Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: HDbkKcPQmU5In0POJQ9Esp5up7DQn8DtODSDBXipi0w=
Subject key identifier: B2:32:91:CC:F2:72:98:BB:8B:F0:B2:55:3F:3A:FF:BB:7C:A5:FD:06
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 0197488CFA80F27426C4F273CA537D51BA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 04C2
Signing time: Sat 07 Jun 2025 04:01:28 +0000
Manifest this update: Sat 07 Jun 2025 04:01:28 +0000
Manifest next update: Sun 08 Jun 2025 04:01:28 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: vsksbSeMzufnI+xXEBX03OE6yypaGcFN0oRHigSrdLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:fa:80:f2:74:26:c4:f2:73:ca:53:7d:51:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Jun 7 04:01:28 2025 GMT
Not After : Jun 8 04:01:28 2025 GMT
Subject: CN=b23291ccf27298bb8bf0b2553f3affbb7ca5fd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:8f:87:4f:0a:be:10:5a:8d:90:68:be:48:
6a:e2:77:03:3c:3f:50:9f:eb:a6:e2:a0:e2:b2:22:
83:b5:a3:94:f9:07:2e:6c:6f:3d:6a:26:d7:b7:fd:
60:96:07:f5:11:0a:5a:45:51:bd:2b:28:92:1b:e5:
fb:2f:ed:ee:f5:49:ee:62:15:34:df:64:94:cf:06:
36:04:94:dc:6f:db:da:f6:9f:93:2b:05:2f:e3:69:
8b:9a:97:bc:d0:90:02:4c:39:bf:62:9f:08:e8:8c:
7a:e0:55:e8:56:8d:4a:43:94:64:a8:73:50:4f:64:
c3:8b:12:9e:e1:63:5a:f0:3d:c9:90:3f:ca:f9:b3:
9b:50:8f:3b:35:e8:6a:7b:07:71:56:bc:21:e5:d5:
25:09:07:ac:ea:fa:9a:a1:b6:6b:2b:34:77:a5:9a:
11:5c:d6:86:51:81:b5:eb:41:ea:ea:63:5b:b8:b8:
2e:de:95:65:70:20:8c:1a:f7:8e:b7:12:9f:49:27:
b7:72:4e:24:70:74:0c:60:74:9c:1b:90:d2:eb:ab:
ee:ef:66:cb:44:54:11:1c:a3:ac:5c:02:57:49:50:
e5:74:63:41:65:07:f7:75:62:7a:f6:54:34:b0:e7:
9c:1c:e8:53:69:61:f1:ff:a0:c6:6e:5d:6d:f0:5a:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:32:91:CC:F2:72:98:BB:8B:F0:B2:55:3F:3A:FF:BB:7C:A5:FD:06
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:0a:f1:fc:33:dd:88:c5:03:b0:f3:8a:c3:6c:3f:e6:df:
8a:c7:47:f8:c2:82:bf:1b:4e:52:f4:a3:28:dd:06:d2:f7:83:
3d:c0:25:eb:2c:20:6f:a5:c0:65:73:be:0a:6e:ff:e9:15:01:
b3:28:8f:c5:05:89:7c:77:87:1b:2e:3a:5b:fa:eb:86:79:52:
6b:f1:0c:6b:a9:62:63:df:bc:bf:4d:0e:8f:0c:82:1b:e5:20:
38:ea:93:e2:38:ae:94:19:06:c8:a9:e1:fe:7d:96:de:d7:18:
a8:c4:d0:25:8c:49:94:5e:13:35:bb:f1:15:cf:40:07:a1:41:
08:6d:4e:70:82:8c:39:92:2f:cf:eb:a0:26:85:a0:42:a6:89:
60:1a:21:e4:c3:60:28:69:ef:87:e4:5e:2d:55:47:4d:01:76:
ed:7e:2c:f4:b0:fe:10:cb:0e:c4:e5:f0:b9:e5:5b:1a:79:e7:
b9:8b:e4:3b:fe:7c:da:9a:77:70:d9:d7:7c:b9:e7:4d:46:39:
e9:e1:35:ea:e2:0c:7b:08:03:b0:44:37:00:29:6d:ec:f3:0e:
0a:1b:ea:bd:4a:0b:fe:68:f0:d2:e8:d7:b6:8e:9d:c5:08:ed:
3c:c1:5b:d4:80:99:9f:a1:3c:ca:4d:f5:57:e4:ef:cd:9b:42:
47:f1:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:56 2025 by rpki-client