Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: sIP2IOVVyfO7s2YbrwId6KdSpQbYDw7qizKGSa2EwTI=
Subject key identifier: 29:28:10:36:4A:2A:F7:AC:A1:64:00:81:46:4F:1F:DF:42:9C:30:B8
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019A4F2B836EDA36F0CBDF32B4FC4152CAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0345
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: 6+o87LJ/oKiZxAvNItCwCMONvrrhgawe1bFNLo8Kexw=)
3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:83:6e:da:36:f0:cb:df:32:b4:fc:41:52:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=292810364a2af7aca1640081464f1fdf429c30b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:70:52:55:d3:a0:6a:27:bd:5c:96:3a:75:
da:99:2a:a6:71:2e:4d:f7:b9:5f:d6:80:af:ab:05:
82:1a:f6:3c:85:08:22:59:ec:5f:bb:33:7a:32:0f:
31:d3:4c:d9:7d:40:b1:82:f1:15:80:64:9d:6b:cf:
3f:24:6a:ce:34:9f:a4:c1:da:8e:b9:7e:8e:19:d4:
f8:df:a3:61:2a:79:53:d6:a3:6a:16:0b:70:04:7d:
0e:4d:04:e6:71:26:6c:c8:1b:d8:9b:42:b3:0f:0b:
2b:04:f0:4c:9d:be:f0:b6:bd:06:bd:43:8f:d8:46:
b3:ed:71:8b:67:e9:4f:1d:43:30:c3:c8:01:d4:42:
5d:eb:e9:4c:29:af:99:04:fb:2b:93:21:b4:db:a0:
0c:fc:ac:1a:a7:d7:d6:6b:6b:6c:a1:47:ee:f9:0c:
01:d5:bf:b8:71:6a:f8:a6:2a:cc:5a:2f:3c:36:49:
cd:89:30:b5:e7:5f:35:6d:b7:82:8c:7f:34:ca:45:
f3:e2:b5:bb:7d:e9:7a:48:bd:0d:90:3c:4e:43:8d:
4f:df:ac:be:bb:fc:1f:34:67:15:fb:e6:00:c7:a2:
8f:57:95:7a:62:df:38:2e:bc:2d:11:02:bb:e2:8e:
d8:e5:58:04:82:e0:c1:08:5e:ba:db:74:22:08:76:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:10:36:4A:2A:F7:AC:A1:64:00:81:46:4F:1F:DF:42:9C:30:B8
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c4:19:58:db:06:ca:cc:69:3d:8c:19:a7:a2:21:f4:58:55:
29:ba:b5:dc:a0:56:63:b0:57:ab:56:ce:c0:0a:06:d3:c8:ce:
d4:91:1e:0e:93:72:a0:84:bc:22:e2:fb:f3:bd:6b:f1:6d:3a:
61:6b:a1:f2:c9:f7:ae:da:83:9e:56:23:a8:d1:d6:aa:9f:df:
19:09:05:20:d7:90:bb:76:50:9e:1e:88:32:77:ea:f6:ff:92:
09:ae:8c:81:ef:2b:0d:b8:ff:66:1f:3d:23:67:4f:1d:fe:0e:
21:2e:76:b0:52:ae:3e:3c:52:18:67:31:00:91:02:c8:fb:d3:
65:9e:b6:c7:47:a4:9b:39:b6:fa:62:05:8e:bf:8f:92:0b:3a:
ce:39:92:09:08:5a:c8:7e:ea:0d:84:60:94:7d:b1:96:19:95:
22:f9:0e:94:e6:00:34:91:a7:8d:7d:2a:98:e6:25:3b:12:cd:
6d:8b:e4:d6:d2:5c:7d:07:7a:dd:77:e6:5f:0f:9f:9c:2a:3f:
66:9b:95:62:b8:11:65:07:af:df:43:6c:fa:da:3a:0e:0e:28:
f6:80:14:37:b1:07:53:e6:04:b6:c0:68:0e:28:e6:24:e1:b1:
d2:9f:52:34:a5:90:c4:65:7b:b4:e3:a8:04:3d:5f:b0:d2:e8:
3b:cb:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:55 2025 by rpki-client