Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: QVOBCW4Lb677Ygj33uxSC5x7nUyCtJm5xUhIvAT/Rsc=
Subject key identifier: D8:BD:44:5A:36:FC:3B:91:4F:87:29:F1:4A:4C:C7:C8:2E:10:B9:60
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019678D622C1F50C0EAED04DA156B62D2F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 20:00:21 +0000
Manifest this update: Sun 27 Apr 2025 20:00:21 +0000
Manifest next update: Mon 28 Apr 2025 20:00:21 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 0gtncwvCkJLSYg2iZcl/zb4dKwzgg6Xb8Qm86niTZPw=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:22:c1:f5:0c:0e:ae:d0:4d:a1:56:b6:2d:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Apr 27 20:00:21 2025 GMT
Not After : Apr 28 20:00:21 2025 GMT
Subject: CN=d8bd445a36fc3b914f8729f14a4cc7c82e10b960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:6a:35:bd:83:96:28:93:db:e8:d0:31:b0:
30:c2:b8:2b:91:6c:a7:8c:2f:f1:42:50:0a:a0:92:
b4:6c:5d:ea:39:a0:29:a4:36:d4:35:4e:a6:ca:8f:
eb:ab:b6:41:6d:4b:6b:aa:a9:a7:61:ca:0e:49:b6:
b1:5d:d3:36:fc:fc:79:68:2f:fa:1b:c6:76:49:7c:
24:a7:2e:0e:45:3f:12:b5:a6:de:d7:c1:8c:53:a8:
bc:0c:ce:14:1d:91:bd:b0:18:3b:eb:0b:41:83:5f:
b1:6a:92:df:89:06:3f:1c:75:d6:70:78:e4:38:c8:
d1:1e:c0:d9:c4:d2:4a:0d:db:2d:b0:e2:45:2a:ad:
e4:bd:5e:82:a8:08:43:37:11:18:5d:38:5c:08:f3:
42:61:d2:b7:70:c2:25:5e:3c:8a:5a:85:dc:70:92:
8b:d7:6b:c3:ad:5f:1d:ae:86:43:bd:7f:ef:70:5a:
99:14:fb:5d:14:2f:27:44:b7:72:4a:c1:91:59:7d:
7f:dd:89:3e:c2:45:47:15:a0:b7:86:66:bf:a5:fa:
1e:fb:d1:45:65:ac:b8:31:88:3b:86:17:7d:45:1b:
a6:7d:1a:dc:47:0c:85:b6:f9:87:69:e0:de:44:57:
07:b6:98:1b:6c:db:4e:78:80:1c:87:7d:69:a4:fa:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:44:5A:36:FC:3B:91:4F:87:29:F1:4A:4C:C7:C8:2E:10:B9:60
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:87:65:61:89:55:f1:f7:48:86:e9:f7:ee:c5:d4:79:ec:90:
21:70:87:11:1d:79:c7:2b:66:19:ff:94:07:29:51:06:77:12:
c5:fd:8d:76:d6:46:09:3d:2e:e6:61:e7:c0:e4:b0:79:56:3b:
2d:8a:73:28:0e:7d:c8:f8:55:94:0f:bc:7a:ff:48:9c:9f:52:
b7:24:d5:39:d1:6a:a2:23:c2:b9:36:4a:16:79:1c:2a:a9:eb:
3b:ca:eb:9a:75:d3:01:0e:47:53:fc:68:72:bc:43:ca:d6:d4:
d8:3c:06:f7:0c:1a:7a:4e:3f:15:43:65:32:a9:5a:39:f0:a3:
b9:2c:dd:18:bb:08:56:d0:09:4b:ed:07:95:5a:e3:a8:71:1e:
cc:2b:b2:5d:cd:80:90:94:c0:86:42:39:af:03:8c:2f:27:33:
36:bb:3d:6c:0c:aa:2f:7a:38:c7:f2:a4:1b:44:dc:88:43:07:
48:f2:aa:73:f1:78:03:9a:6d:12:ea:fe:fd:eb:29:2d:e4:5b:
08:cd:e4:e1:ae:4f:d7:8c:db:3d:94:f6:3a:2c:4b:7f:23:c1:
53:05:50:c5:52:84:82:21:23:79:22:82:9e:4d:24:23:e5:f1:
c9:0e:2a:3b:74:85:35:9a:07:f3:b7:12:22:67:09:fd:04:a3:
3e:00:1d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41iLB9QwOrtBNoVa2LS+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0
Njk5ZGQwHhcNMjUwNDI3MjAwMDIxWhcNMjUwNDI4MjAwMDIxWjAzMTEwLwYDVQQD
EyhkOGJkNDQ1YTM2ZmMzYjkxNGY4NzI5ZjE0YTRjYzdjODJlMTBiOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EBqNb2DliiT2+jQMbAwwrgrkWyn
jC/xQlAKoJK0bF3qOaAppDbUNU6myo/rq7ZBbUtrqqmnYcoOSbaxXdM2/Px5aC/6
G8Z2SXwkpy4ORT8Stabe18GMU6i8DM4UHZG9sBg76wtBg1+xapLfiQY/HHXWcHjk
OMjRHsDZxNJKDdstsOJFKq3kvV6CqAhDNxEYXThcCPNCYdK3cMIlXjyKWoXccJKL
12vDrV8droZDvX/vcFqZFPtdFC8nRLdySsGRWX1/3Yk+wkVHFaC3hma/pfoe+9FF
Zay4MYg7hhd9RRumfRrcRwyFtvmHaeDeRFcHtpgbbNtOeIAch31ppPpq6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi9RFo2/DuRT4cp8UpMx8guELlgMB8GA1UdIwQY
MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt
NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh
LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFodlYYlV
8fdIhun37sXUeeyQIXCHER15xytmGf+UBylRBncSxf2NdtZGCT0u5mHnwOSweVY7
LYpzKA59yPhVlA+8ev9InJ9StyTVOdFqoiPCuTZKFnkcKqnrO8rrmnXTAQ5HU/xo
crxDytbU2DwG9wwaek4/FUNlMqlaOfCjuSzdGLsIVtAJS+0HlVrjqHEezCuyXc2A
kJTAhkI5rwOMLyczNrs9bAyqL3o4x/KkG0TciEMHSPKqc/F4A5ptEur+/espLeRb
CM3k4a5P14zbPZT2OixLfyPBUwVQxVKEgiEjeSKCnk0kI+XxyQ4qO3SFNZoH87cS
ImcJ/QSjPgAdQg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:48 2025 by rpki-client