Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: XestiEvXDNyI1n7RXBIGH+Z7vSaNy3GHo8aOT1pDXDc=
Subject key identifier: 79:38:70:BE:C7:51:FC:8B:FE:0B:C5:9B:09:21:C3:C1:9B:AA:C9:51
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 0198D73B1191A920ECFB4AFC716FF1F4B9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:29 +0000
Manifest this update: Sat 23 Aug 2025 14:00:29 +0000
Manifest next update: Sun 24 Aug 2025 14:00:29 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 2ozqBYNNT32vZEzFX7EVpHwyHriBeylaF2Q8YJZ1MJw=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:11:91:a9:20:ec:fb:4a:fc:71:6f:f1:f4:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Aug 23 14:00:29 2025 GMT
Not After : Aug 24 14:00:29 2025 GMT
Subject: CN=793870bec751fc8bfe0bc59b0921c3c19baac951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:11:7f:77:53:c3:f5:73:e0:b7:cd:68:c0:
ed:87:08:22:04:b0:bd:d0:9e:f8:10:ea:e7:a0:63:
84:7a:84:43:d0:80:c9:ee:17:e1:7f:68:21:80:21:
1f:b9:4f:7c:d7:0f:aa:6e:99:c7:c1:cf:be:27:0e:
05:a2:5e:44:ab:80:67:04:57:22:1f:c9:b5:dd:8e:
b1:aa:4f:2c:02:2b:e7:6e:82:80:97:51:85:5c:17:
a8:69:f4:7f:61:70:e5:b2:a7:8e:16:09:55:bc:b4:
9c:4c:c0:7f:6b:ac:2e:62:02:e0:54:f9:50:a4:2c:
f8:00:15:af:5a:b1:96:e9:f8:5c:c1:29:34:ad:df:
ff:ee:af:2e:34:b0:9a:2c:2e:65:8a:32:33:2f:2e:
af:bf:0d:f7:49:cf:83:66:57:eb:ce:23:96:c3:d5:
5a:6e:c5:8b:66:6d:b2:d0:45:e5:6b:e0:ce:41:17:
49:e4:19:4e:58:6c:e9:a9:b5:89:27:0b:3d:1e:16:
d1:48:9a:b3:a4:7e:46:0d:8e:b6:6d:16:01:6b:5f:
83:12:a8:18:c4:2f:d2:3c:5d:37:68:46:4e:cb:2e:
ba:8b:41:db:c8:6c:56:a1:7f:b7:05:8e:95:ef:2d:
94:ae:cb:85:06:d6:d5:91:1b:06:f6:8f:fe:02:4e:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:38:70:BE:C7:51:FC:8B:FE:0B:C5:9B:09:21:C3:C1:9B:AA:C9:51
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f6:16:71:05:e5:f6:0e:0b:9d:7f:40:c3:6e:2f:6e:89:d5:
f3:9a:59:ee:41:73:7a:26:e1:9e:8e:67:e8:91:bc:0b:7c:4c:
b4:26:f5:58:f4:05:a2:7c:7b:d1:cb:9b:82:dc:99:14:d4:0a:
94:ac:6e:b9:1e:74:72:27:ba:4c:1d:0b:65:4e:64:ba:c9:26:
fb:8b:b7:0c:16:3c:5e:d9:54:97:45:bd:3d:91:d8:29:08:26:
90:09:2d:6e:bb:bc:a7:c3:54:4a:86:01:5f:12:63:a5:84:ef:
1e:bc:ef:c7:83:fe:2b:fe:ef:8b:2a:f1:0f:0a:42:95:c0:97:
0f:ef:58:16:f2:1e:6f:d3:33:27:b0:be:77:d5:69:1d:ce:37:
e5:55:4f:49:ec:b4:99:13:08:04:b0:5b:ab:f2:23:09:96:d0:
fd:56:69:03:92:a6:99:ae:86:1c:20:d7:99:8c:39:85:49:ac:
e4:71:e0:44:ef:52:47:75:5d:b2:2b:c9:72:6a:44:6d:89:34:
e6:d9:a1:3d:9c:e3:b1:85:c7:10:d3:88:cd:d1:f6:9d:e0:82:
3e:7b:cf:4d:77:30:08:2f:0e:ab:a6:c6:8f:b6:70:a8:45:94:
33:73:db:85:8c:c5:f4:e8:03:e1:85:23:db:36:bb:7e:e9:5b:
de:be:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:23 2025 by rpki-client