Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: XWnRSsNJHU41p6yBr04/p1ue5UwlbjmONjU0JAVkWLM=
Subject key identifier: 4A:77:DA:FE:61:EC:E4:54:E1:A7:50:1D:14:17:F0:FA:7B:95:D8:42
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 01983502F9635445C7C56F4DABD2023C2F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 15F6
Signing time: Wed 23 Jul 2025 02:00:43 +0000
Manifest this update: Wed 23 Jul 2025 02:00:43 +0000
Manifest next update: Thu 24 Jul 2025 02:00:43 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: tDOiw2sJQ+USo7ERSLXRnihbVQ3xNsdj6Tb4K/V2Fpo=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:02:f9:63:54:45:c7:c5:6f:4d:ab:d2:02:3c:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Jul 23 02:00:43 2025 GMT
Not After : Jul 24 02:00:43 2025 GMT
Subject: CN=4a77dafe61ece454e1a7501d1417f0fa7b95d842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cd:90:21:44:be:30:92:e1:5d:48:ec:af:18:
e9:6a:05:8e:65:41:ba:23:c3:c2:30:9b:03:7e:21:
06:f8:79:31:b0:68:01:5e:1e:53:57:23:c0:cd:07:
40:41:20:8f:11:44:0c:89:c9:9a:b0:df:be:44:ba:
6f:e7:4e:db:e3:83:0e:53:09:72:87:92:43:9c:ca:
ca:fb:30:c2:50:e5:26:a7:cf:fe:44:0d:4e:6c:50:
09:44:7a:7d:44:71:6d:17:d7:7d:fb:b4:b6:cf:7c:
e0:f6:2d:1d:b5:9e:32:4e:8c:c4:8e:e4:12:10:ea:
98:c3:ea:9c:f3:9a:13:d6:fc:86:2a:d2:0b:c7:75:
b6:3e:56:57:5d:80:3d:d1:79:ca:24:c9:48:74:b3:
51:1c:0c:0c:2b:18:ff:c7:a8:e8:85:5f:d0:a5:38:
ec:a3:e1:7a:ea:f4:a4:a0:ea:f3:0b:ce:92:51:e4:
b1:26:76:b8:a8:94:96:0d:26:73:c4:3f:d8:08:bc:
6f:8a:2a:d2:c4:91:55:35:51:4f:78:fa:40:3b:f4:
b6:b4:b8:f0:12:72:3a:cc:ed:92:79:a3:9f:86:7b:
23:ae:44:71:e0:f4:1c:57:e5:30:b4:d9:8c:99:0b:
4f:eb:0c:42:11:16:93:dc:da:31:91:87:f5:2d:2e:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:DA:FE:61:EC:E4:54:E1:A7:50:1D:14:17:F0:FA:7B:95:D8:42
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ad:e1:c2:45:ce:b2:43:7c:f9:94:8f:b0:9b:46:23:9d:48:
4b:d9:ad:7d:fc:76:56:4a:ff:04:d1:d5:66:c3:47:b1:8b:3c:
ce:b3:72:27:de:e0:37:b2:bc:f2:20:c8:82:99:39:24:06:86:
51:bf:03:12:44:2c:23:4e:4b:5c:5f:65:f5:d7:fc:20:8b:21:
d9:d4:53:5e:93:24:98:ea:50:7e:f1:ec:3d:5b:6c:b6:cb:3d:
2f:30:0c:eb:c3:19:c0:38:a0:be:e9:52:32:79:94:86:69:cd:
14:bd:8c:55:97:84:67:ca:62:c7:10:af:86:02:d8:da:00:a5:
67:7b:aa:4b:ad:83:9f:58:f0:a3:a0:2d:23:db:71:67:7b:58:
98:13:43:e1:32:98:46:d6:f3:b6:f6:bb:9e:7e:38:ff:2a:98:
d9:e8:7e:77:1c:e3:54:1a:b8:61:54:35:38:8a:a9:b1:25:00:
33:77:08:ee:a5:33:85:e7:2b:44:67:4d:b1:58:42:5a:1c:f1:
52:51:b9:b4:65:ee:6d:3b:33:26:53:8d:98:3d:3a:b3:d0:55:
7d:c6:1f:c8:d2:a1:5d:a6:ce:d2:96:95:06:0f:38:c7:b9:19:
2b:d0:05:66:40:73:d0:0f:04:c4:81:c1:87:87:7d:11:02:6d:
c0:5b:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:23:23 2025 by rpki-client