Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: Ol/FeZSyA+n8+uZdmiboehBATfF8P9iVhkj3MUsxoP8=
Subject key identifier: 0C:3C:8E:2F:C1:2F:30:F0:D8:64:77:0F:7A:96:32:7D:B2:FA:6C:AF
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 01978847E413510B2BB204FDDB893C94994B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 13:01:42 +0000
Manifest this update: Thu 19 Jun 2025 13:01:42 +0000
Manifest next update: Fri 20 Jun 2025 13:01:42 +0000
Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: Zypyych7Z/Ou9l60Ey6iy9EhZMApw+96ESWi+RXimkQ=)
2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:e4:13:51:0b:2b:b2:04:fd:db:89:3c:94:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Jun 19 13:01:42 2025 GMT
Not After : Jun 20 13:01:42 2025 GMT
Subject: CN=0c3c8e2fc12f30f0d864770f7a96327db2fa6caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:24:80:9a:fd:22:f7:7c:53:f0:a6:6c:69:
23:24:0e:86:5c:a6:db:73:4a:31:99:5a:e9:04:e4:
b1:10:83:a1:ea:68:43:90:55:87:70:f6:c4:26:5a:
f4:72:4d:db:a8:e8:75:f1:9e:ec:4e:1d:28:30:09:
3b:d0:72:56:e2:21:70:3e:30:ab:26:62:fb:4a:64:
26:35:6d:48:fc:da:1a:76:39:39:01:4e:08:57:72:
80:b9:e2:23:3b:88:ff:16:2f:71:1f:b7:47:a7:12:
38:9a:2c:38:b3:b0:64:c7:a2:ec:94:db:12:b3:51:
6c:73:d0:36:28:03:81:57:b6:d8:4f:d9:a4:1a:1b:
fc:bc:68:bf:8b:20:c0:6f:6e:c7:18:39:d5:9e:af:
0f:ee:ff:ce:ca:4e:c4:55:44:a5:5d:2a:df:39:c1:
70:18:f4:0b:82:11:42:d0:6d:18:89:8a:06:e9:2a:
64:32:a2:ac:6a:0f:b2:6b:94:54:69:fb:e8:bc:21:
73:6c:7a:27:d3:f0:ed:85:2a:02:52:b9:d0:12:99:
7e:79:07:94:64:77:b4:5f:da:34:60:44:1e:1a:03:
a9:5c:e0:bf:03:77:18:45:22:4b:a5:42:c9:fb:14:
a7:ba:c8:b2:27:b0:40:9d:7f:6c:0b:02:6e:13:c5:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:8E:2F:C1:2F:30:F0:D8:64:77:0F:7A:96:32:7D:B2:FA:6C:AF
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:21:b7:1c:71:91:69:d4:74:1a:2f:de:89:7c:28:a1:59:07:
95:65:75:7f:b6:c4:ab:fa:f5:7f:1d:f4:a5:f0:5d:5d:6d:f2:
8a:c2:98:31:3b:7c:3f:e6:46:d1:8f:3d:a5:5b:a4:b0:e1:66:
a4:dd:eb:58:27:d4:ec:0a:97:7e:9e:66:07:0c:65:cf:80:a3:
2f:5c:5b:72:b4:25:70:9d:32:25:34:bf:50:06:be:fe:1c:63:
09:39:fc:3f:6b:58:4a:18:fa:46:e0:ba:e5:65:ba:7b:89:97:
41:0e:18:e3:c1:97:c6:25:7f:0c:87:74:84:34:00:c8:cb:f2:
dd:a3:f2:2e:8f:13:1f:76:03:41:7f:5b:70:93:55:55:02:9c:
12:e8:65:11:91:47:58:48:76:d5:07:46:e3:df:05:cd:31:c5:
16:58:f6:53:ef:bb:11:e2:92:e5:1a:6a:0d:84:35:ef:91:ac:
34:af:23:ec:75:c9:bf:c7:d4:bc:c7:20:6f:c0:73:8a:4c:e4:
a7:77:a8:16:d0:8a:4e:78:7c:be:38:4f:bf:41:02:fc:41:19:
1d:8b:02:de:c8:a0:11:72:6d:7b:72:28:bf:fc:80:f1:6c:df:
c0:3b:d4:0d:0f:85:0c:ce:e1:de:60:5d:08:99:3f:8b:e3:50:
64:94:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:32:40 2025 by rpki-client