Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: GZlMQmSJf2MY6rrKew45imCQcuuO6eCU6JG/nuVXezA=
Subject key identifier: E9:3E:E6:F6:D7:9A:FF:50:6B:96:F2:BF:64:8C:AC:90:44:04:1F:DD
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019644B2613FFC69AAA6BEFF9DEB1A21118F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 17:01:03 +0000
Manifest this update: Thu 17 Apr 2025 17:01:03 +0000
Manifest next update: Fri 18 Apr 2025 17:01:03 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: zzwKEXqH8lCXRwdB5WyrPKWqL2gLejRYn68uZ1ZUx7w=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:61:3f:fc:69:aa:a6:be:ff:9d:eb:1a:21:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Apr 17 17:01:03 2025 GMT
Not After : Apr 18 17:01:03 2025 GMT
Subject: CN=e93ee6f6d79aff506b96f2bf648cac9044041fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:b9:6c:24:e4:b5:e0:65:5d:50:ae:2d:22:
14:d7:2b:c9:b4:2e:39:f9:20:93:5f:44:3a:56:cf:
ad:c6:a2:d9:24:27:11:6c:7a:87:68:dd:b2:21:21:
70:26:ef:08:57:82:c5:db:92:97:e2:ba:04:dc:1c:
ee:bc:64:be:2e:ae:53:dc:8d:a9:21:5f:ce:79:c8:
bc:44:24:0b:38:2b:aa:f6:35:98:f9:4f:30:5b:47:
64:ef:77:7f:ec:97:48:5a:35:44:bb:c2:ee:51:9b:
92:a9:8d:73:7c:2b:46:51:b6:34:e7:98:d1:62:e6:
9e:0e:74:99:b6:4d:24:84:9a:de:8d:d1:ee:8a:0f:
8f:6c:69:d1:67:f7:9e:05:1c:dd:6b:9b:31:4b:96:
4f:f3:ae:1b:96:de:48:2d:d7:d8:d6:90:65:89:7e:
89:cc:f0:cf:e4:09:3e:bb:8f:0b:60:71:3d:71:93:
ac:b5:93:8b:de:87:b1:c2:bc:4f:f1:2a:fc:9a:f1:
ef:10:ab:1c:43:bb:2a:b5:4a:e6:f3:48:36:c0:cf:
58:01:fd:94:db:c0:51:cf:8b:f8:c2:9f:ac:b5:03:
ea:6b:d0:92:44:04:bf:7c:cb:16:e3:62:1c:1f:fd:
71:69:3e:42:54:7a:80:2c:3b:fb:c0:c8:02:f2:f5:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:E6:F6:D7:9A:FF:50:6B:96:F2:BF:64:8C:AC:90:44:04:1F:DD
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:ab:ac:9c:56:59:f9:5a:4b:eb:c4:00:50:14:a4:66:56:
98:38:dd:71:d7:b7:8b:90:ef:86:f0:87:f8:79:e1:2a:b3:b8:
5d:7a:5d:3a:ab:49:67:8a:07:52:c9:2d:8f:85:ca:12:78:18:
77:9d:c2:39:12:15:81:10:43:78:8f:01:e4:1a:a8:06:e5:7b:
4e:c9:4d:21:dd:22:2c:6c:67:37:8d:ae:14:f1:f1:5d:b5:2d:
ce:ef:ed:1d:64:89:a8:17:ad:26:a2:b7:ed:65:b5:37:17:f7:
30:64:87:bc:c5:66:e8:17:9d:af:37:d9:ec:9a:19:c1:06:d9:
3f:28:d1:4a:05:cf:65:f7:3c:11:8e:cc:e3:a4:69:5f:47:ed:
3c:59:8b:c9:13:c2:da:d8:b9:c2:97:6f:f8:ec:36:0d:6b:a3:
0c:39:48:3f:b9:d9:8b:83:01:24:4f:bd:88:e1:06:e2:68:34:
5a:fe:9a:0c:ed:2b:9e:9d:b0:ff:af:ce:dc:49:71:ec:ca:03:
73:73:f1:67:90:37:cb:c0:cc:56:b6:ab:a1:9b:74:09:28:75:
43:08:4a:7d:52:f5:b7:ae:4d:9f:af:96:89:93:05:8e:10:73:
69:28:8b:7e:1a:ac:41:30:00:1b:06:dd:1d:a7:b2:58:b3:00:
43:56:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:25 2025 by rpki-client