Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: ioWdf81JTJ95j32XoybI2UKc/TFQp0uVFij51dGSPsQ=
Subject key identifier: E4:C3:0E:D8:74:14:7E:A0:22:01:8F:72:FE:38:73:D9:B6:97:85:92
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0197873464DB7545FA7740094E7253C6BFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 08:00:47 +0000
Manifest this update: Thu 19 Jun 2025 08:00:47 +0000
Manifest next update: Fri 20 Jun 2025 08:00:47 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: D5Yapep5lJeLao5OTto4UzzFTEzylNwYh5dY4mQ7n1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:64:db:75:45:fa:77:40:09:4e:72:53:c6:bf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Jun 19 08:00:47 2025 GMT
Not After : Jun 20 08:00:47 2025 GMT
Subject: CN=e4c30ed874147ea022018f72fe3873d9b6978592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:ae:75:3c:3f:d3:4e:c7:36:42:0b:fc:6e:
42:c3:17:c5:d4:7a:f5:4b:93:be:d9:73:15:8c:bd:
37:cb:ed:fe:91:33:5b:87:97:0d:37:f6:8d:d4:fe:
17:3b:56:a3:69:e6:6a:9e:76:24:be:af:a3:9f:8c:
e5:f6:36:42:5c:0e:67:eb:95:40:e4:d7:c0:c1:a7:
7b:b7:c3:24:63:77:b0:68:10:88:63:2d:fe:2c:79:
bc:10:14:8c:07:33:b6:bb:f1:9d:9c:f5:ac:88:85:
c9:d9:4b:32:44:b1:42:79:d6:e6:49:bf:10:c9:1c:
2e:f6:02:4a:b7:8e:b2:f4:03:bb:3a:c0:bb:63:ba:
d4:50:58:a9:ab:dc:58:8d:5e:25:37:23:4b:33:5c:
97:25:7c:61:07:52:7e:d6:ba:3b:17:7a:6f:93:b2:
a6:dd:b7:b9:bd:f1:eb:2c:79:c8:26:4f:e9:4e:c4:
9b:5d:53:6b:1a:80:ec:b6:86:8e:51:02:b4:33:77:
52:48:86:80:93:98:ad:8d:97:83:7b:83:29:03:f2:
e8:24:b7:5c:66:02:69:d9:05:35:da:48:b8:30:ba:
ea:5c:2d:04:3f:9b:25:a3:b7:ed:05:f3:c7:a4:c8:
c1:e7:c9:db:0a:56:c1:a0:86:d2:38:32:9a:05:3a:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:0E:D8:74:14:7E:A0:22:01:8F:72:FE:38:73:D9:B6:97:85:92
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:6e:79:d4:80:0e:ce:59:e1:6e:3d:fd:25:16:e6:25:dc:
b6:53:0e:f0:c7:a4:bb:38:cc:85:6f:64:de:95:6e:44:32:ca:
12:e4:36:04:26:23:10:d1:cf:a1:47:19:d6:6b:d7:e5:39:4d:
73:b0:cb:19:c0:28:37:a0:c0:68:59:20:c9:f0:81:a8:1d:19:
2d:26:67:4e:7f:1f:b6:d9:d8:a0:ff:06:e7:bf:f4:7c:9b:f3:
c4:36:38:64:c3:0c:b7:6d:ee:85:c6:e0:30:3f:68:11:18:e4:
ad:43:9c:3f:04:56:93:79:c6:d1:53:11:39:9c:38:74:2f:18:
24:86:27:a2:d6:72:c6:7a:c5:91:9b:5c:ae:33:d8:ab:a5:bf:
7c:d0:8b:f9:4f:dd:05:bd:6b:a2:09:12:44:a0:80:36:b2:1a:
df:5a:51:57:d8:a4:76:68:c9:d8:59:28:dd:9a:c1:11:35:73:
9d:13:19:1c:8d:35:92:40:8e:7c:fc:15:60:bf:28:40:45:13:
b8:16:a9:0e:74:72:50:62:9e:f6:17:f0:56:53:99:da:89:86:
3d:f3:4f:68:c3:9d:d3:26:28:07:fa:b4:00:96:ff:37:39:f8:
d1:04:d2:0b:6a:37:ad:de:9c:f7:b8:ff:5f:b2:01:7b:3b:f7:
b4:d9:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:06:27 2025 by rpki-client