Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: fIj5Pz6sNZy3HP/Z1J5mRQnQaXnnF0ZLslJNk79rb7E=
Subject key identifier: CA:E1:B3:42:6B:18:DB:4D:F2:39:48:B3:57:3B:02:A6:23:80:7C:1B
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0197B6A06F8ABE061715D4DA95678C753C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0A6A
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: FYVOB6wue50x2UpSSQuMOiNBkMnFvpeKyAzr1skWC9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6f:8a:be:06:17:15:d4:da:95:67:8c:75:3c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=cae1b3426b18db4df23948b3573b02a623807c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:83:38:a6:ee:01:a2:dd:22:bd:e7:da:ee:a3:
21:a4:d4:4b:41:b4:65:e5:a0:f8:06:26:f8:3c:10:
03:0a:27:ac:7b:45:d5:e0:77:c6:73:fb:9d:95:f3:
77:7d:ce:8e:5b:62:47:50:93:ed:06:0a:cb:6c:ca:
a2:74:f5:91:e0:0a:90:57:19:41:41:56:42:b9:78:
f3:79:90:c9:2d:ce:9d:62:db:c1:68:9f:30:cb:23:
ca:76:6b:6e:49:91:55:14:52:9d:3d:be:52:2b:cf:
4b:84:d4:0d:d7:2f:45:f0:54:5a:df:6b:82:18:84:
bc:76:ef:ca:bc:e9:9d:92:1f:22:e4:95:b7:33:ff:
88:fc:c3:24:6c:db:d1:8d:86:0a:d8:b1:a8:14:fc:
4b:6e:8e:be:27:4e:f1:4c:39:f9:10:25:b7:a5:b4:
a1:67:e1:b6:c1:1e:03:fd:05:9b:7c:84:e8:18:eb:
4a:aa:7b:d9:df:4f:f8:92:45:97:3c:8b:c7:51:10:
57:a4:90:38:ed:48:da:45:bf:28:ae:52:44:af:ad:
ee:3a:e7:e7:85:8f:60:63:b8:65:81:20:ab:3f:a9:
cc:e5:87:70:ab:21:29:93:db:2b:7b:dc:0f:6c:47:
0a:95:a5:7b:dd:36:99:06:e2:33:fa:0a:cc:fe:76:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:B3:42:6B:18:DB:4D:F2:39:48:B3:57:3B:02:A6:23:80:7C:1B
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:ae:66:e2:7b:b6:09:2a:d7:1c:56:b0:dc:9c:4c:b5:d2:
62:84:e4:40:0a:2e:f1:15:af:a2:58:a7:df:af:eb:03:75:f7:
9b:23:bf:69:bd:d6:04:1b:5e:cf:b8:6f:73:37:e2:b6:82:5f:
8b:12:c5:a9:4c:f1:5a:f7:fa:07:37:8b:fd:43:be:ee:4a:52:
61:a5:c0:fe:93:d9:aa:70:7d:f1:d7:78:be:f3:17:76:6a:f1:
78:10:a6:24:b8:38:39:9e:6c:ee:a8:19:7e:f9:75:96:05:12:
e3:36:1a:c5:1c:82:8c:f8:d8:4d:89:77:2d:15:79:b7:18:a3:
83:4e:4b:ad:da:99:17:0c:d2:0c:12:d2:c1:6b:59:59:54:41:
3f:b3:3b:2f:2b:71:6e:2b:74:67:30:37:05:0c:a8:4a:5a:40:
f5:0c:e2:e5:74:df:5d:8a:fb:1a:0d:f8:72:da:54:5b:49:98:
32:e8:d6:1c:35:f4:12:12:8c:5a:0c:05:0a:d8:3e:b4:e3:15:
68:a3:57:ec:b2:d9:ca:8c:f1:e5:dd:3d:ff:83:2b:73:60:2d:
59:7e:25:b5:4a:ec:70:64:9e:ec:e1:49:28:18:c4:8d:84:fa:
78:a0:fb:0f:d4:d6:43:d6:ce:6f:37:d8:21:7e:f4:ec:ef:11:
01:01:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:08 2025 by rpki-client