Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: BIoKV4REU0SKcLgI58uvOzfKt9WkgXhXEsivaDoBb4c=
Subject key identifier: 0B:B5:3C:C0:3D:E6:D8:30:B3:3C:91:9D:C1:6C:6E:2A:40:63:B2:C6
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 01974B5652F00B89B1AD636B95FE823F45C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 0528
Signing time: Sat 07 Jun 2025 17:00:37 +0000
Manifest this update: Sat 07 Jun 2025 17:00:37 +0000
Manifest next update: Sun 08 Jun 2025 17:00:37 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: WiAshRUd46aQlbpyzTaFbtUkAvRDOKK9oV4Cl9JibjE=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:52:f0:0b:89:b1:ad:63:6b:95:fe:82:3f:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Jun 7 17:00:37 2025 GMT
Not After : Jun 8 17:00:37 2025 GMT
Subject: CN=0bb53cc03de6d830b33c919dc16c6e2a4063b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:b6:de:7a:7d:49:2f:dd:82:de:17:62:35:
3a:6d:a9:48:95:87:25:07:1c:9e:db:a9:c4:48:61:
ec:88:cf:c6:21:ae:b1:c6:03:0e:eb:70:52:bd:21:
16:78:fd:23:ce:8e:80:4e:1b:32:db:b6:b4:99:c1:
cc:04:9b:a6:f3:a6:5c:ea:75:84:3d:d8:be:5c:45:
7b:02:6f:97:18:34:13:31:31:b2:55:20:eb:a2:69:
47:a7:1f:63:7e:bf:67:9e:d2:68:39:46:a7:a3:bd:
71:8e:36:52:ea:8a:91:5e:96:2e:31:5e:48:91:18:
7d:5e:af:cc:fa:1e:3c:2b:b8:f0:13:16:3a:3f:0e:
c7:58:77:c4:5e:9c:d5:24:91:b2:9c:29:62:0b:2b:
b4:13:61:10:dc:a0:e4:5f:3f:a7:02:f1:72:eb:a1:
fe:a2:35:c3:a1:b0:93:c3:87:df:ee:b1:fb:df:c2:
eb:fc:3b:1d:e9:0a:f1:ee:6b:30:38:66:b9:35:6d:
7c:e7:91:ad:bb:6d:1e:7a:d8:87:70:f1:96:09:38:
13:d7:ff:b1:82:cd:2e:19:95:6c:f3:c0:67:36:28:
ac:95:7a:04:54:8f:8f:e0:5e:67:d8:7b:19:39:cb:
15:12:a9:5c:46:ef:3e:fb:5a:da:41:63:c9:5f:35:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:3C:C0:3D:E6:D8:30:B3:3C:91:9D:C1:6C:6E:2A:40:63:B2:C6
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:58:f5:69:94:dd:a5:49:60:ed:c0:85:c8:fc:5c:d3:6c:a2:
4b:54:8e:ab:41:fa:9d:0a:0a:a9:b0:b9:dc:d1:c6:31:54:b4:
09:6a:ca:95:32:62:43:a7:06:14:20:45:25:38:0d:29:35:5d:
39:4d:4b:6b:dd:26:1b:58:61:47:7c:41:f7:1e:64:f7:c9:13:
29:82:8c:27:af:7a:1e:d7:82:fc:7b:1a:2e:b6:91:2b:e8:89:
54:e7:24:19:8b:7f:5d:14:4f:a7:db:6b:a7:f7:fe:de:55:b4:
40:ed:df:8f:ff:d8:e1:2b:fe:be:98:5f:5d:27:2c:ab:4a:ae:
e4:c5:38:73:dd:fc:5f:ad:a3:eb:d6:3d:0e:6b:82:53:05:19:
1b:7e:ba:b6:85:78:d5:c1:36:4e:ca:f4:36:50:85:61:f4:fa:
97:2e:cf:f1:d8:ee:bb:fe:58:de:f2:e2:6f:22:f4:b6:4f:44:
57:35:bc:95:c1:ce:ae:c9:3c:e6:bd:af:29:69:ac:98:41:94:
58:8c:3c:bb:86:93:38:89:1d:68:e4:cd:45:aa:c2:5f:c8:42:
e0:0b:01:7b:5b:3b:a4:de:2b:54:d6:75:e3:96:b0:45:92:cb:
3b:ad:22:40:db:ef:a3:a6:93:2c:d6:0a:d9:2b:9c:68:d0:13:
a7:9c:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:03 2025 by rpki-client