Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: 1DNg54CS++BqhdwuyBKwHMt8rg/kz4P4btAUMaFTq9Q=
Subject key identifier: F3:33:1F:BD:4D:E2:32:3A:AC:6E:3C:A3:66:A8:E6:74:5F:53:23:C5
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 01991F5485BA1D12A43E52B4D87D1C5A89FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1674
Signing time: Sat 06 Sep 2025 14:00:56 +0000
Manifest this update: Sat 06 Sep 2025 14:00:56 +0000
Manifest next update: Sun 07 Sep 2025 14:00:56 +0000
Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: IdqlBG0+Cla1Scw6OOZJa2SlB1wIk/ixOmbOSp7JhGk=)
2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:54:85:ba:1d:12:a4:3e:52:b4:d8:7d:1c:5a:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Sep 6 14:00:56 2025 GMT
Not After : Sep 7 14:00:56 2025 GMT
Subject: CN=f3331fbd4de2323aac6e3ca366a8e6745f5323c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:16:7a:0f:bc:22:95:1b:69:34:f5:6d:f7:00:
13:f4:fa:b4:0d:e5:94:db:11:d3:e7:e4:8e:71:2a:
bd:66:8d:46:53:b6:81:cf:fb:c0:66:87:14:ea:cc:
09:d4:05:91:92:f0:1f:3d:de:ff:48:f6:ae:55:d5:
e8:4f:69:04:c5:22:b0:d8:2a:a3:32:a4:64:30:b7:
8f:ee:90:1d:e3:eb:44:10:dc:25:f4:68:e7:2c:62:
9f:17:bd:b4:42:70:c9:ef:f3:69:8d:c1:cd:ba:43:
89:40:4e:4e:6c:db:3f:4a:f6:60:c0:95:d9:d9:fc:
a2:e6:02:06:da:58:b7:e5:d0:4f:da:20:4f:61:99:
7e:97:83:c0:75:6e:40:8f:ec:4b:01:d5:94:eb:02:
30:fc:54:29:29:6f:ac:08:fa:15:ac:19:4e:94:5c:
6b:bf:fd:da:f7:69:55:cc:fb:3e:60:ed:b0:6e:34:
c3:69:07:67:6e:3c:e5:90:b7:6f:4c:5f:ee:d6:db:
bd:22:e2:53:12:91:f3:d8:46:0d:f8:a5:8c:69:97:
31:a2:94:92:f9:94:e4:fb:0f:fe:3c:57:e5:2a:58:
e1:9e:3f:8c:20:f5:7f:c2:41:19:b6:6f:b2:51:51:
51:25:89:d1:09:86:5a:ac:34:fd:98:e1:86:ff:27:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:1F:BD:4D:E2:32:3A:AC:6E:3C:A3:66:A8:E6:74:5F:53:23:C5
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:ea:eb:4b:e6:3c:23:50:fc:f8:05:7b:50:3e:5c:53:2f:
da:47:e2:b3:f5:c9:37:8e:00:6b:1c:05:86:2a:cb:98:b6:46:
75:a3:8f:fd:1d:7d:99:fd:de:ec:b2:ec:76:7f:5a:9d:5d:c6:
e5:a0:8a:1c:4e:27:ca:55:9d:22:68:a5:50:b4:f4:ad:21:3f:
47:00:c0:63:81:8b:d5:e5:2e:82:66:af:c8:9c:f3:85:01:f1:
83:ac:83:cc:99:44:24:f4:a4:c2:5b:8a:5e:ab:11:41:46:f5:
c2:19:d2:a5:04:5d:ea:5d:bf:f6:97:b4:a9:3c:8d:82:17:8e:
ad:11:e3:bc:72:da:66:eb:5d:31:76:80:91:f2:05:55:01:5b:
d2:c0:1e:bb:78:ea:32:7b:b8:91:c8:32:0a:ca:70:a1:02:61:
01:14:f7:08:20:e7:af:f3:4c:8f:d6:75:6f:25:f3:be:63:00:
5c:ea:87:88:c1:66:90:89:b4:4a:5e:dc:b3:6a:1c:07:f8:ba:
7a:b3:50:90:75:7f:a7:60:d5:77:4d:22:27:f5:40:25:a5:e1:
67:60:bd:42:c0:e9:7c:2b:a0:f5:9a:f1:f3:b6:62:38:fb:6a:
47:7f:1a:a7:36:f8:3d:79:13:41:5c:7c:28:2c:7a:d7:d5:55:
e8:21:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:09 2025 by rpki-client