Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: 2zy/uRxsnBLLGkkij82HFGNs9Geg0xRvBuAeOYgUOfM=
Subject key identifier: 98:AB:92:37:72:A2:99:C0:B8:3E:47:96:55:1F:0B:AE:13:A0:B1:42
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 0197477981FFA4C4F1FE8AC8683EF1E8678D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 23:00:34 +0000
Manifest this update: Fri 06 Jun 2025 23:00:34 +0000
Manifest next update: Sat 07 Jun 2025 23:00:34 +0000
Files and hashes: 1: C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa (hash: 7Q2JdX8Sk5ec7oQfahOu2+Hx1b1UUmWGaNbADZbL4l4=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: mK+Q7Yu2oMrzFF+JTJsgAWBUEx4IjDxVRRRhZBEkVyM=)
3: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:81:ff:a4:c4:f1:fe:8a:c8:68:3e:f1:e8:67:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jun 6 23:00:34 2025 GMT
Not After : Jun 7 23:00:34 2025 GMT
Subject: CN=98ab923772a299c0b83e4796551f0bae13a0b142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:ef:82:c3:fd:39:d9:19:0c:22:96:d8:53:
2a:13:24:e7:71:4b:0e:77:3c:a0:0b:a5:16:69:db:
43:ad:c5:18:5c:a5:c5:06:f8:b8:cb:81:a2:79:fa:
a5:d5:a2:95:e0:d1:29:c8:c4:70:39:b9:ce:2d:cb:
b1:68:46:e9:14:32:df:da:fd:95:c1:2f:5d:b9:48:
50:e4:a4:6a:9d:33:4b:e4:ac:c0:d3:06:ac:f8:87:
fd:f4:a0:f9:da:b2:1a:22:ee:24:0d:67:cf:82:26:
10:e2:5a:20:f0:5b:16:7f:d8:45:0e:09:13:13:a4:
a5:74:a4:b2:8b:fe:a7:f5:5e:64:2b:29:ea:49:7b:
fc:e2:25:8f:6c:66:d9:94:de:17:5f:c6:15:1a:a4:
96:a5:a2:5b:6a:81:84:1b:b4:a1:bb:3d:72:cd:02:
af:8d:a7:a2:ab:e9:6b:b4:5a:b8:39:77:47:09:f7:
dc:b2:91:db:3d:26:26:45:03:55:5c:c6:d3:d8:75:
c9:ff:47:69:40:c4:0e:43:2e:b1:82:8f:8b:71:3a:
4f:90:db:a3:26:2b:cc:32:51:6f:39:25:d9:39:83:
bd:8f:ab:c1:f8:75:87:b2:d9:dc:88:32:86:bf:d8:
9b:a3:16:0b:39:0e:0f:46:1e:53:ac:34:f5:46:41:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:92:37:72:A2:99:C0:B8:3E:47:96:55:1F:0B:AE:13:A0:B1:42
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:20:66:5a:c2:71:99:df:b1:c8:07:08:bf:91:4f:af:70:2c:
46:0c:f4:57:ce:02:a1:e1:19:6a:b4:82:8c:db:a2:b2:d1:91:
cd:8f:62:33:a5:71:e1:a3:c2:30:d6:20:3f:0b:10:9d:20:1e:
a7:10:ba:54:cc:f8:06:cf:79:bc:c0:6b:38:02:1a:eb:ff:a2:
ef:54:14:6c:a6:0b:a6:55:ca:84:ae:e3:81:d2:95:fc:7e:be:
65:dc:2c:5e:e1:8c:0d:03:96:40:0f:e0:33:06:62:c4:d4:54:
84:38:4e:10:5c:68:17:7e:d3:f4:be:80:ca:6f:3d:a9:68:d8:
6a:82:58:69:dc:a1:bd:e8:6c:4c:f8:cd:c1:f1:89:9c:81:57:
4f:6b:76:76:b9:b5:b9:85:b4:23:67:49:2c:68:7b:dd:97:41:
be:b3:d0:a3:15:3c:dc:ab:68:15:28:1a:5e:23:64:b3:d7:e3:
13:25:d6:76:e2:e0:61:c2:8b:bf:03:6f:08:d2:df:aa:6a:4b:
82:6d:f0:72:a3:e8:5c:85:a8:5e:8e:52:22:56:6d:c9:33:fe:
65:66:b5:20:17:0a:88:2c:e3:90:2f:0a:d9:23:e8:b4:ff:68:
00:72:fd:02:37:5c:b7:ea:67:51:93:71:a7:8f:fd:8c:9c:2e:
a4:36:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:34 2025 by rpki-client