Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: x0XGohBJ3Ud2j4gSY/ABNEaeq6VRzZT/OQbLc/T6sOY=
Subject key identifier: 33:84:FA:77:A0:CF:1C:7C:7C:3A:55:0F:6B:86:BA:74:57:1D:4D:F2
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019A4DE19E1F4741797B6F36FBA114E9A846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: QiiGUusxXVSIen1gBMByYWfl2qltaKEVt5+FEe7aMQs=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9e:1f:47:41:79:7b:6f:36:fb:a1:14:e9:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=3384fa77a0cf1c7c7c3a550f6b86ba74571d4df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:91:d2:99:a8:7b:51:e2:d2:57:e5:44:aa:
ec:ee:a3:e7:09:22:f4:5d:50:87:e5:a6:b1:c6:58:
83:c8:46:94:ca:7f:82:2d:25:12:c8:90:ed:4e:47:
d1:6c:8a:c1:00:a5:59:85:c5:03:1c:50:76:53:3d:
da:07:c5:af:2c:46:4a:2d:9e:97:53:56:ba:65:b2:
04:6f:78:c8:dd:dc:c6:95:bd:19:a5:12:0f:58:90:
e9:41:c2:c2:49:04:06:23:a1:5a:28:5f:f2:b9:fa:
1f:76:9e:7d:f0:68:ee:92:00:02:4d:d5:d9:76:52:
4d:07:36:bf:84:e1:75:9c:28:60:20:ed:13:e1:56:
71:68:40:07:93:59:39:12:f1:55:67:70:53:6a:a7:
24:5c:5a:c6:bd:fa:39:79:5d:a0:ae:28:83:d0:86:
f3:57:b0:35:7d:8a:00:89:3f:f2:13:97:16:c3:64:
9b:b4:c9:f8:b4:01:ab:86:97:46:38:82:3d:f6:d3:
fa:ac:c7:d1:fc:2a:96:e6:fe:db:0f:85:ec:42:e3:
c7:a1:c7:cd:73:b9:48:c1:34:a0:79:0f:17:47:35:
e6:2c:c1:97:f5:c6:33:3c:83:5f:64:ba:04:ef:35:
22:34:41:aa:52:b9:83:80:a6:3c:33:62:44:74:3c:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:FA:77:A0:CF:1C:7C:7C:3A:55:0F:6B:86:BA:74:57:1D:4D:F2
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f3:93:23:88:76:0f:ab:e9:fb:53:c6:f4:fd:91:56:15:77:
a9:91:b0:8e:c0:78:b7:7d:f7:b3:1d:4b:15:3a:03:03:72:3e:
ea:ed:4c:07:63:63:b0:63:a5:f9:98:da:e9:da:a5:72:8f:5b:
6b:15:0c:af:14:81:e6:ae:c8:56:a4:d6:39:db:28:50:af:00:
51:69:80:dd:73:a0:71:43:04:69:ab:53:05:73:f3:3e:78:43:
e0:ab:7b:b4:58:d8:dc:bf:c6:b4:dc:00:dd:2c:ff:ec:6c:49:
7c:c0:cd:4b:bf:a4:fd:4f:1e:2f:ed:d7:37:f9:22:15:0a:46:
35:33:11:6d:55:44:f1:db:84:cd:0c:55:1e:bc:59:61:87:51:
85:82:f9:c0:c3:5b:98:6b:cf:93:94:34:fd:04:cc:1a:d8:70:
af:4b:fc:05:47:63:cb:97:dc:66:08:2d:fd:d8:33:a1:b8:47:
2d:c4:aa:dc:c3:71:30:43:0f:3b:a6:f1:38:88:08:2f:53:2e:
06:50:33:2e:0a:85:7d:b3:4a:64:92:98:02:4f:20:6f:a3:29:
20:e0:01:66:18:d1:34:9c:4e:52:af:da:8b:fc:a2:8d:7e:d0:
a6:7c:25:06:99:34:92:24:4d:e3:16:ec:df:3c:05:1a:c9:03:
e2:43:e7:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4Z4fR0F5e282+6EU6ahGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0
Njk5ZGQwHhcNMjUxMTA0MDgwMDIyWhcNMjUxMTA1MDgwMDIyWjAzMTEwLwYDVQQD
EygzMzg0ZmE3N2EwY2YxYzdjN2MzYTU1MGY2Yjg2YmE3NDU3MWQ0ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWWR0pmoe1Hi0lflRKrs7qPnCSL0
XVCH5aaxxliDyEaUyn+CLSUSyJDtTkfRbIrBAKVZhcUDHFB2Uz3aB8WvLEZKLZ6X
U1a6ZbIEb3jI3dzGlb0ZpRIPWJDpQcLCSQQGI6FaKF/yufofdp598GjukgACTdXZ
dlJNBza/hOF1nChgIO0T4VZxaEAHk1k5EvFVZ3BTaqckXFrGvfo5eV2griiD0Ibz
V7A1fYoAiT/yE5cWw2SbtMn4tAGrhpdGOII99tP6rMfR/CqW5v7bD4XsQuPHocfN
c7lIwTSgeQ8XRzXmLMGX9cYzPINfZLoE7zUiNEGqUrmDgKY8M2JEdDwvawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOE+negzxx8fDpVD2uGunRXHU3yMB8GA1UdIwQY
MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt
NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh
LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvOTI4h2
D6vp+1PG9P2RVhV3qZGwjsB4t333sx1LFToDA3I+6u1MB2NjsGOl+Zja6dqlco9b
axUMrxSB5q7IVqTWOdsoUK8AUWmA3XOgcUMEaatTBXPzPnhD4Kt7tFjY3L/GtNwA
3Sz/7GxJfMDNS7+k/U8eL+3XN/kiFQpGNTMRbVVE8duEzQxVHrxZYYdRhYL5wMNb
mGvPk5Q0/QTMGthwr0v8BUdjy5fcZggt/dgzobhHLcSq3MNxMEMPO6bxOIgIL1Mu
BlAzLgqFfbNKZJKYAk8gb6MpIOABZhjRNJxOUq/ai/yijX7QpnwlBpk0kiRN4xbs
3zwFGskD4kPnoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:59 2025 by rpki-client