Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: uMDpjZQGIHUaAxCOgzdm68iPJtkvSJ6XiUymzpTlgzU=
Subject key identifier: AA:3E:3B:B2:AC:10:54:BB:7D:E6:FA:BB:92:FF:8F:CD:5E:B6:B5:77
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 01975836729B9FE5031A0F399BFBE11E71E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 01BC
Signing time: Tue 10 Jun 2025 05:00:52 +0000
Manifest this update: Tue 10 Jun 2025 05:00:52 +0000
Manifest next update: Wed 11 Jun 2025 05:00:52 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: el+FrtmeIru01GkFBQckCIFD0SHkS062FksWFKCynKw=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:72:9b:9f:e5:03:1a:0f:39:9b:fb:e1:1e:71:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jun 10 05:00:52 2025 GMT
Not After : Jun 11 05:00:52 2025 GMT
Subject: CN=aa3e3bb2ac1054bb7de6fabb92ff8fcd5eb6b577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:e4:1e:e2:62:58:26:e1:11:69:f8:79:4a:
66:49:bc:24:72:01:de:88:7c:d8:31:c7:b9:f0:53:
ce:55:d3:ab:13:c1:bb:e5:0a:52:06:3d:62:b4:4c:
14:e0:7f:57:3b:35:95:41:e1:94:a9:fc:d4:7c:b0:
fa:b1:11:32:19:b6:22:c1:11:9f:cb:9d:be:ce:73:
ee:5a:64:5d:39:61:69:9d:b7:ea:f9:3f:b6:93:fa:
b7:62:98:29:b7:3f:55:e2:30:53:0c:82:43:c3:fc:
38:5a:a4:78:ea:43:9d:9a:a5:a4:8f:f0:ae:06:43:
73:90:f6:06:36:13:06:4a:78:d8:5b:20:7f:4e:13:
e4:82:1e:fd:76:13:90:3c:4e:64:ac:db:97:98:51:
40:c5:28:ef:6c:33:7a:19:4b:2f:bb:56:5b:3e:c8:
ab:74:05:66:a0:b9:89:4e:15:ba:b0:f0:7f:23:cd:
20:58:9b:90:79:8c:4c:29:e5:1a:27:d7:4a:da:99:
25:fb:66:bf:c6:70:a1:e1:70:51:4f:6f:1b:be:3a:
45:50:22:7e:7f:fc:31:5a:e7:59:fa:73:e3:f2:1a:
85:e6:dc:f2:4b:79:81:3b:60:2d:6a:2c:47:d9:fe:
32:ad:fe:6b:d9:04:cb:f4:e3:f1:8a:5c:51:48:74:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:3B:B2:AC:10:54:BB:7D:E6:FA:BB:92:FF:8F:CD:5E:B6:B5:77
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:af:52:38:7e:27:db:88:1b:7f:a4:cd:03:83:35:88:17:12:
c6:65:68:3e:9d:71:0d:1b:05:61:fa:ca:bd:e2:03:79:db:e7:
df:88:c8:01:82:0c:d1:18:d6:a7:4c:39:3f:0b:a9:4a:2c:33:
17:7f:74:a9:6a:f6:42:fb:0c:34:22:63:c1:b4:41:34:97:3e:
37:64:11:c3:13:26:ff:7e:53:e1:3d:67:d4:30:01:5c:23:26:
9a:4d:bc:84:f6:15:60:c5:7f:8d:77:e3:fe:c7:00:e6:6e:a4:
dc:9d:9c:89:61:da:5b:f5:e6:1b:03:4d:4b:5b:1f:d2:e4:d4:
91:6a:8a:c6:10:5b:99:d7:03:12:58:9a:91:c5:36:5e:2a:94:
1e:9a:ed:5e:f1:7e:5c:93:e6:b6:6f:58:5a:47:75:99:aa:cc:
db:5a:78:e8:fa:a1:8c:10:ab:13:a6:1a:cb:fd:60:f4:a7:c1:
54:de:8c:a2:59:e3:7c:db:11:a3:72:7e:6b:63:9f:c3:53:5f:
d0:be:9d:73:04:50:64:78:93:fc:f6:f1:e5:d5:b3:dc:bb:0f:
11:8b:e1:1a:2c:b1:62:1d:d7:6a:cc:77:fa:41:16:f7:85:6a:
98:d7:80:81:3e:df:bd:7a:64:49:a9:de:9f:9d:0d:15:ec:7e:
8e:1f:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:43:21 2025 by rpki-client