
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
File: gmvh-3GvSNazGFEKqL35qBXzPbg.mft (raw, json)
Hash identifier: idwwvwwnLabDB5aDf/N013b6UCOXzzLhG3WGvhwQD1I=
Subject key identifier: 10:2D:8F:8F:7D:82:0D:1C:BB:88:91:8F:1C:EA:06:68:46:C6:19:F0
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 0198D54EA681F9027053721E0336B2742A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: ItDOSAPXP7fGwIUCyAUKyyhkB4Q.roa (hash: OWstEJSZcgCk402ChRTJkXohNTIeEApse64rKCImRuM=)
2: ckwFjtT2deecTIv0EBJffOzlHQ8.roa (hash: AfxLwGByDY21vrcsdo3k0yXW342fPqqOEbjPkEKPwyg=)
3: gmvh-3GvSNazGFEKqL35qBXzPbg.crl (hash: gQKuMLb7FnwR37XWAZf+lRdphX7OqJbsBDWhgaoCWPE=)
4: hSlAxKZnavSBFWLhMLPVbCueXS4.roa (hash: VFJXjLPeI3ZR1WorzKTvxcecT73zNWbWt4fU0UCHVzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a6:81:f9:02:70:53:72:1e:03:36:b2:74:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=102d8f8f7d820d1cbb88918f1cea066846c619f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:6b:f1:d9:0c:a1:98:96:56:8f:78:d7:c8:
b0:30:ac:21:da:5d:24:6f:a6:02:37:2c:38:19:62:
fb:4e:e5:ff:26:3b:69:e0:4f:b3:cf:a4:51:69:17:
6c:44:2d:50:e5:30:70:db:39:11:e9:a8:df:83:8d:
27:91:eb:51:77:a8:18:7c:cd:e8:81:57:6c:ae:c3:
da:bd:af:5d:f6:10:03:df:b9:1b:c6:ce:ac:fe:9d:
1f:4f:53:14:44:58:98:e5:4f:93:48:19:e0:e8:e3:
57:72:85:ce:7f:3b:c6:84:a7:72:de:c2:d9:1d:dd:
48:1c:30:44:e4:58:8a:26:6d:30:06:0f:2b:96:44:
ed:d2:f6:69:04:b3:d5:45:38:ba:94:f9:26:26:e3:
96:85:1e:29:ec:b3:ff:a2:86:6d:fe:24:64:e1:62:
61:c1:a8:1d:4e:fa:7e:a5:6a:b3:9b:d8:3f:d3:5b:
d2:ae:81:1d:b5:72:01:76:af:26:d1:ab:bd:18:35:
81:ff:77:ec:aa:f3:aa:37:d2:72:18:ac:8c:4f:cf:
ff:81:57:a0:c7:b7:79:8b:22:00:8e:2e:28:0a:c8:
5f:53:4f:ae:1f:d2:88:aa:54:ea:f9:0a:89:24:9c:
86:55:35:c0:b2:a2:83:e4:68:74:5b:e2:ce:77:b7:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2D:8F:8F:7D:82:0D:1C:BB:88:91:8F:1C:EA:06:68:46:C6:19:F0
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3c:10:64:20:41:58:82:11:28:b4:2f:97:77:d1:47:20:cd:
ca:f4:e9:69:6e:f8:d6:e6:01:c4:06:0b:57:62:66:d6:12:15:
d5:4c:75:c0:b8:76:3b:b3:fd:b3:ab:85:04:c1:3f:97:43:b7:
26:49:7e:13:5a:06:25:6a:00:b9:c2:b5:f1:8d:00:16:83:cc:
35:7f:4d:a4:c3:39:23:09:21:bd:f8:8d:68:fa:e3:bb:fc:2a:
9c:c9:b3:f4:54:3e:18:c7:e6:78:54:36:73:ef:69:a1:1f:05:
f2:b7:fb:cc:14:48:e7:6f:a0:fd:c8:fe:04:cc:b0:1d:8f:4a:
9e:f5:87:a6:05:15:de:86:56:ef:cb:66:a2:e5:79:d8:20:21:
eb:56:f7:c3:81:49:9f:18:13:be:5f:7c:38:81:87:aa:08:90:
28:c9:f0:9f:40:77:68:c1:b5:91:93:34:3a:7f:f2:de:6e:d0:
5b:8a:22:4d:08:0f:75:87:09:e8:26:ba:3d:68:c3:58:b1:04:
d0:49:fa:a9:28:69:62:8c:5b:64:71:02:38:82:34:10:aa:41:
67:f6:32:8f:1a:8b:31:ea:e9:4b:33:65:6f:c9:e2:ab:3a:f2:
4f:0f:d5:c2:4c:18:4a:ed:10:64:ba:ca:d2:80:7d:4e:f8:76:
e8:ed:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:19 2025 by rpki-client