Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: qM3aP4JCXfQOwyuplfWlFeLRlOJBav97Z6hQYISOsQQ=
Subject key identifier: FA:5F:17:06:1F:0A:C3:58:57:61:2A:F1:4B:33:71:00:0D:8D:88:F2
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019928577F1F28DF2A55892043A6094D0777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 08:00:46 +0000
Manifest this update: Mon 08 Sep 2025 08:00:46 +0000
Manifest next update: Tue 09 Sep 2025 08:00:46 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: XEpjz7jXslYn4eTj5iDC6gINRafgbM0uMcpjwq7Li9c=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:57:7f:1f:28:df:2a:55:89:20:43:a6:09:4d:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Sep 8 08:00:46 2025 GMT
Not After : Sep 9 08:00:46 2025 GMT
Subject: CN=fa5f17061f0ac35857612af14b3371000d8d88f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:c8:aa:a6:7b:d4:83:fb:36:88:b8:0a:e8:
29:d8:ce:9c:58:21:6a:98:a2:37:d1:ab:2c:95:ea:
f5:d8:a7:4a:4e:2b:ca:e4:47:b2:f8:16:79:a9:ed:
e5:32:e2:0a:b1:4b:16:b4:9b:fe:ee:a3:cf:d3:b0:
ce:3c:e4:ab:3a:58:f2:48:be:c4:2c:3c:69:d9:a7:
05:de:f4:5f:2c:0f:06:f7:77:7b:b3:8d:d4:0d:b0:
e9:2d:d3:54:51:d7:f2:23:ab:9b:7c:90:d7:df:18:
f9:d5:db:8b:71:da:79:32:74:cb:cd:9e:3a:e2:21:
a0:0f:44:c0:25:88:89:b0:18:4c:51:a4:ee:6d:0c:
8a:3c:38:65:3d:3d:de:06:62:b8:07:cc:c4:34:a9:
66:b9:bd:9d:ec:3c:24:c1:47:d5:da:20:d1:b2:5f:
8d:2e:76:f4:f2:51:53:c9:e9:11:c5:3b:46:67:44:
b2:b9:f1:94:88:5a:4c:e6:5a:c6:8f:af:2c:32:36:
96:d8:be:2e:2f:35:58:1f:8a:07:ea:b1:06:3a:56:
01:39:2d:41:60:4f:a2:70:1f:c8:c9:6d:b9:f6:cc:
7e:9f:64:47:ff:8d:af:bd:b3:5e:30:a4:2e:b1:99:
17:c6:6f:02:14:d9:4b:c0:85:f4:5f:f0:89:fe:db:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:17:06:1F:0A:C3:58:57:61:2A:F1:4B:33:71:00:0D:8D:88:F2
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ba:20:85:d4:69:84:4b:6a:c6:ce:23:2b:4a:0c:ea:f6:6d:
10:13:04:2f:14:87:46:aa:d4:01:77:3d:cd:15:5e:fe:87:e6:
a0:53:9c:d8:de:f2:c6:0e:a8:c7:0e:20:23:39:63:0e:93:dd:
c2:54:b0:09:d6:b4:5c:44:66:79:d1:b1:92:a3:46:1c:06:fe:
20:1f:73:1d:d1:17:44:cb:8a:ee:23:61:fb:75:36:cf:bd:8a:
e0:2d:79:10:f1:25:bc:f8:f3:2b:48:7c:ee:bc:eb:15:7d:1f:
1a:87:b9:3c:50:60:7a:ff:0c:74:cc:c6:e6:8c:e9:bc:1d:31:
cf:6c:5c:84:06:46:1f:49:52:d9:d3:0e:62:cf:c0:c4:f7:9e:
f6:06:fe:37:21:75:65:02:14:fe:36:f5:fd:cf:19:5d:88:e9:
c0:2d:d9:e7:ac:b8:dc:9d:50:81:fb:8f:02:f0:37:c3:96:de:
cf:02:d6:4c:bf:33:31:ef:0f:f6:5e:0a:77:2f:02:af:b8:2c:
65:58:1c:30:93:4f:7a:38:44:db:79:2b:49:40:f6:3f:00:79:
f2:24:95:4d:d1:ef:27:b5:b1:cb:f6:37:24:52:5c:ec:6d:d6:
02:ed:9b:59:1f:06:84:0e:48:c0:62:c7:a1:bf:61:57:fa:ff:
fa:14:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:47:23 2025 by rpki-client