Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: AEZ/8UCKGy0yDtYRH2dFovl2TmBNSD4i8v4V//UMfTk=
Subject key identifier: 7C:13:05:BF:5C:6F:DE:54:59:EA:A2:37:1E:FF:70:28:C9:F1:25:5A
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0197715146D681BE2BBB27E6A1C503B97157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 01C9
Signing time: Sun 15 Jun 2025 02:00:41 +0000
Manifest this update: Sun 15 Jun 2025 02:00:41 +0000
Manifest next update: Mon 16 Jun 2025 02:00:41 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: jBEnEYT/u0HkyPJ2vKvkMe1K5UYkEBfAXHrrsW12oDE=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:46:d6:81:be:2b:bb:27:e6:a1:c5:03:b9:71:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jun 15 02:00:41 2025 GMT
Not After : Jun 16 02:00:41 2025 GMT
Subject: CN=7c1305bf5c6fde5459eaa2371eff7028c9f1255a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:26:67:f3:06:b7:2e:ed:30:8b:88:7f:1c:
21:5d:2a:5e:a2:7d:2a:b9:8f:a1:33:84:d6:ad:c1:
00:37:07:aa:32:15:90:b9:ed:17:de:31:d4:30:6d:
02:41:1f:7d:0f:66:a7:2f:54:16:bb:62:23:ae:b3:
2e:92:76:4a:59:5e:54:e0:19:ad:ee:4b:cd:8e:4f:
35:99:59:83:19:04:7d:34:d3:be:7b:77:02:89:6a:
a5:27:68:f5:6e:1f:b5:3b:72:17:71:a2:a6:02:71:
22:25:49:21:5a:cf:55:3b:fa:15:3d:54:3d:fc:16:
bb:b7:85:d5:ba:ab:68:42:9b:4d:b5:72:d7:af:5c:
7d:b4:f6:87:a0:e9:a3:fd:28:c8:6c:af:4f:06:66:
47:3b:4b:23:5c:76:68:76:7c:66:03:08:4e:43:a7:
60:a7:23:53:d3:ad:65:d9:e0:7e:ab:0a:66:ac:c5:
47:be:6d:34:b1:40:71:4d:29:09:25:7b:93:e8:d2:
35:60:c7:82:6f:24:6f:1d:cc:30:35:b8:73:a9:fd:
44:4a:de:ea:24:61:51:a7:0e:e3:73:c0:fe:2d:6a:
6d:6d:c0:fa:82:05:63:09:10:be:92:1f:d2:0a:bf:
66:93:8e:f2:32:d1:2f:09:94:e0:ea:a1:35:75:76:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:05:BF:5C:6F:DE:54:59:EA:A2:37:1E:FF:70:28:C9:F1:25:5A
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:c4:df:c2:05:28:4c:c9:18:c3:52:91:34:39:50:58:fa:
a6:5b:4f:1a:b8:6c:dd:d6:cd:6a:6e:39:e3:ad:2f:d0:04:1a:
c1:29:20:8d:e6:00:43:b7:cd:5e:f4:7c:ac:77:35:53:7c:5e:
0a:b5:7f:2d:cc:20:5a:f9:f7:66:d6:dc:1e:42:77:20:ec:69:
54:b8:80:bf:84:bb:12:ed:4b:8f:28:e2:85:e4:44:09:9f:36:
ee:a7:82:6f:0f:f6:da:38:28:81:b5:64:0b:b7:82:ea:e5:8d:
55:8b:dc:47:9c:c1:77:f6:9e:a7:d8:ea:d1:4b:bb:55:ad:46:
56:68:7d:fc:06:94:61:53:bc:4d:f0:cb:0a:cf:fd:24:0b:37:
d0:80:87:19:6b:f7:b1:a1:22:42:09:fa:f6:0f:b2:4d:63:9b:
98:cc:44:f2:79:ec:b4:f8:36:08:4c:04:4e:c8:a8:c0:47:02:
44:23:7c:08:72:e1:cb:0d:f0:ac:28:d7:ac:58:4d:43:d4:dc:
9b:9f:8e:c3:7f:a2:c7:68:ba:ae:d0:58:67:03:27:5e:c7:34:
a3:05:fd:2d:52:88:07:e3:56:fa:7e:17:7e:39:45:db:56:4a:
ea:f6:49:0d:c0:2f:23:40:4f:e0:98:d5:1b:47:f7:bf:83:92:
16:f5:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:36 2025 by rpki-client