Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: ZQ9cAiuuMvef+Nns6suXYdWEQ1YleB5zMiRj66fYIO4=
Subject key identifier: E4:BD:F1:4D:06:EF:B5:AF:E7:CA:08:FE:A1:17:D5:9E:44:08:78:CD
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 01974AE8E401D2BD593BCEDCB1F27B620F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0283
Signing time: Sat 07 Jun 2025 15:01:06 +0000
Manifest this update: Sat 07 Jun 2025 15:01:06 +0000
Manifest next update: Sun 08 Jun 2025 15:01:06 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: S1tOQrd+4qHdHCGR1eJif7ikAha+B1rDcYzbVEyK6qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:e4:01:d2:bd:59:3b:ce:dc:b1:f2:7b:62:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Jun 7 15:01:06 2025 GMT
Not After : Jun 8 15:01:06 2025 GMT
Subject: CN=e4bdf14d06efb5afe7ca08fea117d59e440878cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:80:9e:8a:88:9a:32:ad:cc:8a:b9:f0:7e:
d1:a3:4a:3a:e4:29:e8:f5:cf:0e:11:a1:98:bb:c6:
d0:d9:03:9b:73:f3:39:39:4c:5c:65:82:7e:59:a2:
9d:36:fc:02:71:4b:41:bb:91:b6:8e:74:0e:c7:8f:
c5:b2:f6:c8:c7:cc:a6:a4:93:95:36:09:09:76:74:
03:c5:a6:db:ed:f4:a3:16:d6:1f:66:e9:a1:03:1a:
1a:a5:c5:b6:5c:b6:20:3c:43:6b:8f:c4:5c:4c:0e:
21:8e:fe:02:15:7d:d6:f4:16:cb:da:0a:8c:e2:0f:
f1:51:eb:e2:78:47:5e:b4:7b:5f:72:8b:ac:11:fb:
ad:53:d0:eb:87:8a:44:34:b1:16:0c:a7:d5:c3:d9:
f8:5d:bf:c7:9e:00:36:db:4c:b5:44:96:8b:7d:3a:
e4:d2:05:a8:be:b4:28:5e:55:ce:88:b0:90:51:c9:
d4:f1:24:56:19:d5:38:4a:55:12:91:e9:83:24:4f:
43:84:b2:dd:a1:cf:f2:1f:f6:ed:eb:e8:42:74:54:
f7:06:c0:fe:65:af:18:5b:06:f7:c9:2e:38:2f:b1:
3a:ab:87:23:71:f9:c8:90:3e:4f:d7:dc:37:08:f0:
9f:8f:16:f1:52:41:57:ec:e1:09:9f:e2:c8:78:60:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:F1:4D:06:EF:B5:AF:E7:CA:08:FE:A1:17:D5:9E:44:08:78:CD
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c1:e7:cd:48:86:32:b4:5d:d9:0a:a9:c6:c1:c6:d2:d3:67:
e7:1e:b1:dd:bb:33:aa:38:7b:7e:f7:d5:52:8a:bf:51:ff:df:
0b:47:50:0e:17:d7:59:b7:c7:3f:7b:4f:bb:05:db:88:6b:78:
aa:d0:5b:42:ba:de:1c:58:c5:d2:35:cb:61:97:7d:49:8d:83:
bb:5e:ca:9c:83:fc:e3:f9:c8:df:0a:cf:6f:1b:fd:69:7f:15:
7d:7c:e5:d8:9c:13:1f:65:31:df:f0:e6:d7:5c:3a:cc:c8:9e:
a0:d5:24:d2:be:31:1b:ae:f2:9e:7c:f6:36:83:eb:14:9e:79:
52:05:06:10:0d:b7:20:a7:59:16:8d:00:36:9d:c1:c6:81:bc:
73:76:e4:50:e9:db:d9:ad:0f:12:90:6f:f2:21:a6:a2:1f:f7:
b0:30:c7:60:85:52:5b:31:c0:e0:91:ba:36:15:99:92:d1:cd:
dd:c8:1a:aa:62:2c:3d:87:0d:8b:ba:16:a2:42:4d:e9:d9:32:
88:71:3e:f6:8d:c4:65:39:ce:5e:a6:de:df:e8:62:a6:da:e1:
3a:0f:5e:b0:6b:b1:43:85:8e:e5:5a:27:c8:67:cc:63:4b:7e:
73:e2:36:4a:0e:13:73:f2:ae:ce:1c:64:40:51:3a:c5:d1:f2:
0d:06:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:22:49 2025 by rpki-client