Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: 8zK3RBnPxs7Pxeyp1bJILpfMrsARauPBCwRnFrPyKV8=
Subject key identifier: 16:B8:51:49:DE:9E:A3:B9:02:78:1C:B5:AD:C0:D8:F8:96:AE:F4:5B
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01985268551CACCB50D6ACEABF81CE7DA826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 12E7
Signing time: Mon 28 Jul 2025 19:00:25 +0000
Manifest this update: Mon 28 Jul 2025 19:00:25 +0000
Manifest next update: Tue 29 Jul 2025 19:00:25 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: R8/65Waqact93MU3DYvW0ojqxWmoypwRaqrr5VXkFbs=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:55:1c:ac:cb:50:d6:ac:ea:bf:81:ce:7d:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jul 28 19:00:25 2025 GMT
Not After : Jul 29 19:00:25 2025 GMT
Subject: CN=16b85149de9ea3b902781cb5adc0d8f896aef45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:1d:d7:a4:4e:64:af:0a:5b:04:51:b7:a4:
57:9b:2e:bb:99:54:eb:cb:61:51:c5:31:75:4e:6a:
a5:c6:5b:5b:19:50:74:a6:a2:34:49:c0:22:03:2c:
3e:63:0b:c2:7f:44:5d:55:0a:10:df:d9:d1:68:2f:
bc:82:39:da:2f:39:7c:d1:6f:cb:bd:d7:36:f6:00:
ee:84:86:0d:47:39:f1:a8:c0:6e:dc:99:c0:99:f7:
d1:72:cc:9d:8d:41:fb:22:19:f8:67:ed:5b:f0:24:
48:6d:a6:d8:d0:65:6b:a0:71:1a:76:22:cc:4f:98:
83:3a:7a:51:ab:22:64:cc:a2:53:27:4b:f8:8a:b2:
d9:42:6a:f2:56:8d:60:0c:88:9d:76:c7:e3:13:e7:
84:e9:e0:a5:e7:8e:7e:fe:8d:c0:17:8c:62:6f:5b:
9d:d0:6d:11:25:02:dd:a1:6d:4b:ab:f3:67:f0:4f:
79:80:d4:8e:aa:04:12:68:66:a4:7e:69:4f:df:67:
1e:3e:a1:5e:e2:5c:a5:d3:41:1b:95:b2:6c:99:ae:
15:44:ae:eb:6c:c3:30:b1:e7:f1:cd:99:7a:bf:bc:
7c:f6:b8:9c:20:ec:e0:8a:02:a7:0d:5b:b6:10:90:
e5:35:a8:4a:18:b9:7e:3e:8e:d7:4e:21:78:96:3c:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B8:51:49:DE:9E:A3:B9:02:78:1C:B5:AD:C0:D8:F8:96:AE:F4:5B
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:88:39:ca:a6:b8:1b:fa:ed:ac:9a:68:e2:69:7a:30:ec:
01:9d:8c:66:36:f3:ca:6d:33:8b:a0:ca:b8:40:8f:bf:11:b5:
10:55:99:d9:a1:29:c9:86:43:46:49:81:81:31:42:9a:93:e1:
a5:c4:8b:3d:b5:18:ba:6d:ee:d5:5a:f9:23:00:51:f7:4a:b5:
e6:03:2d:64:00:6b:9a:ba:74:e4:10:e8:8b:0f:76:ee:1b:ef:
60:2a:29:c3:d2:ed:fd:f1:f4:28:4c:3c:ca:a3:10:3e:f1:da:
87:c2:88:f9:e7:ce:75:75:da:00:37:56:c7:33:32:4e:b8:fc:
26:63:e7:8e:0e:36:c5:12:05:15:1a:50:40:3d:15:18:71:9c:
50:cc:11:3f:46:34:dd:d6:45:69:7b:ca:d8:aa:8b:a8:ff:a7:
36:c5:1e:e8:2e:86:d5:a9:9b:6d:22:c2:c0:e5:35:cb:07:a2:
fe:73:3d:d2:fd:f4:ae:41:5d:c4:f2:35:1e:b2:2a:65:5f:4d:
a0:d4:f4:c3:53:84:7f:c6:5e:4a:64:7c:8c:bb:00:cc:d5:67:
88:2a:a8:e5:38:a1:6d:d0:fd:d3:ba:9a:e0:09:8c:ed:dd:21:
34:57:d8:a8:65:29:cf:ca:8f:92:ca:01:61:6e:a8:59:08:71:
06:e4:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:12:32 2025 by rpki-client