Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: w2W7amWtJxSuWFl+Vacf+gMmGAbreLuWbOqLPJ/LwxY=
Subject key identifier: 9B:0D:7A:8A:AC:23:11:2C:9C:EC:71:BD:9C:87:3E:ED:81:B2:CF:85
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 01977D8CBA8E578A137652045C5536C9B3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 159B
Signing time: Tue 17 Jun 2025 11:01:04 +0000
Manifest this update: Tue 17 Jun 2025 11:01:04 +0000
Manifest next update: Wed 18 Jun 2025 11:01:04 +0000
Files and hashes: 1: C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa (hash: 7Q2JdX8Sk5ec7oQfahOu2+Hx1b1UUmWGaNbADZbL4l4=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: HdBmIFdryc4+wahg5Tlq/OC9Qz9niDYJUOU44sZVzmI=)
3: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:ba:8e:57:8a:13:76:52:04:5c:55:36:c9:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jun 17 11:01:04 2025 GMT
Not After : Jun 18 11:01:04 2025 GMT
Subject: CN=9b0d7a8aac23112c9cec71bd9c873eed81b2cf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:9e:41:38:88:d3:cd:b8:91:86:f6:1b:05:
56:b0:af:9e:ab:a3:c9:32:ad:6b:d3:db:2c:56:99:
64:7b:00:15:37:c3:7c:df:84:20:d2:90:2b:8f:2a:
c3:7b:23:f0:e4:e8:6f:e7:75:95:c6:d6:65:0d:57:
c7:14:6d:1e:d3:f3:d0:20:aa:fb:4e:f3:d8:60:ae:
79:d9:81:12:6d:1a:90:7e:a3:89:ad:d8:bd:e2:87:
5e:d1:21:7e:87:f5:57:cb:69:c6:14:b6:4d:d5:a7:
30:97:4a:6c:6d:21:b8:cd:54:66:35:34:24:c7:80:
a0:7f:ae:2c:4d:08:37:46:f0:b2:40:cc:61:f1:54:
04:65:19:e6:78:41:e7:8b:22:8a:85:13:7b:f6:d0:
5e:61:3a:b8:68:42:ee:a1:cb:ef:17:8a:10:c2:17:
03:39:fd:ce:ba:26:7a:c2:17:28:2d:da:7c:d5:c3:
1e:b3:95:26:8c:ba:20:17:84:7f:d7:c5:f1:4f:24:
a1:17:fa:d1:51:ce:25:f2:82:b7:1e:4c:6b:99:7e:
42:9a:70:77:0b:27:84:d7:74:7a:be:c6:5d:b2:e4:
aa:02:72:95:62:e4:4d:ac:d1:88:ab:7b:2c:34:f7:
e1:88:b4:57:6b:cc:42:77:a4:56:17:92:86:19:2e:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:7A:8A:AC:23:11:2C:9C:EC:71:BD:9C:87:3E:ED:81:B2:CF:85
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:e1:c7:2a:ba:10:10:56:c1:64:25:07:37:fa:cf:d5:26:1a:
ef:21:3a:9b:3e:bb:b5:33:02:dc:35:c3:03:ac:c5:b9:1c:38:
18:c1:16:bc:4d:e1:4f:d0:a9:3e:37:0e:88:57:3d:ca:90:5c:
c4:bc:11:6f:2e:04:1c:70:94:59:d2:cb:2f:1e:fa:d7:5f:44:
a3:b0:07:b8:d6:8b:ee:42:39:e7:b0:eb:52:c3:57:ed:cd:56:
22:fc:a6:1d:b4:fc:28:ee:da:a6:81:f7:89:1d:0b:b1:af:8a:
83:92:59:13:0c:80:ee:26:5e:f3:aa:f6:5e:f4:a3:bc:b7:be:
c0:39:da:b7:b5:c6:88:65:f6:9a:68:9d:bc:ce:c8:e2:af:e1:
30:12:99:fa:1f:12:1f:38:32:01:62:d1:51:9b:64:b6:27:36:
aa:a5:11:f6:65:10:c5:6a:d9:ea:a8:55:2f:a2:51:61:92:58:
60:6f:b7:43:d2:46:39:a1:bf:ff:e7:a8:be:bf:94:b2:39:90:
fa:09:28:10:fb:16:91:93:fe:bf:f0:98:3b:49:7b:fe:be:c8:
16:eb:3e:3f:bc:80:6d:c6:82:9b:a5:8e:92:b5:81:5c:8d:bf:
1c:8a:ef:22:65:45:d5:bb:61:3b:02:3e:10:59:91:ed:a2:88:
3f:53:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:27:11 2025 by rpki-client