Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: 2i8A2vaeGzCo7drpeHJos2Hu1wvc4qpQ/XE21C8IVe8=
Subject key identifier: 4C:B0:D1:65:F0:2C:64:EA:8E:13:93:DE:8F:D7:D2:B1:00:7D:F7:67
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 0197BA7E427AD655D1E76CC7CF4E583A4502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 04AB
Signing time: Sun 29 Jun 2025 07:02:06 +0000
Manifest this update: Sun 29 Jun 2025 07:02:06 +0000
Manifest next update: Mon 30 Jun 2025 07:02:06 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: EsVyrsoz3mh5tByUq2HVlhQttOEUHQtiPehFTe8Phas=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:42:7a:d6:55:d1:e7:6c:c7:cf:4e:58:3a:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Jun 29 07:02:06 2025 GMT
Not After : Jun 30 07:02:06 2025 GMT
Subject: CN=4cb0d165f02c64ea8e1393de8fd7d2b1007df767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:e6:1f:16:d6:82:1f:de:e3:77:d4:fc:37:
bc:f1:2f:00:38:a0:ca:c3:5e:8c:17:02:71:ad:83:
99:f9:df:f9:42:2c:0e:e7:07:ec:7f:5f:5e:10:3b:
6a:8c:3e:d1:84:6d:6a:c6:57:e2:6d:50:6f:67:34:
9f:3c:f0:2f:29:c7:3d:1c:28:94:c8:17:9d:24:9d:
9d:f1:85:51:e7:31:c2:d1:c0:e8:1d:89:28:55:7e:
71:a3:f8:e2:5e:1c:5c:d6:2a:da:33:16:52:23:07:
52:e1:3b:f4:a6:a8:f5:d5:29:d1:07:34:b3:1a:25:
39:40:97:8e:48:5a:a2:3d:b5:e9:66:3d:60:9c:9c:
00:a6:3a:19:47:66:c2:5b:66:24:c3:bf:c1:87:04:
96:35:fe:38:8e:0c:55:89:b5:b5:7e:65:d9:bd:4f:
db:f3:1c:71:db:da:89:94:73:a6:b1:08:90:8f:29:
57:2c:4a:b4:b9:ef:30:fd:2f:07:88:ac:34:95:10:
29:5a:c5:fc:5a:62:78:74:fc:72:76:07:34:c9:3d:
6e:67:6c:49:55:45:47:27:b8:7e:ea:9e:1e:ab:6c:
14:1e:9b:13:2c:c7:87:fd:d7:c0:4a:51:7a:f6:53:
db:28:0f:9d:02:3c:64:ca:c9:52:54:f8:1e:63:3f:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:D1:65:F0:2C:64:EA:8E:13:93:DE:8F:D7:D2:B1:00:7D:F7:67
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:7f:54:ff:2e:8d:19:b1:7a:5d:ea:40:8e:c5:ba:a0:4a:
95:39:cf:48:7a:47:4c:c0:ef:95:11:a6:23:39:76:9c:24:0b:
5d:54:24:7c:d9:4a:4e:8b:e8:f1:58:42:55:1b:fe:da:39:18:
da:f6:82:da:30:78:51:d9:ee:13:f6:13:e0:ac:86:ed:c8:00:
ec:69:36:c2:18:e7:aa:a9:99:15:4b:fa:93:8c:d9:f8:89:60:
1d:b2:f8:bd:6d:d4:af:c2:6a:94:3f:97:a0:92:74:60:83:9f:
be:6f:78:61:b5:47:82:10:29:fe:1d:b7:6e:e1:46:c3:b8:c2:
ff:59:54:01:ad:7c:aa:e7:02:fd:54:73:3a:48:32:b9:59:e7:
78:89:aa:dc:e4:cb:68:88:39:bd:41:d1:0c:45:0f:f0:cc:46:
f2:53:83:39:a1:25:6b:a4:f4:be:e4:5d:36:6f:de:0d:cc:c6:
2f:91:e9:ef:54:2d:5e:ac:e4:ca:40:26:14:95:cc:cd:0c:cf:
16:23:82:98:ff:0a:f7:6d:39:93:5e:f1:d3:e5:5e:ca:e0:d0:
e7:91:59:03:b7:73:7b:25:b8:86:a4:65:b8:ef:b6:cf:28:99:
88:67:be:9c:a5:fc:2b:0a:58:68:fd:a0:ea:21:ac:0c:33:e4:
9a:33:d8:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fkJ61lXR52zHz05YOkUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm
OTJjNDUwHhcNMjUwNjI5MDcwMjA2WhcNMjUwNjMwMDcwMjA2WjAzMTEwLwYDVQQD
Eyg0Y2IwZDE2NWYwMmM2NGVhOGUxMzkzZGU4ZmQ3ZDJiMTAwN2RmNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnavmHxbWgh/e43fU/De88S8AOKDK
w16MFwJxrYOZ+d/5QiwO5wfsf19eEDtqjD7RhG1qxlfibVBvZzSfPPAvKcc9HCiU
yBedJJ2d8YVR5zHC0cDoHYkoVX5xo/jiXhxc1iraMxZSIwdS4Tv0pqj11SnRBzSz
GiU5QJeOSFqiPbXpZj1gnJwApjoZR2bCW2Ykw7/BhwSWNf44jgxVibW1fmXZvU/b
8xxx29qJlHOmsQiQjylXLEq0ue8w/S8HiKw0lRApWsX8WmJ4dPxydgc0yT1uZ2xJ
VUVHJ7h+6p4eq2wUHpsTLMeH/dfASlF69lPbKA+dAjxkyslSVPgeYz9RYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyw0WXwLGTqjhOT3o/X0rEAffdnMB8GA1UdIwQY
MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt
MWM4MjI1ZDQwN2I1LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1
LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdql/VP8u
jRmxel3qQI7FuqBKlTnPSHpHTMDvlRGmIzl2nCQLXVQkfNlKTovo8VhCVRv+2jkY
2vaC2jB4UdnuE/YT4KyG7cgA7Gk2whjnqqmZFUv6k4zZ+IlgHbL4vW3Ur8JqlD+X
oJJ0YIOfvm94YbVHghAp/h23buFGw7jC/1lUAa18qucC/VRzOkgyuVnneImq3OTL
aIg5vUHRDEUP8MxG8lODOaEla6T0vuRdNm/eDczGL5Hp71QtXqzkykAmFJXMzQzP
FiOCmP8K9205k17x0+VeyuDQ55FZA7dzeyW4hqRluO+2zyiZiGe+nKX8KwpYaP2g
6iGsDDPkmjPY1Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:10 2025 by rpki-client