Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: XSzJb656Mw50Vay5Bhk5MVJlxTwP81RqKMawuyKEOoo=
Subject key identifier: 91:C0:FC:7B:DA:83:16:B4:18:F7:B7:D7:0B:21:FF:A7:25:D6:CC:30
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0198819E2107DF810F0C6DAB19F9101D6E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0256
Signing time: Wed 06 Aug 2025 23:01:20 +0000
Manifest this update: Wed 06 Aug 2025 23:01:20 +0000
Manifest next update: Thu 07 Aug 2025 23:01:20 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: c7Ou65CsDT4mpjBe/DgBLxkC0eLaHY2Crs7Mv7xvWYw=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:21:07:df:81:0f:0c:6d:ab:19:f9:10:1d:6e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Aug 6 23:01:20 2025 GMT
Not After : Aug 7 23:01:20 2025 GMT
Subject: CN=91c0fc7bda8316b418f7b7d70b21ffa725d6cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:66:45:40:3d:be:5f:98:55:a9:41:9c:cc:
30:ef:59:c6:b8:83:d3:f7:4c:f0:d5:b9:de:08:ca:
f2:e2:1c:a1:9f:e1:4a:6d:73:24:c5:5d:ee:9e:ee:
d8:e4:ad:60:ef:d1:41:6b:2b:80:8f:9b:4b:7c:44:
50:82:a1:ef:7c:b5:06:5a:5e:fc:c8:c4:22:48:05:
81:c3:f4:36:d9:7b:f9:93:02:80:8b:06:4f:a8:29:
45:70:be:bc:e1:8e:5c:6b:1e:a1:7b:97:6c:a5:d6:
8e:10:c1:13:50:93:eb:4a:77:5d:23:72:53:b6:d7:
4e:5c:da:c4:66:a3:12:58:df:29:3b:b8:ca:7d:d8:
c4:6f:23:75:b2:c9:c2:49:dc:39:03:55:30:cf:dc:
d0:e3:8a:92:05:2d:d7:c8:9e:84:ba:bc:e7:6d:83:
1a:3d:26:cc:22:6e:a1:8f:ee:ed:bd:9f:b7:a2:dc:
f2:b3:bb:83:3f:bd:a5:b0:3b:32:af:ed:db:f1:9b:
8e:1a:b3:3b:6e:44:00:65:9f:da:92:00:7f:44:4e:
b5:6e:3e:fe:95:28:cf:75:c0:49:f6:71:20:4e:a5:
20:23:49:ad:1c:4d:95:44:a1:73:31:05:24:ab:a5:
27:6e:39:d5:fb:76:69:e5:9e:59:f7:93:18:6c:c7:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:FC:7B:DA:83:16:B4:18:F7:B7:D7:0B:21:FF:A7:25:D6:CC:30
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:d8:16:f5:96:32:9e:d1:c6:78:09:48:c2:b3:c5:e5:99:
c1:ce:ef:f3:78:3a:45:0e:0b:fa:8f:93:76:25:b0:25:8a:76:
33:b4:06:07:ae:16:63:f8:1b:4a:a2:61:17:34:fc:7d:3f:55:
92:0e:67:c2:69:91:94:fb:71:11:42:8c:ae:73:59:25:d1:62:
87:b3:48:03:97:9b:0b:b4:52:25:1d:79:4e:66:59:a9:dc:15:
eb:09:ae:d9:23:fc:92:3c:c4:e3:59:bd:e0:5e:7e:00:67:86:
ab:ee:38:1b:2a:6a:63:fb:37:d4:d6:c9:5c:83:0d:db:28:59:
69:d3:a7:07:4e:bc:c9:e9:d1:b8:64:36:2e:0a:bd:eb:27:6c:
7d:3b:ca:4c:3e:be:ea:44:62:ef:30:6f:ea:cd:ff:93:6c:31:
58:6d:2a:1e:6e:1d:7c:9c:f6:7f:d0:4e:66:a5:1b:5a:a7:e8:
6f:d6:f7:f8:4f:5a:5d:e4:c3:dc:7a:3c:44:cb:7f:ae:2d:5b:
4e:c2:7c:17:c8:29:c5:50:4d:26:b3:c5:ec:7f:28:16:30:f4:
32:5e:c6:4d:3c:e1:c5:ab:b8:57:41:cf:30:92:ef:d9:57:9d:
f8:f4:78:72:35:41:c5:10:e6:3b:c2:f1:83:1b:d2:e4:89:8e:
01:63:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:18 2025 by rpki-client