
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: UIwtPYKf4nA2DgE5SL/ScbbqywnndVXEptx66bLzIwc=
Subject key identifier: D5:12:1A:92:16:70:CF:C6:A0:A7:3C:95:5E:66:77:6B:E1:01:FA:E1
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 01974A7B23831E7960161C04811A22B0DB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: xW9/6+6jaqPgC/honxloc5Dlmlye9hbxVJ8k3uDC7h4=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:23:83:1e:79:60:16:1c:04:81:1a:22:b0:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=d5121a921670cfc6a0a73c955e66776be101fae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:11:55:2b:e0:de:e3:d5:36:42:3c:81:f9:
7b:22:35:df:d3:ff:f5:4a:53:44:f8:fb:91:2b:bc:
da:91:17:e8:04:e2:fd:60:da:d3:e2:7e:76:54:3b:
36:47:b8:cc:c7:18:70:e6:22:ca:5e:ee:10:9f:ef:
5f:3a:fc:9b:78:85:3b:0a:61:f1:aa:1d:cc:89:d7:
51:09:c4:f5:85:a6:94:30:7d:4c:6b:eb:dc:52:f4:
1b:fe:bd:e1:40:16:ed:eb:8c:ce:b4:7d:86:28:89:
ab:f6:a8:41:4b:76:b9:3f:95:86:53:06:0d:4f:b4:
99:b2:13:a2:df:53:d7:02:49:10:f1:5b:71:ea:0e:
b1:70:17:3e:aa:69:3a:d6:79:fc:9d:da:c3:37:ed:
d7:c6:50:2a:87:ef:7c:4b:0b:33:21:fd:81:1d:f7:
9b:b5:9f:10:3c:fb:90:66:6e:9e:89:63:8f:f9:90:
ac:c6:fb:2b:ca:45:9d:bb:ae:ee:75:b9:0d:52:cc:
e6:6f:5c:5f:9d:02:2b:02:03:02:ce:91:22:5b:b7:
a0:c1:c7:eb:8d:e8:1d:2c:1c:31:d2:4c:c0:e3:72:
f7:67:5f:0b:28:4f:bb:b4:9f:2f:87:10:dc:4b:81:
f4:38:44:21:a0:23:3b:62:a8:8f:bf:b4:48:16:af:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:1A:92:16:70:CF:C6:A0:A7:3C:95:5E:66:77:6B:E1:01:FA:E1
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cd:06:63:4a:6f:fb:78:53:21:0d:07:9d:72:31:a0:bd:e1:
ad:04:06:f4:ef:a4:ae:a6:40:ef:d4:01:e8:13:c7:8d:af:f6:
7e:9a:63:d8:5e:ea:cc:a1:a8:2c:d4:01:c8:4b:7c:a5:83:c7:
45:22:1b:8b:db:e7:34:67:31:d1:67:2b:34:56:66:d4:1d:6e:
3d:18:ac:2e:27:87:0d:89:43:26:c0:7f:39:3a:f3:28:6b:3a:
5c:d3:fa:36:ba:c6:de:a8:f3:d6:d1:2f:b6:ee:c0:9c:5f:16:
8a:60:99:f7:ac:d1:7f:a7:8b:c6:e3:ad:cf:13:aa:d8:74:14:
90:2c:fd:84:76:0c:ed:21:b1:77:ad:af:21:0e:91:9a:8f:42:
92:d3:98:7c:1b:4a:d4:9a:e1:ac:21:24:ad:55:82:ab:02:9e:
46:a3:0c:fb:b9:f0:26:ec:2f:26:54:a0:21:0f:51:a7:61:aa:
e3:04:5d:87:c0:06:68:49:74:34:c5:1d:87:a6:90:5c:06:14:
a8:6d:9b:25:8c:b2:49:14:bc:a6:d1:cd:d8:29:02:29:0f:b8:
8c:a5:0f:e6:aa:37:bc:32:38:fa:f7:36:41:61:81:ef:e6:b8:
aa:30:5d:d8:18:20:7c:50:01:f3:e6:c2:78:de:bb:e6:f4:f6:
29:cc:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:33 2025 by rpki-client