Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier: eHfzDfq89W/UeXX8nkJSn83hRyuQSX9TxtMI/VQPJuM=
Subject key identifier: B4:EF:CC:84:7A:13:A7:3E:5B:07:31:12:55:F9:DC:50:C2:6E:67:76
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 019770E31F595558460AD4FD19ECBFA8DAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number: 0EF3
Signing time: Sun 15 Jun 2025 00:00:22 +0000
Manifest this update: Sun 15 Jun 2025 00:00:22 +0000
Manifest next update: Mon 16 Jun 2025 00:00:22 +0000
Files and hashes: 1: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (hash: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=)
2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: lAvKEwUzNTePCHrHrhtr1anWhpT9wjOq3tXWA7pxNSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:1f:59:55:58:46:0a:d4:fd:19:ec:bf:a8:da:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Jun 15 00:00:22 2025 GMT
Not After : Jun 16 00:00:22 2025 GMT
Subject: CN=b4efcc847a13a73e5b07311255f9dc50c26e6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:82:9b:7b:ca:bd:c8:b2:e8:be:d3:30:a0:
93:45:c6:d8:a3:88:9b:6d:76:bb:9d:9f:55:ca:3c:
4a:2c:73:e2:d1:59:20:a3:bb:5e:7e:79:0d:5d:d7:
cb:c8:b4:d8:e0:93:b6:47:a2:c8:bf:8c:aa:e5:19:
c7:77:dd:d1:8d:a6:43:db:18:4c:40:05:f9:ab:14:
7e:b5:0d:fd:39:5f:c2:da:de:33:7f:0a:ae:fb:33:
98:1d:a1:8e:56:83:00:e8:c2:b9:c5:6c:f4:4f:70:
6c:23:44:15:4c:36:50:52:50:07:06:ff:9f:54:59:
da:e9:3e:49:fb:b0:6e:f4:d8:11:e4:c4:eb:b1:db:
9e:79:eb:99:5b:06:6a:72:cd:61:b3:9e:41:51:fc:
ac:b7:43:c6:9b:83:ad:cd:75:f0:38:e7:c0:b2:bf:
32:ef:08:de:4a:83:0d:eb:83:d9:c5:50:84:1e:aa:
72:7a:6a:2a:60:4e:59:6d:bf:18:9a:27:2a:cd:8c:
99:d7:49:72:f9:2e:0b:58:61:59:ac:f7:5f:80:6a:
6d:50:2b:45:af:4c:b9:14:dc:21:96:e7:ba:25:78:
47:0c:92:41:9a:14:60:a3:17:e9:72:bf:e6:ba:57:
2e:80:4c:d5:a3:93:24:c7:6b:4b:50:74:40:d8:e2:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:CC:84:7A:13:A7:3E:5B:07:31:12:55:F9:DC:50:C2:6E:67:76
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b8:14:e0:49:3a:4f:cc:de:3b:4d:7e:15:ad:eb:e0:70:e2:
47:37:fc:e4:6c:a8:9f:33:4a:3c:c3:94:d0:ea:e2:f2:1a:3a:
85:70:0f:d6:cd:c8:ad:0e:5a:18:27:87:bc:47:a6:ed:65:35:
92:f1:81:64:c9:fe:36:98:90:2f:70:d7:f4:5d:7e:17:f1:cc:
dc:79:f1:58:13:18:ae:dd:d5:fd:42:c2:bd:08:eb:e6:a2:29:
78:29:9d:35:77:01:30:a5:bd:ec:82:06:c2:48:8e:3d:2e:6e:
b2:8a:23:f6:20:1f:0c:f7:37:ee:1e:1a:f3:87:32:ee:19:51:
22:47:8e:3f:e5:2b:96:02:30:51:4d:92:16:de:a5:86:c0:fe:
c7:57:8c:fc:b0:01:0b:5a:01:22:2a:1e:fc:21:7a:a1:42:5b:
7e:8e:ca:90:eb:04:91:53:d2:82:78:41:e2:95:44:28:4a:7d:
91:cc:26:f9:9a:c6:70:c7:7a:93:5b:1c:7e:de:eb:d7:da:61:
86:dc:b7:d9:c8:70:fe:34:0f:dc:ac:be:73:d4:90:b1:a9:02:
2e:15:23:5c:9a:af:86:d0:7c:54:43:a9:cc:6a:e6:03:91:5a:
3d:e6:53:67:c0:24:5c:d4:c3:86:e9:cb:aa:46:be:c6:dd:a9:
d4:ed:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:48:25 2025 by rpki-client