Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: yPqefL48zYupDBRG5ddOwbAq9lbdfV9VjrrrjRdouvw=
Subject key identifier: 8D:76:FE:EB:05:4F:3C:54:64:F6:6B:C4:61:AD:CB:E7:C7:BF:27:CC
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019749D62257FFBB8DB9D67C8716FA11C136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 12A7
Signing time: Sat 07 Jun 2025 10:00:59 +0000
Manifest this update: Sat 07 Jun 2025 10:00:59 +0000
Manifest next update: Sun 08 Jun 2025 10:00:59 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: 0mks73SH6vgaLhJrTQTIn5CsaGkhGZGc5MXhoGR/UbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:22:57:ff:bb:8d:b9:d6:7c:87:16:fa:11:c1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Jun 7 10:00:59 2025 GMT
Not After : Jun 8 10:00:59 2025 GMT
Subject: CN=8d76feeb054f3c5464f66bc461adcbe7c7bf27cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:76:fa:4d:9c:0b:fa:22:66:a9:de:89:dd:
f6:53:19:8e:c5:a9:77:8a:da:42:02:dd:37:ac:ee:
dd:2d:be:3b:86:9a:fc:83:36:81:29:6e:3f:05:72:
8d:27:86:f2:1b:27:ad:d9:6b:66:24:b3:1f:48:df:
57:cf:6c:fb:7d:dc:22:1b:53:64:22:18:b3:65:40:
3d:52:2d:b6:04:21:c5:73:51:f2:00:ce:db:0e:ff:
9d:a4:49:d7:74:b3:64:9d:f9:9a:38:82:4e:b4:b6:
58:6c:0f:03:14:f4:28:f7:0d:35:5a:d3:4d:d2:6a:
e6:f8:f2:24:cb:91:de:95:52:63:1b:25:87:96:99:
37:05:74:06:6c:4f:fe:9a:96:2b:27:d6:9d:e8:76:
51:1d:d4:a4:70:c6:ea:20:e0:a2:9b:21:ee:6d:20:
0d:da:70:2a:bf:68:aa:0e:88:55:2d:8f:b5:32:b8:
cd:3a:d4:87:c5:08:94:66:ea:03:b7:61:80:2b:89:
db:aa:30:ea:a1:97:ce:23:fc:51:b5:a1:45:f0:8a:
b9:58:a7:2a:e0:df:bd:16:7c:70:8a:61:b3:ad:bb:
cf:48:a9:28:ce:5c:70:9e:ec:76:7b:42:c0:26:6d:
51:32:4f:11:e7:11:e4:f0:16:e6:e3:2f:e6:ba:07:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:76:FE:EB:05:4F:3C:54:64:F6:6B:C4:61:AD:CB:E7:C7:BF:27:CC
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b1:66:24:9d:62:bd:cc:94:dd:bb:1a:a6:16:fb:11:fc:d6:
90:ae:88:66:16:13:46:eb:d0:ac:f1:27:90:b6:49:8b:2a:26:
a5:88:a5:a7:66:89:89:70:06:27:9f:2d:7a:73:57:0b:07:5d:
8f:d2:1c:3d:06:22:13:6a:db:40:f5:cd:00:68:2b:f9:ba:4d:
e3:e4:42:24:69:f8:cf:c8:48:a1:d7:24:2a:10:f6:3e:12:8c:
d4:90:b8:36:23:44:36:6b:9f:e2:97:c4:66:03:33:89:16:ae:
40:d8:69:ee:88:c2:9f:8a:ac:a5:6b:a2:90:7d:3f:aa:f3:06:
89:46:04:50:4f:c4:39:d1:c9:e1:cb:41:64:5f:5e:ae:34:b1:
a7:9c:90:df:78:36:cb:81:ba:39:1f:d5:3d:0c:4f:20:a3:f7:
49:5d:b9:1c:f7:d6:59:61:c9:ca:a2:25:e6:4a:7c:8c:aa:5b:
2a:d9:f5:4a:4d:ec:f2:4e:25:65:89:0f:af:bd:bb:a8:c1:8a:
75:61:2e:9c:bd:39:39:46:f9:e6:d0:9e:9d:a7:ea:d9:11:ab:
b7:34:43:c8:60:5e:07:1f:66:f9:a2:b1:1d:aa:f0:e8:7d:af:
6a:d6:e1:53:6c:e1:02:20:85:68:c2:d7:b6:66:7e:cb:46:66:
27:f1:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:11 2025 by rpki-client