Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: vbw37c3nAWDrNlAoy1r9jyW1ZsbH1ZLpzAa3TWV8hNo=
Subject key identifier: 08:73:75:06:24:A0:60:E0:28:2B:2B:28:E1:E7:27:38:8B:1B:17:1E
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019A5187CE286D3FE378B91AA5B3784FF23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 0517
Signing time: Wed 05 Nov 2025 01:00:45 +0000
Manifest this update: Wed 05 Nov 2025 01:00:45 +0000
Manifest next update: Thu 06 Nov 2025 01:00:45 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: E9pA+UAFaSGUboyEyEbN9hQVIJKWNu5CqDK6rZ3Yc5w=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ce:28:6d:3f:e3:78:b9:1a:a5:b3:78:4f:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Nov 5 01:00:45 2025 GMT
Not After : Nov 6 01:00:45 2025 GMT
Subject: CN=0873750624a060e0282b2b28e1e727388b1b171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:64:c4:d8:89:8c:5e:2f:bd:83:1b:58:1b:
05:90:f3:5e:1f:93:97:2f:f4:05:96:c1:d5:bc:2e:
0a:35:29:41:87:08:22:67:44:c1:be:f5:59:db:3a:
2e:29:fe:93:b5:d7:cc:a4:38:13:54:3c:24:3b:08:
cf:c0:de:53:c2:18:39:7a:cb:94:83:62:15:5f:c4:
51:29:81:12:eb:e3:6b:f2:45:8c:86:1a:09:91:1e:
9a:b3:76:df:ba:93:33:a9:ac:0a:9e:9d:b1:12:28:
42:11:cb:44:d5:df:6a:b1:b8:53:53:b0:d7:21:0b:
4f:b9:33:96:22:78:79:a0:63:78:37:2b:d5:71:37:
a1:37:18:cc:0b:cd:d1:3a:16:63:26:55:38:23:b0:
c5:6b:14:e1:f8:10:3f:b2:42:fe:f1:38:21:06:e4:
c7:e6:6b:0b:fd:e9:79:36:8c:47:c3:55:d1:e1:29:
11:e9:c0:b0:85:c4:4c:b6:55:68:ad:ef:2a:cc:18:
d0:e0:2e:a3:fd:29:26:fb:bd:60:6a:77:65:64:ab:
c6:26:12:66:f9:c8:77:e5:24:6c:08:5f:87:2d:8a:
e6:d5:f2:d1:30:c9:64:11:98:e8:fd:2b:28:d1:fd:
4e:9a:65:b3:0e:53:d1:db:31:07:91:f9:95:7e:4f:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:75:06:24:A0:60:E0:28:2B:2B:28:E1:E7:27:38:8B:1B:17:1E
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0a:15:6a:ee:06:4c:59:e1:45:5f:f3:35:28:fa:1c:2e:af:
92:be:39:01:e7:e4:48:93:09:4a:2d:2b:bd:f5:18:92:e2:9d:
2e:e5:a6:66:3b:9e:d1:72:2d:46:85:0e:79:26:bb:23:19:18:
b6:29:1d:ad:f0:41:56:4c:bc:55:62:eb:67:04:9d:02:d9:09:
b9:62:5e:03:d2:7a:11:a3:c1:96:f9:d0:4a:b8:21:b5:cb:b6:
b6:28:79:74:c7:00:de:cb:c6:50:77:b5:b3:13:f2:b7:da:f4:
06:4a:2f:01:f3:3d:dd:c7:c5:d7:cf:f1:b9:83:bb:a7:cd:4f:
5a:3e:59:dc:75:bb:43:09:ad:7c:a0:4a:3d:ce:59:e2:4b:aa:
45:a4:23:c9:7b:92:26:85:3d:54:49:91:37:c2:4f:78:ac:7b:
91:00:50:4e:2f:d9:3d:09:5e:a4:04:d4:77:7f:b0:fe:23:e0:
26:32:11:2a:3b:65:e8:92:47:d2:a4:d7:60:23:73:68:90:4e:
05:54:26:7a:25:fe:5d:ca:a8:b7:9b:24:26:48:08:c7:d4:8a:
fa:87:3e:00:2d:2e:e9:50:fc:0c:80:26:b4:6d:a4:4c:06:76:
b1:b5:52:c6:af:73:96:d8:86:47:97:38:e3:6b:61:53:5a:0a:
f5:51:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:29 2025 by rpki-client