Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: Xw8txe4s/uO7yNgovRg/dKz8hW/mgUZrkA9aX8Ml41M=
Subject key identifier: 36:D1:8A:CF:33:25:70:D7:13:D0:66:B4:44:27:24:16:95:0E:C7:EC
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019A71B813F56D0FEDB5C7A1794F698D2DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: 8hfZpPtt0GO_DVotiG51hg4eT8w.roa (hash: aRQIDK4lxFg6x90EVDVduD7FDzfgBWcJpd7K/cuKbaE=)
2: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: n5V9nuyVVP9/SxOe0Zbx3t/HII1b866AfO9guJdvhPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:13:f5:6d:0f:ed:b5:c7:a1:79:4f:69:8d:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=36d18acf332570d713d066b444272416950ec7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:02:f6:59:b8:13:7d:0d:88:d1:52:7e:53:
26:4c:33:a9:3d:02:f9:9c:fa:44:5d:2b:e6:56:c5:
d6:5f:f4:86:bf:10:16:82:e0:6a:21:26:02:3c:56:
b4:c5:10:d1:d3:da:c0:e0:94:b6:5e:f0:70:cf:f3:
3b:27:65:d1:45:ff:58:d3:74:4e:6c:e5:9e:79:c2:
dc:e1:0b:74:4a:1f:8b:ab:d6:e8:9c:c9:82:a5:90:
a6:d6:66:c9:8e:3d:cb:7b:60:0b:84:f0:8c:6a:ed:
39:d5:47:9e:2a:96:a0:25:83:c5:ca:74:d0:61:ef:
48:5d:2e:f2:42:37:bd:c0:a3:22:80:95:c4:1a:18:
cb:c9:81:9e:01:48:e2:f8:54:7b:bc:49:79:81:f8:
89:e5:d3:50:2b:49:3c:33:ae:98:be:5c:76:e3:f2:
52:c3:6b:15:bb:87:0f:23:39:99:33:6c:1f:48:5a:
33:8c:84:22:43:80:09:2f:fb:e9:1c:d3:12:a9:0f:
60:a7:fa:5b:ff:82:8b:a7:ab:4a:ff:9a:21:2e:b3:
20:db:15:af:9e:95:0a:79:25:04:d4:95:c7:30:06:
4d:38:4d:74:25:c1:e3:23:18:fd:d3:76:30:31:53:
7b:67:a1:6a:2b:dc:89:06:ef:18:4d:ef:cb:a6:74:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:8A:CF:33:25:70:D7:13:D0:66:B4:44:27:24:16:95:0E:C7:EC
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ea:24:37:32:f3:79:ba:07:a8:30:ff:64:b1:c9:f1:48:ee:
5e:37:d4:df:78:68:01:51:d3:fb:49:f7:12:a1:98:d6:ae:dc:
fa:8e:9f:24:b7:ba:9a:7e:79:1e:0f:77:6b:17:f6:47:cc:1f:
4e:41:51:e8:73:2c:93:1d:4b:68:f1:7c:09:a2:5a:9e:0a:78:
c2:b4:c8:fe:40:84:31:3d:cd:e9:6f:71:59:3e:40:1f:1c:88:
b7:95:03:ea:b0:26:a0:e7:00:b4:99:63:79:ec:0e:0a:60:df:
bd:e1:57:e8:0d:d9:32:9f:60:ab:d9:1b:3a:30:31:cf:1d:6a:
52:65:9d:ae:eb:6b:27:33:20:5b:f8:df:44:50:60:0a:dd:a6:
86:4e:5f:8c:82:aa:35:32:86:f4:67:43:3d:68:4e:4a:74:27:
92:7b:df:68:3e:33:45:35:39:8d:1f:ca:35:fd:71:86:f8:56:
23:1b:ae:25:cf:45:1f:90:84:5c:b0:c5:8a:7c:87:ae:9a:6c:
43:35:f4:b6:e4:45:76:34:d3:8d:f5:2f:c2:08:b0:65:ef:9e:
d3:79:64:53:c9:f8:35:9d:1d:5f:e1:ce:c1:91:a0:a9:f6:5a:
99:dc:93:1c:e9:14:ee:bb:7e:ce:5d:58:fe:71:0b:df:ba:dc:
9c:7f:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:39 2025 by rpki-client