Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: sXLnOE7Dq3SyMN/pLderg4Jk/DTrUe3dipQ5MbXU6DA=
Subject key identifier: 72:FF:3D:EE:BE:28:F2:44:94:EB:BB:CE:CC:72:DD:6C:E5:04:3A:6F
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 01988355DE6F716719A58D91A3FFFD818C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 0565
Signing time: Thu 07 Aug 2025 07:01:39 +0000
Manifest this update: Thu 07 Aug 2025 07:01:39 +0000
Manifest next update: Fri 08 Aug 2025 07:01:39 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: 817h57syrbcDU35RzZZviOuPle8mLWXGwAZUGzJz/tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:de:6f:71:67:19:a5:8d:91:a3:ff:fd:81:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Aug 7 07:01:39 2025 GMT
Not After : Aug 8 07:01:39 2025 GMT
Subject: CN=72ff3deebe28f24494ebbbcecc72dd6ce5043a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:51:d7:7a:28:bb:91:28:82:95:ad:9b:7a:
2b:bd:13:1a:82:2e:b6:0b:79:97:1c:b7:78:cc:93:
d3:3b:27:70:71:f9:73:6a:97:5e:41:b4:47:31:d4:
9e:9e:37:9d:ed:ff:c2:85:5f:b8:ee:0c:30:93:a1:
22:7e:28:17:9d:bb:7a:ef:91:46:50:26:1f:6d:81:
87:ef:80:9d:8b:6d:e6:d3:de:3c:54:4b:0e:d4:f0:
0b:08:d9:75:21:2b:a1:60:ef:4f:e3:c9:6d:54:1f:
ee:fa:24:ff:d9:9a:8c:87:a4:c7:01:23:85:a5:08:
a0:e3:42:5c:88:3f:d4:6a:fe:8e:67:06:09:71:ca:
ad:4c:0b:90:3e:83:d8:47:3c:91:02:4d:20:1f:b9:
27:e9:1d:3c:22:15:da:04:57:eb:a5:51:25:9a:7a:
e7:52:63:f5:20:90:72:da:71:0b:03:e0:33:de:c1:
fd:57:20:f4:01:d4:3c:5e:13:c6:f7:33:ba:25:42:
d7:fa:89:00:b7:c9:4b:d9:e2:e8:f4:8b:3e:23:9e:
d7:3c:34:d4:ac:f0:16:7f:3d:93:d9:cd:e2:25:a5:
aa:70:14:11:9d:4e:26:a4:0e:56:da:af:05:62:3b:
c2:1d:29:d2:f4:40:96:f3:34:a6:ec:3f:3b:6a:56:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:3D:EE:BE:28:F2:44:94:EB:BB:CE:CC:72:DD:6C:E5:04:3A:6F
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:29:9d:c5:e0:8e:af:b7:0e:29:2e:e1:e6:50:ce:1d:96:77:
1f:38:94:8c:2a:85:ea:9a:48:05:89:6b:83:b0:fc:c0:44:39:
cd:7a:a8:73:71:82:73:70:26:d8:fe:84:aa:3a:04:b5:de:57:
90:7c:18:27:c1:a1:16:e2:0d:b6:67:ae:31:aa:1d:51:80:23:
94:85:48:50:04:d5:fb:41:23:d8:cf:7b:c0:a7:75:38:96:1a:
3c:85:8e:8b:73:0a:1f:92:69:f6:b7:8f:f3:49:fc:65:4d:d4:
3d:0f:6a:16:be:72:a7:50:27:5b:5a:62:3d:2d:71:55:cd:0b:
ea:a4:39:04:9b:73:98:c2:79:20:59:81:8a:b4:a2:42:e6:1f:
f0:1d:b0:48:dc:e8:e0:db:b8:36:e9:37:91:b3:ac:11:a7:f9:
be:6e:24:c7:7e:45:c8:2c:23:fe:92:17:bb:20:2f:a4:25:0c:
36:7c:d7:ef:e7:34:a6:08:7a:d6:33:9e:e1:f8:ab:91:4d:d3:
5c:0b:16:07:04:01:03:c1:81:4c:02:ea:b3:21:ab:4c:f4:8d:
b2:63:aa:ef:37:32:34:af:ae:f9:96:48:5c:6d:5c:bc:74:7a:
b3:7b:6b:50:29:22:c5:7a:5d:45:82:5c:bd:1d:32:ad:8b:e4:
6d:a3:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:14 2025 by rpki-client