Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: tcBuDPasrcbrs4PoEWYrhtagRMKkdheiktxZhpE+z/I=
Subject key identifier: 5F:83:5B:A5:A8:11:72:BF:80:D2:D9:BB:23:23:EA:32:31:D1:E4:0B
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 0199FAD7A281821353D6BA7273DB84B30F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 2/bFobFFYxRl6VVbda2lHJkxBfPp2ZBIK182TfJ7wgM=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a2:81:82:13:53:d6:ba:72:73:db:84:b3:0f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=5f835ba5a81172bf80d2d9bb2323ea3231d1e40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:05:90:dd:ec:4d:89:6f:32:b1:3c:0e:8a:
e8:2d:86:8e:30:81:99:c1:6f:22:9c:03:e8:23:70:
fe:fb:27:5d:7d:8f:c4:1d:a6:4f:38:5a:77:7e:68:
1f:dd:62:24:e8:1b:67:f2:06:18:fb:f5:42:0f:fb:
b1:72:28:02:7f:07:78:b1:b6:e6:fd:27:fc:a8:ab:
ff:60:51:a6:69:94:e6:a0:54:41:b0:d2:3b:cb:23:
0a:12:a9:c7:3f:cb:82:e1:58:c1:15:a2:6a:f7:14:
2e:7e:00:f9:81:e6:27:43:20:09:20:99:e0:88:dc:
89:31:f7:19:fd:cf:f4:3e:88:aa:18:b7:db:32:d5:
9b:10:65:3c:9e:88:b5:2d:3a:86:36:69:f5:ac:8a:
7c:7a:0c:f9:5f:12:a3:bf:7b:45:23:95:4d:05:7c:
45:9a:5f:0d:5e:50:82:52:15:d2:e4:13:06:ef:7e:
3d:6c:0e:98:55:fb:45:52:13:d1:fa:74:4d:32:83:
c2:da:58:a3:7c:9a:13:b6:dc:42:1d:f3:cf:b6:0f:
ec:58:6a:4f:40:42:60:90:50:de:10:51:45:64:bc:
fe:46:dc:6c:7f:36:7d:89:71:bd:45:5a:53:4b:93:
06:4c:de:a6:3e:08:d7:43:25:bf:75:70:43:c1:60:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:5B:A5:A8:11:72:BF:80:D2:D9:BB:23:23:EA:32:31:D1:E4:0B
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d2:67:51:74:26:18:37:7c:4c:ad:1a:0a:dd:14:4d:74:7d:
2e:c3:cd:12:2d:82:dd:e0:e3:87:f3:27:d7:99:fa:61:08:3a:
4d:0d:63:a0:6f:91:c3:82:2d:39:8a:39:9d:eb:85:13:f8:25:
a7:ff:9f:d9:37:1b:73:0b:51:d4:aa:ca:26:19:20:99:7e:c5:
cf:26:bb:bd:7f:03:7a:2e:e8:04:43:68:73:60:23:1f:01:19:
4e:42:ec:22:fa:b8:bd:06:a8:8c:5e:dc:b5:74:f3:2c:6d:11:
81:bb:25:5f:46:ab:f7:68:a4:7b:6d:2f:14:30:a9:46:8b:35:
10:aa:85:c8:a2:7e:a5:d4:b1:2e:8e:11:08:ca:ca:fd:32:3d:
f1:fd:d7:b4:d0:aa:db:e2:dc:c8:cc:df:33:03:9c:85:4a:da:
41:79:fe:4e:66:de:f3:a3:7a:59:a8:6d:7b:9c:e5:a1:08:df:
16:45:cb:4f:0a:84:36:88:ed:45:d0:43:c1:67:af:78:c2:35:
69:78:83:2b:3a:ca:36:e6:3e:1c:09:f4:37:d3:83:8e:b6:0c:
1d:e5:93:89:d1:b7:1d:37:5d:b2:d8:6a:e4:3e:82:a3:ab:ab:
05:7c:d0:7e:9c:13:6f:42:9c:a1:13:c4:0c:a1:c1:f6:f2:6f:
05:c1:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client