Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: 0Z72Ih3if0D3LqG3b/nAp1hEiFqWrMv7+gOBIoWL0rY=
Subject key identifier: 85:F6:2C:B0:02:95:08:30:81:80:B8:E4:20:39:19:70:42:03:13:0D
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019A2E57041621D6C0AECF7F7B7A1DE8ED5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0334
Signing time: Wed 29 Oct 2025 05:00:45 +0000
Manifest this update: Wed 29 Oct 2025 05:00:45 +0000
Manifest next update: Thu 30 Oct 2025 05:00:45 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: zkH2ueQ1izNQwHaCMRweyPrJ7EQ5M+J2L2syd+XWPYM=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:57:04:16:21:d6:c0:ae:cf:7f:7b:7a:1d:e8:ed:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Oct 29 05:00:45 2025 GMT
Not After : Oct 30 05:00:45 2025 GMT
Subject: CN=85f62cb0029508308180b8e4203919704203130d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:19:d3:2e:a1:5a:b8:1c:1d:a1:3a:9a:e1:
c8:e5:7f:9c:ad:7c:a2:a8:46:df:fa:d2:46:df:e4:
1b:83:15:62:02:11:e5:d6:83:cc:a8:0a:34:4b:d7:
87:5e:c4:39:7e:d5:86:ac:e9:24:61:cf:9c:f8:90:
f2:e7:6f:a5:62:f3:ca:8b:e6:b7:b4:89:1a:6b:2e:
d8:0c:8d:34:af:cb:14:05:96:03:ce:ec:28:72:5f:
b1:5d:61:17:dd:f2:14:d3:e9:1f:a0:4e:84:b2:67:
03:34:7e:6a:ac:f6:01:7e:ef:87:da:5c:4e:f2:88:
a8:68:7b:f5:65:77:f9:d0:37:cb:a4:57:87:c5:a5:
33:f5:14:4b:a9:4b:61:98:b8:5c:a3:6e:05:75:71:
ba:c2:df:87:b3:6b:b4:db:53:64:1f:67:54:89:00:
71:2b:fa:2b:64:03:d1:4a:03:30:c5:69:b1:eb:de:
0e:f8:17:1e:20:35:b6:f9:5f:0b:78:ad:b4:10:77:
53:64:7e:85:2f:89:d5:5b:2d:a6:b6:ac:c2:77:94:
71:55:0b:3f:35:96:97:ea:8d:2e:73:5c:6c:c5:ac:
a9:bf:c1:be:9a:66:ad:66:96:54:4c:ea:c5:5b:9e:
1c:6b:bf:d3:fb:2d:d7:69:13:a5:2a:7d:73:83:c9:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:2C:B0:02:95:08:30:81:80:B8:E4:20:39:19:70:42:03:13:0D
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:89:fc:68:43:13:38:bd:c4:75:df:f2:a1:6c:b9:aa:17:
93:e1:0c:3c:5c:6d:57:55:84:f2:cf:cb:8a:b2:4c:0c:4b:6f:
be:ad:f5:b7:c5:f4:a8:03:06:d8:f0:ff:12:1c:a0:df:ba:5f:
bc:ea:5f:d1:a4:84:f2:21:69:cf:15:cb:45:8d:4c:94:9d:e5:
99:86:f0:dd:50:f0:b9:7a:bb:34:9a:7e:9d:5d:ba:ce:b9:4a:
47:4d:53:bf:68:25:77:9a:ef:f6:d3:d1:26:64:47:3e:67:d6:
40:bf:4f:fe:cb:d8:6f:b4:8a:04:ef:57:f9:b7:1b:45:ea:27:
75:fe:0c:82:02:8b:34:cc:35:8b:b7:66:ad:db:7b:c4:32:82:
c0:28:61:fd:db:b7:04:bf:d6:1d:53:9d:10:0a:3c:27:ca:e7:
3a:45:73:fd:65:46:b4:26:08:e8:97:6d:7d:aa:3c:dc:96:30:
63:b7:b7:33:37:33:f2:4b:1d:5f:db:5e:66:5f:7e:91:d0:89:
c5:06:aa:67:91:38:e1:1a:d4:10:07:e0:67:8b:1d:cd:62:d6:
9d:08:2f:b8:d4:55:22:65:9b:1e:7b:3c:22:40:ff:e4:ed:a8:
b8:ec:aa:7c:b0:36:95:3d:63:d4:23:d2:96:4b:81:a0:b1:23:
f5:e8:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:50:29 2025 by rpki-client