
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: qTfBylTxmB9yssKCm6MtXpdRJ2bIunM+5IzLa+87k0Q=
Subject key identifier: 47:14:09:E5:31:16:53:1D:65:6E:A3:7A:5B:B7:56:EF:9C:DC:7D:E3
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 01987D8A6A478C8F780151529E45D647229B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 1351
Signing time: Wed 06 Aug 2025 04:01:19 +0000
Manifest this update: Wed 06 Aug 2025 04:01:19 +0000
Manifest next update: Thu 07 Aug 2025 04:01:19 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: mp8iOJkzEL1AFL7ukUnyIqqXDMbmfAHWhowob6MdYIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:6a:47:8c:8f:78:01:51:52:9e:45:d6:47:22:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Aug 6 04:01:19 2025 GMT
Not After : Aug 7 04:01:19 2025 GMT
Subject: CN=471409e53116531d656ea37a5bb756ef9cdc7de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:d0:5e:fc:64:a8:c0:b8:f6:ee:2a:b8:88:
f6:a4:64:c6:e9:d3:3c:c8:d0:d9:ac:66:b7:c6:00:
8d:ea:0c:de:8e:86:fe:a9:2b:e5:e9:cd:38:d1:0f:
42:62:d0:4f:d9:57:5e:d2:04:39:23:01:66:ca:3b:
4f:86:7c:f7:f2:0a:bc:98:ea:68:a5:e0:c1:cc:7b:
4f:85:71:8a:a0:18:83:8b:25:d6:a5:e6:f0:b2:00:
f6:bf:99:0f:3f:dc:b2:ed:52:ec:eb:46:22:8c:de:
19:8d:28:c0:7d:71:2a:fa:8c:55:71:e4:f3:95:24:
86:f7:f8:52:19:56:d1:0b:dd:74:1b:53:b0:b6:01:
7e:d6:f8:50:dc:22:ad:8d:53:82:df:20:1a:99:48:
2e:0d:cb:92:22:41:ef:2f:f3:83:d4:64:90:3b:17:
0d:61:17:23:76:cb:0e:29:50:99:46:01:66:f4:5a:
47:87:b4:f7:aa:12:b6:e2:0c:46:f8:98:31:89:ab:
87:bb:9b:e9:73:5b:05:51:ef:2c:9c:2c:4e:23:b5:
84:82:b5:21:03:91:9c:e2:95:4a:95:a6:74:d7:d8:
d7:8f:b3:24:f9:ac:79:2d:f0:c9:d7:76:0d:ad:b1:
2c:7e:82:e2:8a:71:fd:80:54:a9:47:33:7a:fa:41:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:09:E5:31:16:53:1D:65:6E:A3:7A:5B:B7:56:EF:9C:DC:7D:E3
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d8:96:bb:ca:ee:9a:70:32:53:57:f3:48:21:6d:0c:49:b4:
27:17:06:4a:16:0d:17:59:76:69:d3:c2:c8:ca:73:8e:bc:db:
a9:92:16:d1:ab:95:81:f5:c2:84:33:6d:6a:c0:c2:7b:ef:86:
af:c1:dd:8b:d0:a2:16:86:c8:c7:b5:9b:92:10:7f:4f:af:19:
6f:4f:8b:a1:fb:1c:f0:b2:4d:3c:8c:8a:cc:8b:3f:8e:52:c8:
af:87:f8:9e:ff:25:58:9c:0f:c9:cb:b5:87:ed:47:cd:f4:3c:
9c:a2:30:f6:b0:c1:61:f4:14:b0:5b:de:1c:a2:8f:33:3d:38:
1d:b4:8b:2a:e2:af:88:1d:7e:9c:79:af:e1:01:ec:88:57:ef:
61:85:09:05:c9:63:00:96:0d:27:f5:a9:ab:c7:19:3c:68:ec:
97:de:81:ff:77:b9:26:27:ad:2e:bb:be:78:e0:a0:0e:18:9d:
8d:43:3f:82:0e:30:1c:80:96:3b:bc:96:72:2a:ce:7b:3a:ff:
ca:81:a3:56:41:f5:a6:2e:57:cf:c0:c3:18:e1:c2:e5:15:31:
f5:2b:cb:ec:e1:79:6d:25:26:48:73:2a:72:bf:ab:24:11:1b:
9c:9d:b7:e2:c5:e7:f7:92:f3:fa:d8:ef:63:8d:1d:9e:d3:6f:
c5:47:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:19 2025 by rpki-client