Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: WfgdCzWvRW3py+eLltGp7s54TLHhEd5iGtls8vZE0nk=
Subject key identifier: A5:E1:61:D4:6F:95:CD:8D:B0:2F:C0:86:C4:01:6E:10:F1:7B:34:DF
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019688495531E1D50AD5E83670270A0D8746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 20:00:29 +0000
Manifest this update: Wed 30 Apr 2025 20:00:29 +0000
Manifest next update: Thu 01 May 2025 20:00:29 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: hdSGDXUyxZI0A9K/vxc3EmRanY2uEneCF2csZ9b30bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:55:31:e1:d5:0a:d5:e8:36:70:27:0a:0d:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Apr 30 20:00:29 2025 GMT
Not After : May 1 20:00:29 2025 GMT
Subject: CN=a5e161d46f95cd8db02fc086c4016e10f17b34df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:a4:97:8b:26:c9:a3:c3:9e:53:32:dd:39:
d9:a2:79:af:39:52:83:c8:24:43:5f:48:ae:7f:ff:
80:da:cb:c9:1c:15:23:44:3f:bd:90:a4:80:3a:11:
9f:98:b9:a8:b6:ce:19:87:e9:25:a3:8d:1c:e8:ce:
de:d9:b9:20:63:ef:9b:bd:1a:2c:be:21:8b:20:48:
59:39:67:5d:7b:dc:36:2b:70:bb:43:48:ee:d3:13:
9a:2f:82:f8:1a:6b:c9:91:d7:2f:de:d8:1a:dc:91:
86:0d:c6:05:03:25:3d:e0:e1:de:bc:7d:bb:38:4c:
bc:0c:db:ea:43:38:57:77:db:f9:58:63:ea:77:cc:
83:e2:b3:eb:2d:f1:1c:1a:53:b3:86:10:60:94:b9:
67:f3:a3:ab:1e:5e:11:72:a2:88:fa:66:e3:6c:5b:
d2:34:35:f0:64:84:98:53:f6:8e:50:17:81:8c:3d:
aa:d3:6c:68:03:69:19:4d:a8:c1:bd:73:4f:1a:bf:
f5:ec:51:21:08:69:ae:8b:2d:46:d3:15:8e:63:cb:
13:60:be:69:83:c4:2e:7c:bd:00:ca:18:d9:b8:4e:
ff:a9:5d:81:a5:d4:93:2d:0d:8e:76:36:ca:d2:1d:
ad:b1:6c:db:11:b3:ce:e2:39:88:33:c0:4b:54:4f:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:61:D4:6F:95:CD:8D:B0:2F:C0:86:C4:01:6E:10:F1:7B:34:DF
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:57:28:ae:02:88:be:9b:22:5b:cf:6d:1f:5e:c7:2c:6b:f2:
48:7b:3f:8a:a5:de:93:b4:8a:1a:77:99:2a:08:40:93:2b:75:
a2:67:a7:43:3b:bb:34:50:d6:83:12:8b:ed:62:ed:24:c9:aa:
f4:3f:8f:77:43:31:f5:19:b6:6c:82:5d:a4:25:fa:46:41:4a:
ba:6f:28:a3:46:e2:c7:4b:71:7a:23:83:ac:28:ba:f7:47:a4:
d0:3a:b0:22:27:b5:b1:ca:31:04:31:8f:30:1c:e6:f0:29:cc:
4c:9c:f9:43:87:44:26:5e:b2:d7:41:0d:e3:be:3b:90:d5:d4:
f8:b3:09:de:ca:b8:53:a2:41:0c:df:ce:17:ba:2c:73:32:8a:
39:e2:f8:f6:1c:3c:64:6d:3b:07:51:f6:08:08:ef:2a:ac:07:
8a:fe:18:36:31:c7:9b:d2:01:67:a5:67:2c:68:b6:21:56:01:
b2:70:17:07:c4:6e:ab:b9:a0:b3:70:28:b7:43:56:17:cf:36:
1b:08:8f:05:c8:14:f5:4e:a3:2b:8e:88:83:35:2d:d0:39:69:
d5:ab:92:cc:b4:42:c8:33:a6:d4:2e:aa:43:ac:e3:db:45:df:
0f:20:68:61:51:cf:23:37:c1:a8:60:14:53:2e:9d:81:b8:75:
7f:61:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:12 2025 by rpki-client