Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: 4hV+NQENOp+HrqxiFkRwDkn1EgUFlta1Vea8H1pTeVA=
Subject key identifier: B0:59:02:71:F6:D9:1C:7B:CF:31:90:68:7D:29:65:89:1C:14:B4:63
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 0197BB58E83544F8BBAE17948A4787D861F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 0562
Signing time: Sun 29 Jun 2025 11:00:55 +0000
Manifest this update: Sun 29 Jun 2025 11:00:55 +0000
Manifest next update: Mon 30 Jun 2025 11:00:55 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: gkamQNMCbETKCQqxSrMJ6vSkTeHC0zbaYJfC3IDe4Qc=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:e8:35:44:f8:bb:ae:17:94:8a:47:87:d8:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Jun 29 11:00:55 2025 GMT
Not After : Jun 30 11:00:55 2025 GMT
Subject: CN=b0590271f6d91c7bcf3190687d2965891c14b463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:4a:92:79:73:76:72:ab:4b:44:2c:9f:81:
b6:44:35:5b:88:8c:02:88:2c:12:da:d3:31:31:f2:
4d:d8:e3:6b:01:a0:88:d4:f7:00:ea:0a:da:5e:43:
65:40:31:29:e0:e1:0d:f3:14:c1:4d:77:59:58:6a:
4b:8e:3b:37:24:47:a7:ae:f4:2b:7a:5d:24:a0:e9:
83:c0:d1:e2:cf:25:a2:09:a5:99:21:7c:89:a7:b2:
7d:0c:ee:df:14:ac:90:37:7c:a6:de:85:22:d4:93:
0d:c6:72:7b:2e:27:df:53:05:05:b4:28:58:12:4a:
b2:55:47:e7:20:b7:d5:e4:6c:28:ea:dc:90:d4:a1:
f2:a8:03:c4:e7:42:96:0a:25:4d:64:2c:ef:d5:7b:
03:ae:44:75:8a:6c:e1:53:9e:d4:f1:fa:eb:9a:e0:
db:e4:0e:7d:8b:6f:dc:48:1a:84:38:a2:c8:c6:5b:
64:d7:71:c6:1d:83:f0:b9:92:1a:3b:37:d4:c4:8c:
42:ac:32:a5:23:91:90:b9:d6:2d:49:07:a7:51:40:
91:7a:b7:79:65:93:10:b5:70:5e:bd:e6:f8:d8:2e:
b3:3e:15:b6:9f:67:e3:ff:36:5f:07:a9:60:a7:b2:
ac:72:76:14:b2:d6:36:02:88:2a:3d:2d:87:8e:b4:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:02:71:F6:D9:1C:7B:CF:31:90:68:7D:29:65:89:1C:14:B4:63
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:52:2b:4f:99:6f:b8:d8:80:4e:46:38:9a:c6:12:80:a3:fd:
b4:5f:b0:37:9a:b8:0a:b9:ca:ed:06:95:64:3d:35:82:2c:0c:
04:48:88:81:9a:0e:12:5f:c0:39:49:ec:6f:11:60:19:5a:f3:
73:39:0b:ba:87:d9:25:c4:95:85:6e:17:32:cb:4d:1b:b4:86:
3e:8e:30:3d:4b:33:96:41:53:d7:a9:8c:a7:6f:5f:f5:ec:b2:
7b:e4:4a:47:a5:e3:05:2f:7e:21:3c:6e:5c:6f:3e:eb:d0:58:
31:ed:30:44:7a:fc:0a:6c:2c:c4:02:e2:aa:2d:1b:f4:c6:1d:
ca:fb:43:4c:de:77:a9:2b:3a:c2:1e:3d:9a:48:c2:40:81:52:
fb:38:6d:40:04:dc:61:fd:9c:9b:a2:e3:e3:45:e1:c7:69:22:
c4:d0:fd:fb:58:66:b4:ee:6b:c3:e8:80:fd:77:03:3e:2b:61:
02:1f:0b:69:4d:29:35:63:ec:f2:3c:66:2b:4c:f9:0f:2d:b8:
c0:97:c5:b1:f2:e5:bd:ed:b5:72:1f:80:ed:35:49:90:c5:80:
f6:de:59:23:b9:c9:20:e2:00:cd:cf:f6:45:8a:e1:9e:91:c9:
22:f1:6e:a5:c2:15:90:6b:4e:ac:3d:1c:c8:ab:98:90:25:d2:
01:00:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:45 2025 by rpki-client