Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier: KAVKBuPW59l8jMuqvDGifC0BPB/UG02vaJL1f+AD6So=
Subject key identifier: 36:94:BB:C2:E9:D4:03:09:EA:00:2B:14:A0:DC:83:D6:9C:FF:ED:39
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 0198978065E5713D509FB6E139B4BCE765A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number: 0FA2
Signing time: Mon 11 Aug 2025 05:00:30 +0000
Manifest this update: Mon 11 Aug 2025 05:00:30 +0000
Manifest next update: Tue 12 Aug 2025 05:00:30 +0000
Files and hashes: 1: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (hash: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=)
2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: 3/L7gpowft5Misl6NsIM45j7wB4+SOeAfsGOahEFoWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:65:e5:71:3d:50:9f:b6:e1:39:b4:bc:e7:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Aug 11 05:00:30 2025 GMT
Not After : Aug 12 05:00:30 2025 GMT
Subject: CN=3694bbc2e9d40309ea002b14a0dc83d69cffed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:3e:7f:fa:73:50:c5:ca:b2:fc:9b:e4:52:
c0:1a:19:a8:d6:15:d9:66:2b:e5:ef:a5:46:ed:00:
07:69:f8:c8:dd:0c:1d:4d:77:64:6a:76:cf:c2:fe:
0f:a4:bd:cb:07:a7:d7:e5:30:34:df:d2:d7:ae:a1:
57:1e:d9:39:9d:4b:3d:48:6b:e3:2f:22:d5:60:67:
e2:84:05:2d:bf:44:5a:c0:fe:13:b1:eb:f2:f6:f8:
53:a6:0a:9d:58:d4:2a:8f:54:2c:54:a2:55:c8:00:
7d:b3:0f:84:d0:13:e8:55:51:3d:86:c9:39:80:8f:
ce:98:80:62:03:7f:93:da:d2:1e:a1:ee:90:e2:69:
91:56:79:4a:aa:11:5c:bb:c9:df:26:dc:f2:a5:3e:
85:55:f2:a5:3f:e9:f6:90:a3:38:ec:e9:f4:25:26:
d5:cb:4c:95:13:93:7c:60:b1:ee:b1:75:6c:5c:14:
47:2c:24:53:3e:4b:3b:6f:e6:b7:ac:06:3b:14:c3:
7d:a0:b2:8f:d7:a6:f9:cb:78:fc:09:fe:cc:2d:23:
92:9f:a2:9f:ab:66:f4:62:a0:82:a1:e0:e7:9a:5b:
8d:9c:d6:cb:48:84:a4:7c:08:6c:6e:87:a9:62:b7:
bd:af:1d:c7:30:ba:f3:48:c1:1a:46:58:57:8b:77:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:BB:C2:E9:D4:03:09:EA:00:2B:14:A0:DC:83:D6:9C:FF:ED:39
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:9c:1f:17:70:5f:be:14:42:e2:24:db:4a:a6:c3:e1:24:29:
50:78:af:1e:97:ca:a7:8a:e0:c9:34:14:70:56:76:59:e1:76:
9a:01:5d:cb:3c:d3:ab:0b:68:74:21:5e:cf:e1:81:4e:e5:aa:
31:69:ed:e6:55:29:ac:d9:ff:c4:74:ae:90:ce:9f:d0:c0:a1:
03:fa:1b:31:3e:69:b4:24:2c:dd:0c:a5:2d:5a:3a:55:a0:f1:
4e:75:e1:fa:dd:37:13:1b:bd:b5:b0:7f:65:63:dd:96:f9:26:
6f:e9:b3:04:b1:59:ef:f6:30:fe:b0:58:2c:10:91:b3:d0:5d:
18:ad:00:ce:0d:f1:ec:2d:0c:2b:63:fd:a0:71:7c:15:09:f8:
76:f9:48:06:b9:e2:61:60:c1:d8:04:61:7a:f0:7e:9d:9f:08:
cf:5a:84:f7:e0:fe:42:6c:1c:dd:3c:10:5a:aa:81:0c:b0:08:
45:4c:22:11:61:42:5a:80:6f:32:f3:0a:7a:33:ca:9b:8e:c2:
8d:4d:75:5e:a0:f9:26:92:79:94:43:65:5b:4a:22:c6:86:61:
2b:3f:81:41:b6:08:58:78:cf:4f:77:d3:e5:99:b3:0c:e0:9e:
6e:fc:11:76:65:aa:1a:11:fa:74:85:5d:f9:75:10:00:6f:b3:
f3:1b:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:21 2025 by rpki-client