Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: 80yD+/mieceV31hg2TGDvG1vOUgWJF5OMz3Yy31iTXM=
Subject key identifier: BF:F1:2D:D3:98:BB:55:5B:C6:EC:18:E4:74:BA:1E:5F:06:76:09:2B
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019A725C48895CCD51A4BEAA759B53B277F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 0528
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: tOsEIYLrvRxLMThMBbGxQJZERphMt+vfysHKjEmi/UQ=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:48:89:5c:cd:51:a4:be:aa:75:9b:53:b2:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=bff12dd398bb555bc6ec18e474ba1e5f0676092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:b4:0f:07:38:22:1d:0e:f3:a4:9d:23:e4:
e7:a8:ec:10:b0:a6:18:cc:44:19:56:c8:02:b2:26:
4a:b6:0e:ed:65:2b:5d:68:2a:65:0b:8a:34:49:16:
1a:e1:8b:d7:80:f3:12:0c:20:41:b9:65:16:90:b3:
3c:f8:74:94:42:39:87:5a:d7:c1:b9:9d:fc:95:8d:
d8:7e:58:42:66:9b:16:6f:45:09:ee:61:a5:9a:94:
3b:e9:4c:44:c7:62:dd:7e:29:b8:3a:99:3f:01:10:
cf:85:dd:42:59:16:9b:69:79:68:c9:69:fe:c8:4a:
af:dc:88:f0:2a:fb:42:01:2a:49:83:95:bd:67:f6:
2b:47:c3:d2:39:5d:ac:ed:d4:5f:93:75:28:ee:1c:
9f:27:b5:82:06:cc:52:98:ca:4c:a9:df:6b:23:99:
52:d4:15:5a:89:f3:93:9b:fc:36:26:28:9c:2f:82:
77:dd:56:b4:73:a4:7a:fd:07:15:71:79:1f:c7:bf:
0c:fb:de:c3:62:4b:16:1f:1b:56:15:79:6c:8d:c6:
d5:8b:68:90:59:a1:7d:e8:57:fa:c9:a5:57:17:6b:
7b:a0:a5:ab:ae:f1:e7:10:27:86:d7:ec:12:cc:f4:
90:94:47:0c:70:45:06:8b:58:29:fc:5f:da:78:1f:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:2D:D3:98:BB:55:5B:C6:EC:18:E4:74:BA:1E:5F:06:76:09:2B
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:00:06:e2:9f:ca:74:26:17:80:49:c5:6b:63:32:25:f1:69:
5f:c9:08:04:3f:14:ad:b9:6d:3d:1d:10:c1:62:5d:0a:0a:f6:
08:a2:5f:64:88:6c:1b:2c:f3:77:19:e4:23:2e:21:ca:70:a7:
b8:3f:e4:2f:23:7c:62:14:5e:54:fa:0c:eb:b9:6e:ae:34:4c:
76:e4:0c:bc:af:03:f5:bb:3d:9f:ac:50:6a:60:d7:19:0b:27:
0f:a3:bc:b3:31:9c:ba:7d:33:fb:83:13:81:b1:2f:0e:10:f5:
38:11:2e:38:ad:71:54:8d:a1:0c:de:db:4f:ca:d9:d3:56:24:
b8:8b:2a:60:ef:fc:0a:31:c3:0b:9b:84:d0:87:50:fd:07:8b:
82:8f:be:bb:9c:a5:41:b5:fe:06:ea:2b:49:b6:4f:d7:9c:dc:
22:89:bb:da:9d:1b:9f:2a:9e:32:f1:63:f2:e3:be:15:83:04:
7b:bf:f8:d6:d6:4f:42:56:b1:d1:13:2a:2e:d9:22:77:cd:6e:
e6:49:8c:c1:e0:af:5d:fc:a4:01:aa:26:dd:8d:21:74:12:4f:
c3:c1:de:c6:c1:cc:68:c7:fc:df:dd:2f:ed:aa:63:3e:f2:37:
16:ab:f8:9f:dc:26:2d:fa:31:6d:ea:ac:55:fd:69:16:a5:6f:
89:64:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:29 2025 by rpki-client