
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: TAM5jQSaRZQB35v0kbA77TR3rbeAArTJz/BCYVdCsxQ=
Subject key identifier: 16:E5:A3:1A:E2:45:1E:F2:07:EC:FA:AE:85:EC:D9:F6:37:56:64:0C
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 019768F31300F4B1D9FEF6070FD05B91277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: 41
Signing time: Fri 13 Jun 2025 11:00:49 +0000
Manifest this update: Fri 13 Jun 2025 11:00:49 +0000
Manifest next update: Sat 14 Jun 2025 11:00:49 +0000
Files and hashes: 1: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: +PJSDN5AbvwwXOEQRGD8JRfF7p962phU5Wg4lJLwtyM=)
2: rrr9lD-1fMY09SJ_d8OflA80hiM.roa (hash: dlPtuTm7KAs7BBecLGSQ0tXT2j/4sVnjNpjS2hSNO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:13:00:f4:b1:d9:fe:f6:07:0f:d0:5b:91:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Jun 13 11:00:49 2025 GMT
Not After : Jun 14 11:00:49 2025 GMT
Subject: CN=16e5a31ae2451ef207ecfaae85ecd9f63756640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:18:7d:46:53:ae:6e:26:2a:0c:64:cd:ba:
f6:67:3c:30:2e:78:1c:90:5a:e4:56:33:55:26:24:
e1:8a:c2:78:cc:da:b2:81:f7:f7:73:9c:cc:03:f0:
b6:32:22:61:72:38:1b:d4:ce:43:c9:52:bc:f5:8c:
46:6c:93:5c:01:2a:00:6b:49:a4:ae:99:3e:b2:e8:
c1:7d:95:47:e2:20:92:35:15:89:01:de:7c:3e:16:
33:67:9e:1a:28:92:1a:43:2f:84:6b:10:3b:3f:b8:
a5:28:05:93:a4:e8:6b:4f:8f:a5:d4:62:0e:74:4a:
ec:1a:74:91:db:34:a7:1c:f8:30:45:7f:df:6c:c6:
6f:88:ef:27:56:6e:40:76:b9:1c:52:fa:08:db:40:
79:5a:45:a4:c2:7c:d4:60:2e:84:9b:2b:01:de:df:
4e:f5:f5:a5:90:cc:46:78:18:9f:3b:2b:81:df:46:
8c:44:ab:c7:5f:a9:de:ce:e3:63:5f:03:71:bb:f0:
f8:82:ed:4a:d0:43:e1:dc:63:01:4f:c3:d2:50:02:
fc:eb:26:b2:c5:ce:2c:4a:39:8e:d5:20:4f:ff:93:
c0:a8:43:7e:2f:ec:aa:a6:3a:2d:b6:1f:5b:d7:06:
76:b3:34:9f:8d:d0:b4:0f:d3:f6:0d:df:51:34:77:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:A3:1A:E2:45:1E:F2:07:EC:FA:AE:85:EC:D9:F6:37:56:64:0C
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:cf:a7:4a:9b:d4:bf:e4:86:0e:4c:c9:95:26:cc:9a:34:
9b:85:7c:ce:b6:84:a3:fe:b3:38:a9:09:75:02:fa:ce:b1:3e:
88:b4:13:91:be:93:1b:55:45:b2:c2:c0:b1:04:f8:f7:2b:8f:
14:35:90:2f:3b:41:aa:4c:d2:08:b3:72:01:86:7a:a9:a6:53:
92:2b:b8:78:9f:86:d4:9c:e9:1f:e9:1a:c2:72:46:3a:03:a8:
c5:a1:df:2b:20:63:9e:a3:bb:e4:a0:d7:56:c1:a8:2a:99:07:
22:2a:97:ee:ec:fb:87:66:d5:b4:bf:64:2b:f9:a0:f0:cf:67:
47:8c:42:bf:ee:34:ba:3d:42:8a:a7:0c:e0:68:fc:56:4d:09:
3c:24:27:b1:ae:3e:ce:61:b4:cd:6d:a1:09:4d:bd:cd:7a:01:
56:b5:ed:1f:25:5a:3d:5d:45:fb:0a:01:94:38:ef:87:ce:1f:
10:82:41:c0:fd:f3:d1:46:5d:57:80:15:92:3b:84:b3:8d:f1:
68:b6:dc:5d:8e:fc:36:81:fe:a2:28:30:d8:79:6f:4d:75:ca:
18:ab:01:88:e0:f6:0d:48:3b:3e:bc:51:d4:ed:4e:e4:01:ab:
8c:66:5d:82:fe:89:b0:ec:2b:ee:68:bf:fc:a1:be:e1:e2:b8:
29:37:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:03 2025 by rpki-client