Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: xYnd5F2K/twLQ5kt5Ny9vm9kkVFMCtQHKfhYkcQWQOg=
Subject key identifier: 57:BC:07:04:D0:60:A2:99:63:23:EB:17:F0:EC:F1:1F:82:E8:3F:E8
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019874BDD3519E024661DE381D04C5A48D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 11:00:54 +0000
Manifest this update: Mon 04 Aug 2025 11:00:54 +0000
Manifest next update: Tue 05 Aug 2025 11:00:54 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: UeNBUzHLoTdEN/M6LjZDCtE7d1dk3sXM7xI8RYqpeUo=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:d3:51:9e:02:46:61:de:38:1d:04:c5:a4:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Aug 4 11:00:54 2025 GMT
Not After : Aug 5 11:00:54 2025 GMT
Subject: CN=57bc0704d060a2996323eb17f0ecf11f82e83fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:9f:67:75:c9:a2:97:fa:da:8a:63:b1:cf:
e8:49:57:04:3f:a0:8f:54:44:08:db:3d:81:28:c2:
cb:cd:69:ca:63:34:80:4e:68:25:aa:23:05:68:d1:
99:19:dc:89:a2:5f:ca:9c:a9:32:cb:d8:eb:0e:4f:
b7:f4:28:63:0e:26:20:c8:e2:03:51:23:a9:59:01:
1a:e2:58:e8:69:ab:ee:c9:f4:3f:84:1b:e8:d0:a9:
ad:79:be:8e:31:6c:68:8d:3f:a2:e2:50:88:e5:77:
ff:a1:7b:90:13:7a:31:1a:b3:4e:ab:f9:b4:dc:02:
6e:8e:02:01:b4:ee:8a:42:dc:c7:f7:f4:fb:9e:0f:
7a:25:20:59:e3:12:8c:4e:49:5d:db:a7:c4:0d:2e:
3e:77:2f:62:ff:73:b9:fa:ad:99:ba:e2:2c:6c:e3:
ad:6d:2e:0c:dd:cc:ca:ee:7c:c7:e2:fe:85:4e:b9:
13:e7:02:58:4b:a0:cc:cd:19:21:ba:1d:d0:e9:eb:
db:b4:1d:82:c8:68:30:06:62:ca:bb:0b:43:0a:be:
ce:17:e4:e6:66:50:45:6e:36:25:65:7f:16:35:0c:
7d:9a:96:0c:b2:15:99:c7:6b:32:5e:89:d4:74:cd:
cc:74:6e:2c:ad:65:6b:2a:69:de:b0:45:3f:95:10:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:07:04:D0:60:A2:99:63:23:EB:17:F0:EC:F1:1F:82:E8:3F:E8
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e1:1b:69:0c:22:01:a3:3d:19:4c:41:69:59:32:96:37:8d:
e9:09:5d:5b:a2:d9:70:45:3e:89:e1:2f:77:54:b6:a2:be:db:
1d:b7:5a:60:ea:6e:1c:01:39:4d:c2:c2:4c:8f:20:29:eb:e7:
60:cb:97:1f:ad:5c:99:15:76:f9:2e:42:27:d1:14:5f:41:c5:
db:e8:47:14:e8:66:40:2a:d4:ed:7a:7f:69:78:44:7f:ca:16:
c4:b2:b4:f2:c7:e6:a2:23:f7:65:ba:1c:a0:cc:6b:17:5e:1b:
d0:34:64:ef:0d:0c:bc:bc:a2:68:af:d3:ff:52:7b:2c:ce:b3:
ab:fe:e3:19:8b:1b:6b:3d:00:cc:dc:a9:6d:2b:c8:2e:23:8a:
ec:c8:86:56:8c:da:43:30:00:e7:64:e6:bd:ad:9a:cd:b5:fc:
9e:c9:55:d3:4a:c8:e3:7c:6e:46:87:7f:d7:d6:40:06:fa:35:
a2:50:07:5a:ab:65:9d:f3:eb:87:b8:7d:34:29:b0:69:4e:1b:
1b:5f:45:ce:72:4a:12:a2:c1:d9:d8:82:8d:02:a5:0f:3c:bf:
92:94:b1:d8:83:ed:a5:d6:0b:be:dd:d4:b2:a5:38:fd:d1:99:
45:0a:4d:5f:9c:be:c4:7b:38:20:a3:f9:7d:68:1b:f3:e3:03:
86:13:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:52 2025 by rpki-client