Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: 24RpLZgTh6QOEWNie7g5axUqVmrMiB7LXRD3ZJxvwl8=
Subject key identifier: F4:92:24:50:80:85:18:00:26:66:4A:A0:EE:15:3D:06:C0:71:8A:A7
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 0198D474089ECDDEE8C89A0B5BD7DF263D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 053D
Signing time: Sat 23 Aug 2025 01:03:50 +0000
Manifest this update: Sat 23 Aug 2025 01:03:50 +0000
Manifest next update: Sun 24 Aug 2025 01:03:50 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: hrwoW6vOjefQNIQmzlB1dOrW+a9LCmZYNxLkzpGhqXQ=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:08:9e:cd:de:e8:c8:9a:0b:5b:d7:df:26:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Aug 23 01:03:50 2025 GMT
Not After : Aug 24 01:03:50 2025 GMT
Subject: CN=f49224508085180026664aa0ee153d06c0718aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:01:33:65:a5:76:b2:d4:30:64:02:60:d4:
ce:f0:77:a6:3d:ff:42:9a:a2:1f:a5:94:c9:56:b1:
b9:28:81:de:73:e4:3a:a2:e6:76:4d:bb:d9:24:76:
80:ea:08:14:e7:a1:1c:9e:ae:f0:1d:01:12:44:ba:
d8:25:52:bf:b5:39:15:d4:9f:76:e9:6a:68:e5:94:
3a:fd:1e:69:67:d3:88:fa:02:8f:3c:49:90:b2:1e:
2c:5d:62:c8:5f:99:22:12:4f:c9:2b:33:c8:8f:5e:
f5:9b:71:35:18:55:4e:60:69:53:83:21:06:65:0b:
63:dd:f7:bd:3e:53:3b:8f:13:6e:e5:d7:59:ac:09:
ff:94:09:c0:60:2c:de:90:22:cc:f2:3f:70:3b:0c:
4f:e6:c0:db:54:49:af:a4:1c:97:8a:ba:61:07:24:
15:15:50:8a:ea:2f:91:68:49:42:71:70:e1:eb:34:
99:06:01:84:0c:3a:bd:36:3c:63:9d:03:d6:ee:64:
c0:0c:33:db:70:9f:0a:59:30:5c:9d:5d:73:9d:ca:
25:f4:95:cf:e9:aa:bb:53:43:a9:88:1e:ce:63:c2:
04:37:fe:4d:01:c5:72:79:ef:95:10:f8:5f:30:0b:
a5:b8:d1:9a:d2:f9:7b:27:d6:5f:10:83:49:ef:09:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:24:50:80:85:18:00:26:66:4A:A0:EE:15:3D:06:C0:71:8A:A7
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:4e:54:98:9e:46:a4:37:78:2f:f5:30:c6:61:2a:69:8d:
80:66:7b:07:cd:66:46:7c:a4:b6:7f:49:5f:50:59:f8:33:bc:
bf:1e:c7:da:aa:dc:c0:6f:50:02:ce:72:72:05:ba:b3:38:06:
e1:6f:86:9c:48:0a:7f:f9:ff:83:23:32:2e:31:3e:51:39:1f:
5c:7d:f5:e7:50:99:15:d9:37:9f:36:52:41:ad:8e:e0:b0:24:
5d:5e:15:0d:31:18:ef:31:ae:3b:51:d8:c6:cd:cd:ef:dc:37:
6e:ee:6c:41:c6:54:09:29:91:67:18:41:a8:ff:c3:c8:90:b9:
0b:3b:ea:83:c2:bd:3a:74:66:a9:f6:ee:47:f2:5d:3f:59:2d:
d9:8d:7a:4d:0d:02:16:7e:b7:b0:fd:aa:62:96:13:68:2d:51:
9e:6b:16:c0:8b:03:53:23:3f:af:96:d2:ae:89:96:44:7f:b1:
26:6e:c3:f6:6e:60:18:7e:0a:d3:5a:7e:3a:0c:7f:45:d0:31:
1f:0e:2e:aa:c3:01:3b:f9:e8:a5:27:0d:cf:65:d8:4b:fa:49:
05:6c:2e:29:3a:99:41:94:0b:e8:f6:fe:c0:0d:a7:5a:bf:ac:
01:87:97:55:aa:0b:45:ca:27:e9:71:5c:c8:4e:86:04:14:ef:
f9:d6:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:29 2025 by rpki-client