Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: eN0mrnWGQQ/BDbOP8fPmjMb6YAVL0k8K+Kj9rx1yETE=
Subject key identifier: 04:EB:16:14:8E:A9:A2:79:9E:D7:60:83:F1:24:5A:4E:21:04:23:53
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019657268BCEC56ECF92B8B06052AB398296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0136
Signing time: Mon 21 Apr 2025 07:01:06 +0000
Manifest this update: Mon 21 Apr 2025 07:01:06 +0000
Manifest next update: Tue 22 Apr 2025 07:01:06 +0000
Files and hashes: 1: Bmmw5vXixRsY3kANpQuOK4eIA78.roa (hash: rzJ9hjFHlMOHuxRaa+oQvNHPU2YWN8Uaq97BKxyXzCg=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: OJC9tlPefHcHTvZgCm1kI80NdEFrwiorvohCz62qgtU=)
3: kRTK8deNmwdVUHDay7LLnI-Srew.roa (hash: OivrfB23rD0qMRXfARzBjENtqmmocXUha7CncOlWhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:8b:ce:c5:6e:cf:92:b8:b0:60:52:ab:39:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Apr 21 07:01:06 2025 GMT
Not After : Apr 22 07:01:06 2025 GMT
Subject: CN=04eb16148ea9a2799ed76083f1245a4e21042353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:3a:6b:21:30:04:71:1c:3e:02:7c:3b:62:
6d:c0:a4:e8:19:e8:52:80:c8:ba:75:4d:46:fd:ac:
a6:da:4a:18:6c:15:28:46:28:03:60:5f:78:30:38:
af:c3:7c:69:61:71:9a:44:a3:1b:e7:c9:be:9d:c5:
7e:61:fe:b3:43:6a:45:7b:4e:ba:7c:37:ce:36:4f:
b3:c8:2e:1a:4a:2c:9b:b8:5c:0e:f7:42:9a:62:51:
32:16:08:2a:b7:30:90:ca:9b:95:f2:21:e3:34:61:
99:36:b9:51:d1:73:7d:23:ad:44:72:65:f3:5e:a5:
66:b3:14:9a:42:84:f1:c6:11:75:16:4c:30:97:20:
14:94:66:27:7b:07:4f:e0:75:34:2d:a4:96:7f:1e:
2b:e6:cc:d4:d5:34:34:47:eb:b1:cf:9f:7c:f2:ee:
ed:fd:13:ed:03:da:00:57:bd:3e:33:fd:31:c2:07:
89:a9:52:74:49:f2:51:18:88:f6:5e:f7:69:3f:ab:
b9:0c:32:a0:44:d3:5f:fe:3a:6a:c1:50:bd:de:a1:
4f:db:5e:c8:68:6b:2d:9c:b2:0d:23:d5:56:a3:a4:
27:c9:7c:07:6f:9f:cb:09:3b:6d:2b:46:ed:38:1b:
63:ea:df:1f:78:d4:a1:10:1a:8b:2b:1a:72:b9:c1:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EB:16:14:8E:A9:A2:79:9E:D7:60:83:F1:24:5A:4E:21:04:23:53
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9e:b2:df:ad:4e:7f:86:97:2e:7f:c2:bd:cf:01:01:82:44:
d3:69:99:02:c7:af:dc:fc:dc:3c:0c:87:40:20:8b:8a:b0:42:
f4:42:39:71:92:7e:28:97:47:31:b1:f3:76:48:7a:46:bb:4e:
e6:72:62:fe:05:ff:2d:e1:3a:35:ba:51:5a:9d:c6:85:b3:27:
33:d7:96:87:08:59:0c:38:58:1e:e9:99:3b:26:e5:25:eb:3c:
25:17:a3:b8:9d:59:d9:6a:a2:b0:ce:f5:9a:2d:2c:6d:66:9a:
65:2e:17:71:09:87:43:cc:75:51:fd:81:3e:d7:14:c0:76:fc:
17:ba:72:18:03:4e:9d:30:36:ae:3b:b7:5c:47:bc:a4:56:6c:
e9:d3:16:73:47:65:ed:2a:d5:73:b6:d4:f0:7e:5d:27:d9:ed:
47:d2:39:56:17:a8:a8:6d:62:bd:2f:58:3e:7b:a6:03:16:93:
7c:08:de:95:61:0a:75:66:ec:36:8f:b6:47:91:31:1f:18:dc:
87:b8:e9:55:5b:df:68:a5:c4:a3:ee:4e:b0:08:e4:b3:d0:0b:
8e:6f:df:b5:1b:d7:bd:1d:9c:d2:54:80:6e:3e:45:c7:fb:d1:
63:e8:de:cd:45:a6:0c:0e:24:90:01:01:0d:e4:bd:f3:68:9b:
3b:97:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:01 2025 by rpki-client