Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: 4pBkhPqx7WbNaMgXwaL+Mbqu1ZpcGKP06xlb6J+tfPA=
Subject key identifier: A4:AB:95:B4:60:E6:93:61:9A:8C:8E:D2:A3:A8:94:8A:A9:8D:27:AF
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019842F597C95FBEDCB57B68E001F5EA0B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 14C1
Signing time: Fri 25 Jul 2025 19:00:48 +0000
Manifest this update: Fri 25 Jul 2025 19:00:48 +0000
Manifest next update: Sat 26 Jul 2025 19:00:48 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: OASyv/UZee2zUAdfyfwJX65lV5WXhB468kGhQQAKX88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:97:c9:5f:be:dc:b5:7b:68:e0:01:f5:ea:0b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Jul 25 19:00:48 2025 GMT
Not After : Jul 26 19:00:48 2025 GMT
Subject: CN=a4ab95b460e693619a8c8ed2a3a8948aa98d27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:af:00:57:99:b9:ca:08:99:46:17:8b:df:
4d:19:6c:1c:a1:c2:bf:a0:86:98:05:f5:65:39:3b:
cf:dc:7c:e7:a9:b4:49:bd:1c:cd:47:02:6a:98:e4:
b0:02:b0:ad:ec:a1:f3:27:b1:8b:c4:01:76:3c:fc:
18:95:78:c4:01:f5:4d:76:4d:f4:b6:be:ac:4a:3f:
4e:39:b5:f5:b6:e7:a3:53:3c:70:e5:79:4a:3f:be:
76:35:54:cc:fa:be:30:53:e1:1d:92:0e:24:d8:04:
e5:6f:a6:ca:6e:b5:d6:d8:e0:66:f8:1a:d9:27:5f:
2f:40:d6:f5:34:30:ce:40:00:37:67:e6:2a:3a:a0:
1b:72:06:39:5e:27:f8:01:bb:8b:09:68:18:12:0b:
38:97:f9:0f:dc:df:eb:96:55:e0:3a:74:dc:fa:d8:
62:b0:05:d9:26:c0:11:32:6d:8f:38:1a:1d:33:5c:
52:4d:ad:fb:83:fd:df:6b:b9:f4:6a:43:cd:6d:0b:
53:ad:0d:58:58:35:0b:cf:f9:70:46:3c:b8:11:46:
fd:cf:21:59:1f:36:73:04:95:12:02:3c:c0:83:15:
7b:0b:31:a6:38:d6:d1:97:a2:aa:92:33:77:7e:47:
8a:19:8a:16:42:62:a5:40:af:ef:d3:04:a7:2c:38:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:95:B4:60:E6:93:61:9A:8C:8E:D2:A3:A8:94:8A:A9:8D:27:AF
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:85:84:bc:e5:a4:96:e5:6f:71:5e:24:08:d5:19:8e:f1:
6e:7d:c8:6c:ec:6b:1a:30:22:e6:04:d6:18:1b:c2:a8:f1:84:
20:b2:84:49:ec:a8:de:5f:f7:64:cc:f2:c1:ba:3d:81:00:05:
04:ea:ce:dd:92:f4:73:00:04:cb:44:6e:f2:96:2b:0d:1c:2a:
60:44:99:6b:9c:56:a7:68:f3:9d:09:15:a9:bf:0e:73:51:73:
d9:0e:6b:77:6e:67:3b:b9:68:26:e5:d2:8d:55:73:51:3e:d7:
28:23:07:47:8a:a7:9b:24:f9:8f:34:ab:ba:08:2e:e5:cf:b4:
fc:cc:8e:94:ef:78:65:ca:83:d8:6c:bb:fc:93:f3:fe:d6:12:
01:0b:67:e9:42:7f:c5:95:28:4d:73:65:e9:4d:1e:a5:3d:88:
e6:be:a4:84:95:df:56:81:bf:82:15:f8:d4:3b:77:79:aa:08:
a9:1e:d8:d9:38:cc:b7:da:f1:13:72:64:13:8b:5d:72:46:60:
af:18:18:0c:fd:67:42:99:00:e6:65:89:42:70:07:d5:66:65:
1f:1c:43:f5:c9:c2:d7:b8:ec:a2:08:5f:ed:0b:c4:88:ac:3a:
82:a2:82:f7:2c:43:27:91:7b:bc:8b:3b:61:6f:b4:6c:63:3b:
ef:2c:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:23:07 2025 by rpki-client