Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: pLyYigAimQpdA6wAz5vlav9Ern1Rrb5ZR/AeI5xuclQ=
Subject key identifier: 84:95:61:77:18:C7:3D:0D:94:E6:26:8E:1F:35:FF:6C:00:46:C5:2B
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 01975E01AC79A549E912686D74431A764161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 01BF
Signing time: Wed 11 Jun 2025 08:00:57 +0000
Manifest this update: Wed 11 Jun 2025 08:00:57 +0000
Manifest next update: Thu 12 Jun 2025 08:00:57 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: RI1ac1qPK3WTheO7Fr1CExcBbySTqENOQM6bpiwKe8E=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:ac:79:a5:49:e9:12:68:6d:74:43:1a:76:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jun 11 08:00:57 2025 GMT
Not After : Jun 12 08:00:57 2025 GMT
Subject: CN=8495617718c73d0d94e6268e1f35ff6c0046c52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:b5:47:db:bc:c2:13:1f:fa:7f:b6:be:83:
cb:e6:1d:cd:1a:8e:c1:93:43:52:39:6f:0f:36:57:
9f:18:b6:e6:85:35:d2:85:b5:0a:a6:b1:07:b6:ed:
83:35:d1:a7:74:b9:13:8b:46:d7:5d:1c:02:65:2f:
54:d6:03:98:aa:e7:4c:59:15:e3:a3:78:e3:b5:72:
89:c2:74:c9:14:12:e3:b7:87:bd:6a:fb:b0:fb:c4:
41:dc:a3:e5:be:96:0a:ae:12:27:f3:97:da:a6:b7:
61:cb:d7:b4:fd:76:7a:43:d6:ac:59:cb:90:58:85:
5d:45:f6:61:4f:5d:1d:9a:0b:d2:eb:3e:a2:62:0c:
1a:69:70:5a:b5:a9:58:bc:6f:00:71:28:cf:08:d9:
63:3f:1f:32:26:de:d7:87:0c:98:f6:d6:d1:d5:38:
fb:92:57:15:a5:c1:fa:c3:29:0e:3a:fb:19:83:c9:
99:d8:27:c1:a0:00:7a:44:ac:b6:fb:eb:50:53:d9:
cf:9a:d4:cf:58:60:5e:a9:25:32:cf:c1:2a:f6:1a:
01:91:39:5d:ba:5e:76:ad:14:3e:2d:65:82:1d:45:
90:63:77:c4:4a:55:3e:07:ca:93:b6:0e:75:c4:92:
75:04:cb:92:b5:a7:9d:65:25:fd:f8:1f:1a:4d:f4:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:61:77:18:C7:3D:0D:94:E6:26:8E:1F:35:FF:6C:00:46:C5:2B
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7f:86:93:3e:22:fa:4a:0f:5b:10:72:84:6a:14:d2:e7:29:
3e:22:3a:e4:3e:a0:c7:aa:5b:f4:b6:b9:7a:99:52:b8:d3:25:
84:50:3f:6a:06:8c:d2:75:cb:a8:c5:57:3a:09:89:16:cc:ce:
c6:b0:10:f3:e9:0c:a5:a8:07:25:11:41:19:7e:9e:36:30:18:
d0:ed:78:0a:60:64:09:98:6d:1d:c8:62:d9:e6:d3:73:4b:33:
7a:4c:30:b7:77:af:c8:35:d0:df:37:e0:8d:db:32:8c:6a:a1:
37:cf:43:53:43:6d:56:2c:a0:de:e9:bc:4f:c5:61:36:60:27:
31:1e:f2:c3:e3:ac:ee:e1:ba:f7:3c:a1:15:0c:3c:d8:90:9b:
32:64:08:0c:42:92:3d:ea:d0:d6:4d:19:b2:9b:8b:4b:7c:8b:
61:88:bc:5e:18:7e:f0:83:13:00:65:ac:ed:2c:5c:06:d7:12:
9c:c5:5e:cd:08:dd:1e:b7:82:69:57:0c:82:de:cf:76:33:17:
9a:1e:c3:59:18:d9:f6:5f:a9:15:69:1c:3e:e6:f2:25:d5:3c:
47:52:20:6b:73:1c:e6:91:b6:79:2b:c6:db:87:88:d5:08:77:
b5:71:5e:6f:19:b6:28:af:db:b2:15:a9:fe:33:1c:9f:fa:97:
31:40:41:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:04:46 2025 by rpki-client