Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: 0r9j3UqHb8kMjV3vKnQ5AlEx9S2M8+bsVqZoBKh58P8=
Subject key identifier: CA:63:08:19:BF:17:1D:7B:71:EA:0D:5B:26:22:BA:17:C8:FD:15:1B
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 01976DABF5A593455D7A756C1D2F15629E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0295
Signing time: Sat 14 Jun 2025 09:01:15 +0000
Manifest this update: Sat 14 Jun 2025 09:01:15 +0000
Manifest next update: Sun 15 Jun 2025 09:01:15 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: 2ZXScUqtJf66E+QrY0BgyJxN3DvZZQCJaAnwWQdQLjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f5:a5:93:45:5d:7a:75:6c:1d:2f:15:62:9e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Jun 14 09:01:15 2025 GMT
Not After : Jun 15 09:01:15 2025 GMT
Subject: CN=ca630819bf171d7b71ea0d5b2622ba17c8fd151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e2:3b:6f:70:cd:cc:46:73:35:cf:55:4e:3b:
b7:cf:41:37:28:9c:c9:5d:df:8d:83:fd:0f:56:1b:
18:28:ab:c3:1a:a2:db:a1:74:9f:41:64:8d:a5:73:
d7:94:09:b3:77:5a:87:81:6e:7f:29:5f:34:24:5e:
31:b5:be:6b:83:47:dc:2e:45:bb:57:92:2a:6c:47:
07:90:95:2e:f9:72:7d:f9:92:e1:74:d5:a6:93:0e:
d4:3c:ac:2a:38:d0:5b:b7:6f:e8:fc:4e:78:87:dd:
a3:ab:8f:4d:98:dc:35:54:35:88:3f:75:57:0d:69:
6d:6e:a5:60:72:b5:5c:01:23:06:9d:5a:99:db:11:
38:df:87:f8:79:f6:ea:ed:f3:47:7f:d2:78:2c:d4:
15:60:16:dc:72:a1:bc:b2:82:5d:bd:6b:48:3c:41:
5b:97:3d:cb:2f:68:53:61:fc:90:80:8f:8d:ed:20:
32:78:35:96:19:68:7f:15:d8:c1:a6:0a:7f:89:9f:
24:ba:69:22:6b:90:92:83:47:d3:aa:4c:58:ec:aa:
7e:a7:fa:e1:1f:3e:17:3d:a6:95:34:14:3a:f9:bf:
a4:ea:3a:be:1f:e7:f2:f1:a6:27:c7:1d:31:dc:44:
e5:2e:4c:97:56:bf:db:23:eb:d2:9e:aa:26:68:72:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:63:08:19:BF:17:1D:7B:71:EA:0D:5B:26:22:BA:17:C8:FD:15:1B
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4d:df:54:34:44:8c:6b:d7:6a:9f:d1:17:42:32:80:0e:a3:
9f:40:1f:13:a5:42:82:3b:8b:b2:39:15:82:17:af:d3:f9:a2:
c9:37:4e:aa:9e:9f:e5:41:67:2f:1e:0d:d7:88:86:69:ae:2e:
d4:d1:3d:b3:46:1e:de:2b:7e:9b:96:af:77:9a:65:d0:de:60:
0d:7a:71:c5:bc:50:2a:68:69:08:88:e0:26:a4:71:43:35:12:
6e:93:c7:14:e9:75:e6:e3:2f:12:5b:b6:73:f9:16:bb:5d:e6:
9d:90:ff:24:1f:93:4a:5c:60:e5:93:1e:c8:7d:e0:26:b2:b4:
71:63:61:43:db:c9:04:c0:01:c4:86:91:30:32:72:d3:42:35:
be:d4:a5:f0:95:1b:e0:72:1c:b0:d4:6f:8b:b0:f2:15:1e:d8:
65:6a:8c:d5:c9:81:de:43:5e:77:d5:2d:30:3a:b5:c3:e8:95:
8a:ff:eb:e8:3b:d6:90:a6:c1:32:af:85:11:cd:3f:24:8b:dc:
59:a4:16:82:18:29:3a:12:e8:23:09:d1:4a:a4:ce:ec:c7:a1:
84:79:8c:d4:42:6d:6e:76:e6:77:65:52:81:b6:1c:fe:4b:94:
d9:4a:25:f4:7f:23:dc:3d:e6:64:5f:16:bb:be:93:f4:2d:04:
d2:54:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:43 2025 by rpki-client