Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: mFaI8MBhrbbpZNr99P/688iyrJQWZXOUfxKJknGL3uA=
Subject key identifier: 41:22:14:3A:AC:13:75:D2:9B:00:82:E8:2E:41:04:B8:11:92:E0:03
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019874869F58D667095D5BA22D6DA4E7B731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 0420
Signing time: Mon 04 Aug 2025 10:00:36 +0000
Manifest this update: Mon 04 Aug 2025 10:00:36 +0000
Manifest next update: Tue 05 Aug 2025 10:00:36 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: zyUzyIRUy92VMENbVbJjOJ8/fvuneK1FbgYv00od0d4=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:9f:58:d6:67:09:5d:5b:a2:2d:6d:a4:e7:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Aug 4 10:00:36 2025 GMT
Not After : Aug 5 10:00:36 2025 GMT
Subject: CN=4122143aac1375d29b0082e82e4104b81192e003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:76:a9:be:e6:75:fb:7f:aa:c8:52:e0:ff:
90:4a:6e:2d:e1:13:59:d4:02:11:e4:52:47:e2:57:
95:08:79:91:e6:4a:22:af:da:63:db:7b:11:16:24:
1e:84:7c:0a:bd:25:2f:45:c5:ba:b8:00:a2:a3:c2:
a0:f6:86:a1:59:c7:23:1c:1a:a7:81:ce:58:12:98:
03:43:1e:4f:82:14:51:bd:49:ee:8c:14:bf:cd:1c:
2a:33:0c:3f:e2:ed:30:a4:a0:26:18:78:51:71:92:
35:94:34:a2:9e:e5:ae:9f:cf:5f:14:82:aa:db:e8:
a9:17:3a:cb:e0:1a:c8:0b:17:70:44:c1:ae:68:6b:
0a:42:75:b0:df:bc:26:ce:6c:c2:06:5f:a0:f6:3a:
ca:dd:9b:ce:29:a3:d3:f4:75:ba:cf:e7:64:24:6f:
62:6e:76:8a:56:42:0c:3c:89:9c:b3:e5:c5:d1:f2:
0f:68:2d:fe:0e:65:ae:8a:4e:fa:20:cb:85:44:a4:
25:5a:2e:93:5f:6f:17:9d:a1:a4:83:16:13:09:32:
9c:37:08:70:42:ee:15:a0:39:67:44:d5:8c:74:8c:
fb:27:57:44:0d:4c:3f:f0:8a:39:c3:49:23:87:1a:
71:0a:b3:d7:d4:53:f1:b2:cb:f5:71:52:95:5b:51:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:14:3A:AC:13:75:D2:9B:00:82:E8:2E:41:04:B8:11:92:E0:03
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:55:3f:82:40:d9:c7:c5:f2:1e:59:4d:b3:28:30:8a:41:48:
12:13:01:b1:27:9b:07:da:db:d4:b3:0f:83:8b:25:5a:80:04:
9a:84:a2:45:53:a0:dd:48:35:bc:cc:76:8f:23:5f:3d:58:a5:
a8:a0:6f:50:2d:f5:aa:59:61:3f:8e:69:a6:f8:00:57:83:1f:
0e:3a:6d:fe:b4:b8:a5:fc:e8:fb:50:77:dc:f9:6e:66:0a:2a:
a9:29:2b:c4:b7:0b:34:41:ad:fb:f9:f1:ba:13:c6:78:72:84:
28:20:9b:a7:f8:44:df:66:65:4d:94:78:8c:a8:c6:6c:c8:3e:
9d:2f:16:52:a5:15:89:64:35:28:44:be:43:8c:cd:2c:6f:83:
c2:cb:63:49:fa:35:70:9f:61:5b:4a:6c:3d:6a:4e:15:14:ce:
94:8c:e0:c8:3f:c6:49:fc:77:d9:d4:96:a3:90:33:34:96:10:
18:ad:20:e1:df:87:53:0b:22:d3:09:9b:3a:f2:42:f8:d7:2e:
bc:87:bd:89:b1:c9:87:d4:97:f3:05:93:99:80:76:67:a2:3b:
d2:7d:3e:e3:b4:4b:e3:ba:7e:a7:14:82:2e:89:a1:0f:fc:de:
21:f6:d6:7e:94:c9:32:f1:ac:7c:0f:c6:7c:76:ea:03:37:22:
f8:e5:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:09 2025 by rpki-client