
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: MaoFi22H/hF/T1iJ/MWb/POBmkd2tZK/u6jx+KtSDbA=
Subject key identifier: F7:06:7D:97:A0:16:C7:FC:80:FD:9C:E6:BA:1D:84:B6:8E:E4:E6:CC
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 01984A0A6B2451BE0DCCD7A1671D467164B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 040A
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: sLM/4mzuHKJQeNrVFJuV7XLMabO+HZnVqqmqGRJr91c=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6b:24:51:be:0d:cc:d7:a1:67:1d:46:71:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=f7067d97a016c7fc80fd9ce6ba1d84b68ee4e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:5a:70:ec:70:00:e0:91:aa:1c:d5:56:6b:
74:77:cb:64:c9:1a:f3:ed:b5:8a:c9:01:39:03:fa:
be:30:60:01:ce:db:d2:6f:44:c3:8b:d7:8d:dd:55:
89:3e:60:24:01:ea:51:52:ba:66:b8:39:b6:ac:c4:
1a:8f:a2:37:3c:99:1b:c8:ff:04:f0:98:3d:a8:2e:
03:1a:d0:c5:6d:a9:e0:23:26:cb:da:d1:c9:f4:e6:
9a:2d:4f:0b:f7:0a:ba:0c:64:61:b5:03:21:42:ef:
ea:a9:12:17:bb:51:78:d2:18:27:1e:ba:ab:c9:39:
d1:ca:c7:76:d0:dd:ae:43:04:54:78:65:66:23:d1:
df:af:8a:61:a1:32:33:ee:f5:04:6b:0c:c3:f3:32:
7b:1c:13:f8:c8:c7:41:30:dd:ac:d3:76:cb:83:e6:
51:64:c6:6b:e0:ba:8f:c6:db:93:22:b1:54:ce:42:
34:cc:3a:fb:91:4b:d4:f3:9e:7b:88:ce:5d:50:45:
08:52:8b:53:54:5e:27:d4:01:f2:42:77:79:86:e1:
50:6b:cb:0d:8a:f5:5c:be:d7:97:2c:38:96:76:9b:
4f:79:45:fe:89:fe:96:e0:81:6d:3d:70:3f:fa:03:
c2:1e:35:ad:5e:f5:78:e1:e3:e9:f5:8a:11:9e:63:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:7D:97:A0:16:C7:FC:80:FD:9C:E6:BA:1D:84:B6:8E:E4:E6:CC
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:92:4e:71:f3:3d:15:93:38:38:de:cf:81:66:96:99:6b:79:
cb:f1:fe:92:2b:2b:68:07:ea:d7:00:58:4a:3d:0a:0c:83:e5:
e4:b4:f0:cb:50:d6:ba:51:69:f4:ea:e7:ba:7e:c7:c7:a0:4d:
23:b5:c3:bd:5e:17:77:2b:91:1c:de:75:00:e2:74:e8:d8:2c:
bb:17:fe:d2:ff:64:f0:f4:04:88:23:dd:72:b9:64:63:22:5f:
a0:11:d7:ed:0d:75:e9:ed:00:11:5b:a7:bc:2c:2c:d9:84:94:
20:f1:7d:83:07:80:1d:e8:36:8f:5f:bd:62:08:32:f2:22:d7:
4c:f1:d9:d5:03:6c:5a:f4:c1:d3:a4:f6:cc:99:2e:4d:52:f2:
94:d7:d7:26:61:09:c1:42:29:f8:e6:90:f0:06:9c:28:0b:70:
11:b3:20:be:b6:b7:a7:0d:51:c7:b2:e3:fc:55:1d:48:00:aa:
c9:47:40:9e:0f:6d:c6:5f:07:87:20:01:62:d6:57:48:e5:b1:
fd:b7:fb:ff:ff:62:36:8f:03:44:a4:6b:f8:21:3d:b0:97:d4:
d0:b6:d7:70:b5:ba:67:33:a8:f2:84:0f:2a:cf:61:1f:ce:7b:
f0:79:b3:d5:86:72:8f:14:0b:45:eb:88:94:ce:84:e7:c9:5a:
da:2f:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:53 2025 by rpki-client