Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: 0JSHkc6CgCAwzkz2X5iYkIbtdSXWL+gQw1fHvF5utrk=
Subject key identifier: F3:3E:E6:6B:28:A0:91:32:D9:13:F3:7A:E7:07:C8:AE:3E:FA:72:E3
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019767A92039005AECA2EE9FABDEE78DED7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 01C4
Signing time: Fri 13 Jun 2025 05:00:26 +0000
Manifest this update: Fri 13 Jun 2025 05:00:26 +0000
Manifest next update: Sat 14 Jun 2025 05:00:26 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: I+KK3Q2Kv+7LbngbLbHaFAwp61fD1ziz+7+n8qNPYVI=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:20:39:00:5a:ec:a2:ee:9f:ab:de:e7:8d:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jun 13 05:00:26 2025 GMT
Not After : Jun 14 05:00:26 2025 GMT
Subject: CN=f33ee66b28a09132d913f37ae707c8ae3efa72e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e4:f2:3c:f8:61:10:d0:da:d2:db:3b:98:02:
d4:a6:b4:71:f8:a5:f9:cd:08:e4:c1:31:4e:e2:3c:
fa:3c:17:39:c8:d3:c3:29:55:ff:ae:aa:37:c8:77:
fc:34:da:99:f2:1c:5b:ce:4a:d3:bb:ed:86:12:7f:
21:ac:95:5e:84:1c:b7:2b:d9:e4:ae:ff:e5:0d:30:
e0:f6:11:0e:f0:6f:a8:1f:55:e6:30:3e:8c:bc:74:
8d:20:d0:87:1d:32:44:46:43:60:1c:0b:41:ad:9c:
70:59:b5:2f:3a:1e:0f:94:16:ad:58:d1:f9:bf:2e:
9e:7e:70:58:93:d1:82:74:37:08:34:5f:81:50:b7:
70:be:82:49:fc:ab:58:ea:4e:50:4d:cc:2e:b8:17:
fe:ee:f7:73:84:39:81:3f:1e:aa:b4:da:00:c7:f9:
66:f3:5e:34:ae:13:7a:ca:fd:90:f5:30:45:bb:a1:
79:ef:35:7a:74:cb:e2:d8:38:01:07:68:ed:21:2a:
a8:b7:d1:fc:34:a8:99:57:de:ca:5f:de:f4:21:5a:
93:cf:63:b1:55:ad:c1:ea:4e:39:b6:ec:c0:9f:79:
65:88:4c:7b:f6:b3:de:bf:d2:14:da:88:32:41:7f:
33:2b:c4:76:40:b9:25:ab:68:6b:05:9a:8e:b6:f7:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:E6:6B:28:A0:91:32:D9:13:F3:7A:E7:07:C8:AE:3E:FA:72:E3
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ee:2f:c2:14:64:06:0e:3c:02:b8:cf:ce:28:2f:7a:9c:5a:
e3:0d:e5:da:da:22:97:88:c5:58:7f:b4:e0:5b:2a:19:35:bd:
35:26:46:a2:25:39:9a:11:7c:d8:1a:fe:57:43:84:8b:26:16:
43:e4:20:56:d7:2b:36:ec:da:84:ed:3b:96:f7:14:e7:72:16:
bd:d3:c0:f7:fc:83:0f:d3:b5:9d:c7:18:47:38:57:61:04:5e:
2a:bc:c3:90:4f:a2:6f:b0:19:a9:79:13:13:e8:6d:8c:f3:ce:
9c:98:d9:69:66:6d:8e:a6:c6:9b:92:f6:2f:5d:4e:d6:3c:1b:
fc:14:91:cb:d9:eb:36:6d:03:03:ad:38:66:7a:d8:e7:05:6b:
31:29:77:9a:ea:57:bb:d4:7d:db:09:dd:10:6e:4a:88:e6:5f:
1a:eb:87:09:cb:40:c8:43:82:38:66:12:d3:8a:7c:37:a1:22:
ab:be:9a:c1:b2:15:40:dd:67:ca:f8:89:cf:9c:67:c0:2a:5e:
62:c7:8f:91:4e:a6:ce:80:0e:05:24:dd:5c:66:24:a5:a8:8e:
7b:86:8c:5a:20:01:eb:d9:19:0b:ed:10:1d:32:4f:03:5d:44:
1c:96:58:b3:7e:63:05:f7:a7:5a:fa:3c:26:7d:ec:1e:c6:a1:
7d:19:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:28:24 2025 by rpki-client