Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: uNDdsLOVErciaXq1naI/lkePiNQhKf/VO3RJktwLYM8=
Subject key identifier: 7E:E8:F1:59:98:83:E4:29:90:FC:81:4F:D5:25:6C:AD:E2:0C:91:F0
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0198D6601041B21D8B89074A85A5259A8226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0AFF
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: G7mlwAr330L2IhYXzYHkTfOIquTaTlWkKo0MxgP3JFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:10:41:b2:1d:8b:89:07:4a:85:a5:25:9a:82:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=7ee8f1599883e42990fc814fd5256cade20c91f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:76:d8:48:48:64:ae:3e:9b:b8:56:15:7c:
18:1d:4a:bd:c7:fc:61:f5:09:bf:48:ba:24:f8:8f:
86:50:5e:41:a6:82:f2:d8:af:f1:3e:66:5c:39:24:
8f:5c:4c:fc:c7:4f:8d:9c:a9:af:17:ee:e9:e3:4a:
f6:f0:eb:a1:ea:ed:5d:2b:4c:6a:38:96:8d:b8:48:
2f:10:73:83:61:ce:97:49:05:af:67:7c:8e:6b:c7:
02:6c:6f:d9:e6:ea:7b:80:19:85:84:92:a5:be:c9:
5a:f2:d8:bf:de:11:4e:5a:71:1e:51:c5:f2:fa:ae:
8d:31:04:62:67:84:a9:9c:20:33:18:ab:96:1d:7c:
7b:60:39:47:22:73:7c:9e:b6:27:86:08:5a:f4:46:
a0:56:ef:88:3a:a9:1c:b6:ac:ba:aa:a9:90:cd:7a:
e2:99:de:ec:3c:81:81:41:da:c3:84:f1:d4:31:a7:
63:8a:fa:d8:f5:84:13:f2:3e:7e:e0:1a:ea:bd:2b:
e0:b7:48:2e:00:34:7a:35:b3:bb:3e:61:c6:29:b3:
67:5a:f1:da:d3:6d:a9:94:5a:d1:2e:e1:9e:55:89:
a8:d1:dc:a3:b0:d1:93:29:0d:09:97:5d:eb:23:bf:
fa:2a:c9:b4:6f:e8:c7:86:1f:c8:44:1e:e5:98:0f:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:F1:59:98:83:E4:29:90:FC:81:4F:D5:25:6C:AD:E2:0C:91:F0
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dd:7a:73:9f:fe:c6:e5:c7:f0:9f:47:2c:85:fc:50:40:60:
ce:b2:b6:40:b2:8d:0f:f7:25:b4:e7:3a:ba:66:15:86:d9:74:
7f:a4:d5:11:67:69:d9:99:ea:df:92:e0:44:a7:80:53:66:6a:
42:fd:21:7a:af:32:1d:74:09:2b:91:b3:53:2a:03:ba:6a:47:
ed:47:9a:97:5d:4d:32:d3:66:14:5c:17:6b:73:9c:25:0a:17:
f5:fa:4b:a3:56:54:0f:6b:2f:f6:f3:ea:15:43:67:48:09:6e:
2d:83:51:51:b4:c1:77:bd:62:2a:87:b7:c8:e8:5b:83:86:69:
20:e0:3e:90:de:f4:0f:74:99:76:f1:45:93:9c:2a:74:bc:2b:
c4:1c:ca:0f:3d:3a:95:26:58:f8:59:6a:3c:13:73:7e:00:ef:
e1:bf:67:b7:f2:e3:43:d4:ae:cb:86:8c:3e:54:8c:98:76:63:
d5:79:1d:9a:b6:bc:4b:c9:b3:04:67:da:f7:5b:12:34:0a:7c:
69:4f:1f:93:65:8e:ea:ab:50:86:f6:b8:67:4f:03:db:52:15:
ed:da:9f:d6:52:55:e6:20:f7:e3:d3:16:28:9a:5e:2a:7a:ad:
88:9d:11:cc:d6:7f:7a:1d:74:af:fc:d1:cf:d7:b0:69:4f:47:
fc:b2:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:10 2025 by rpki-client