Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json)
Hash identifier: pZ6lDcGdy0W9bo8i50o4gjxnjkE9HsmyGvhc9s3lzzk=
Subject key identifier: 7A:D7:74:EA:70:B9:4D:48:0B:94:BC:07:ED:EB:05:57:BA:47:76:F5
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial: 0199228CC08F70B0B45CF08ABDACD720A0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
Manifest number: C4
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: LKLN3/fkXOpwckYxqT6trCyOkuQxra8aL2sufSSHenI=)
2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c0:8f:70:b0:b4:5c:f0:8a:bd:ac:d7:20:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=7ad774ea70b94d480b94bc07edeb0557ba4776f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:8f:31:ef:aa:80:0a:87:96:f5:94:1d:b6:
fa:55:bc:9e:14:c7:71:70:23:81:cb:27:45:14:8e:
ce:c0:02:06:6a:8f:1e:21:06:f4:d8:71:7e:e9:62:
f5:f8:d3:a8:a7:70:6b:b3:a6:8d:78:94:87:aa:36:
c0:02:28:87:4e:96:f7:6f:f7:9d:b0:df:d3:8f:ad:
4c:1e:fc:c1:e0:bf:78:2f:43:05:a8:36:0b:2f:42:
f7:06:d6:bf:3d:e6:3b:f2:b1:b7:c5:b2:37:ee:ca:
87:3c:07:a1:87:0a:b9:79:10:ad:6c:47:fd:88:4e:
7c:00:8e:7c:c2:78:9a:6d:18:17:bb:eb:4a:41:b0:
68:12:90:a0:11:9d:89:f8:e4:fe:2b:c4:69:65:49:
18:5a:64:22:2a:7d:94:26:57:49:6f:db:ee:50:c2:
8a:d4:f9:90:f1:cd:1c:96:42:0e:7a:b2:20:64:a1:
c5:08:f7:8d:f9:f6:14:cb:c2:d2:5a:c5:6b:82:53:
4f:de:b3:8a:73:1a:8b:4d:69:ae:b6:7e:9f:84:31:
9b:7e:fa:30:28:93:82:47:56:94:51:f7:5b:3d:bd:
ae:fe:15:e0:45:5d:57:79:3c:b5:6b:00:12:d8:4c:
77:27:a5:c2:52:15:d9:91:a5:ef:00:d0:78:74:69:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:74:EA:70:B9:4D:48:0B:94:BC:07:ED:EB:05:57:BA:47:76:F5
X509v3 Authority Key Identifier:
keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:9b:80:9e:43:58:8f:8b:c4:e8:8e:81:b5:04:89:3a:9d:
74:b9:8a:23:65:de:18:6e:10:e2:48:20:9f:f4:b8:85:8f:62:
62:bf:e2:28:b0:0b:1e:eb:5b:a3:76:1e:07:47:85:87:69:28:
72:99:bb:88:9c:52:43:f1:c7:55:0a:82:30:08:d3:b8:a7:94:
eb:14:f4:01:cb:e0:cf:8b:9d:46:37:ff:ba:95:09:f4:29:12:
f4:a4:b4:78:62:01:f3:91:b5:5d:9b:f8:ea:27:64:2d:58:e3:
cb:ca:1e:13:8e:0b:91:36:18:05:46:04:bc:7c:fc:dc:56:27:
d9:13:dc:67:92:bc:0d:f8:3d:d5:dd:81:8c:b5:d2:bc:5a:3d:
94:af:ca:a5:17:c1:65:b7:b8:be:94:77:8a:1f:8f:67:d2:eb:
36:21:a3:a8:57:bd:54:cf:ac:54:40:16:65:6a:0d:e1:68:27:
ff:cb:80:92:9a:4f:0a:c4:13:1a:dc:6a:1c:9e:c9:92:cd:b2:
ad:29:f6:ef:89:d7:fd:98:76:79:be:61:4c:af:02:e6:8d:3c:
28:31:ed:1a:d8:c1:a8:ea:c0:49:0d:a3:ba:64:b3:a6:ec:aa:
08:6c:8f:a1:b7:56:7b:91:a8:42:65:f9:98:00:d8:c7:f2:c3:
02:c7:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:25 2025 by rpki-client