0e:45:3f:5d:87:d1:92:85:3f:b1:5b:66:16:2d:
bf:9c:6d:6f:08:88:f9:e2:4d:8b:43:90:c2:df:7e:fc:a6:31:
53:8b:8b:be:43:f4:8e:70:09:5a:c0:8c:84:28:53:fc:d4:9e:
40:6e:74:3c:c9:0f:35:c8:7b:8b:fe:f3:c8:5c:21:7c:19:e2:
e9:db:d9:4e:d5:e6:89:5d:a2:a8:61:97:8b:11:0c:2e:e3:4d:
ae:eb:2d:39:ef:5b:9e:a2:9c:53:16:9d:9e:d5:29:7d:f7:24:
fe:9b:79:bf:35:07:dd:36:73:c7:cb:7c:d9:8e:ae:a7:d6:b3:
4c:8b:46:0c:c3:3f:63:ae:83:77:99:0b:f8:3d:02:96:1f:62:
65:5c:d6:04:7c:c0:16:71:75:2f:34:0b:1d:0d:5a:f7:30:5b:
52:35:ad:f0:09:ff:02:84:7a:f6:e8:7b:ec:cd:11:a3:32:7a:
56:9e:3c:0a:db:c8:d8:ad:e7:36:47:0e:df:0d:b9:83:bf:11:
a3:19:0a:61:38:53:af:44:dc:8b:d2:19:d4:36:26:2d:2a:f8:
e2:6d:2f:b4:62:99:6c:a2:a6:7c:8a:97:62:5b:c8:2f:d6:02:
79:ba:9f:fe:87:c4:22:da:4a:4b:8a:9d:c3:ca:7e:6f:e0:74:
64:3a:db:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO3C7ztwu1Xj0VkyOIbtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2EwYjU1OTQzMzlhZWZlOGI1NThlMzcyOTI5MGI0MmJi
MWE5NzQwHhcNMjUwODIzMTQwMDUzWhcNMjUwODI0MTQwMDUzWjAzMTEwLwYDVQQD
EygwZDViZmVhYjA0MzQ4NDUyYWU0YmUzMDFjM2IyZTBlN2IzMWRiMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uollGbNqPh/FEoBqMeioV+KM4UO
ig5brS5HdmNtn+sasAiItTOSzUCOaYVU2Q++zG6GVMZs+cE8EAaXYY/We74cyqZM
LEa6SrnRFrzS0Gd21bNG2daffemotRRE6+kFhAVgXYOpY/lmCF/qcDa7NwG9hv3R
cFN/Cs7uON6qpn58exIRDdYcZWhqc5xgaQuzVFsRvWkPaeAFN2Acxn3gtZ1A8T4i
ZNJ5X/m1UM73WjMcZgbEvEukUtMLdCiuKtpVx2f6HWrgKdsiYGvREtDz3oMojbin
J1OWjcqKdYRVNgoBUAgSHkTT8Rud/jAdzdW2j6QkIQOeAVvHx6+sQZp45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1b/qsENIRSrkvjAcOy4OezHbA+MB8GA1UdIwQY
MBaAFIM6C1WUM5rv6LVY43KSkLQrsal0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMt
M2QwNmQyNDJmOTkyLzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMtM2QwNmQyNDJmOTky
LzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+umUg5F
P12H0ZKFP7FbZhYtv5xtbwiI+eJNi0OQwt9+/KYxU4uLvkP0jnAJWsCMhChT/NSe
QG50PMkPNch7i/7zyFwhfBni6dvZTtXmiV2iqGGXixEMLuNNrustOe9bnqKcUxad
ntUpffck/pt5vzUH3TZzx8t82Y6up9azTItGDMM/Y66Dd5kL+D0Clh9iZVzWBHzA
FnF1LzQLHQ1a9zBbUjWt8An/AoR69uh77M0RozJ6Vp48CtvI2K3nNkcO3w25g78R
oxkKYThTr0Tci9IZ1DYmLSr44m0vtGKZbKKmfIqXYlvIL9YCebqf/ofEItpKS4qd
w8p+b+B0ZDrbqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:39 2025 by rpki-client