Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: myqHaqMPoVKaI7EDpoBMEWHrLWEORq1ddJHiozdyddI=
Subject key identifier: F3:0D:F7:EC:8B:EA:99:0F:7C:71:34:FE:32:1F:40:2B:1A:D0:8C:D2
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0199FBEBCB75467E70CEC8A810CA0F80258A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0B97
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: 5/KiJ5esm6QEqFHUKNOjzbg7rriFglplwWb8e9pUH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cb:75:46:7e:70:ce:c8:a8:10:ca:0f:80:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=f30df7ec8bea990f7c7134fe321f402b1ad08cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:da:e5:fd:4c:b9:9a:83:b6:65:0c:eb:6c:
65:d2:e7:c8:a3:c6:7a:39:d4:4f:7e:e0:b5:02:93:
1b:4a:cc:d3:11:6b:fa:8f:ed:f3:0b:2a:42:87:54:
dc:f4:6d:71:a6:fb:3c:0a:eb:0d:b7:a8:64:97:2e:
a8:32:64:61:22:57:77:d9:b4:4f:e0:f9:93:73:b1:
3b:bd:d8:4e:69:6f:9a:cf:f5:b9:93:86:b7:16:2e:
66:f6:b8:34:e0:34:85:df:71:85:6a:33:b1:54:a2:
f7:91:ac:ea:47:5c:3b:d2:c0:83:a7:46:27:33:04:
6f:4d:4f:bc:fe:df:06:bd:c4:ca:ad:5e:3a:31:fb:
2a:e2:62:14:89:52:67:fa:9c:20:d4:c3:05:ef:a4:
71:8d:88:b5:24:3a:0b:16:07:21:90:70:c7:64:16:
44:43:6e:c6:4c:b1:34:c1:a1:de:07:11:c5:c8:aa:
7b:cc:f5:2d:c4:85:1b:2a:e1:70:be:ee:eb:73:29:
e6:c4:66:54:15:ac:6f:43:b4:59:e3:d8:ed:e9:4f:
db:ec:4f:7a:ee:91:85:93:b9:a3:d6:e8:61:0d:8b:
9c:a1:c1:a9:61:8e:55:ce:18:8e:e0:cd:77:a3:48:
3d:97:f9:bb:e8:4d:a6:60:c3:29:18:24:b9:79:d4:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:F7:EC:8B:EA:99:0F:7C:71:34:FE:32:1F:40:2B:1A:D0:8C:D2
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7e:ad:cf:16:dd:dd:ab:e7:25:71:97:b8:8b:5f:68:23:15:
78:f5:34:38:29:d4:5d:73:53:76:1c:1a:06:88:59:24:58:92:
c0:62:77:3f:71:22:3a:b5:f2:d5:37:80:5a:60:92:6c:88:1c:
26:e6:52:e0:64:d4:f9:b5:fa:5a:ea:bb:c8:70:57:00:63:49:
42:78:03:4c:21:5e:21:73:4c:e2:b0:8b:f0:25:4e:8c:ea:ee:
86:03:19:fc:04:ac:48:29:28:de:75:fe:aa:6c:1b:7a:31:ac:
d7:b0:e0:5b:07:b0:8e:f2:7f:ea:49:44:65:02:f1:d2:9a:af:
c2:63:21:b7:1d:08:1c:3f:df:5d:e1:4e:dc:25:54:89:55:9a:
65:9b:87:ae:67:3f:55:e1:1d:48:d2:f2:ae:51:a1:83:a7:25:
fa:9f:1e:36:1f:97:e8:bb:6f:68:38:b1:55:45:db:1b:e4:3c:
bd:69:c4:b9:aa:16:4f:f5:48:d5:82:e4:62:07:ec:58:20:c3:
9b:ea:da:ac:61:64:cc:1d:8f:7b:d8:3b:89:b7:7c:e5:23:51:
28:ca:7d:38:13:cf:2b:a4:fd:d8:64:14:03:76:99:cf:26:71:
50:55:ee:12:1d:eb:b9:28:f6:99:3f:f1:41:86:ed:5b:ea:c3:
e2:0d:bd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:15 2025 by rpki-client