Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: Z3P70ZQI8t6dYpSnD58nP7ygOnsw+0UmSTM70u97ZkM=
Subject key identifier: 98:35:8B:6D:F1:D8:AE:C9:25:9F:35:28:D7:EA:D3:B9:BE:15:EE:B9
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0199FB7CAE4D6E91A51C2F3EBDD0F76228DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 06A2
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: t1cErSFAEVC1Ym+Te2G8wUyPBN3ghHnaVdnxw8f7LHs=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ae:4d:6e:91:a5:1c:2f:3e:bd:d0:f7:62:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=98358b6df1d8aec9259f3528d7ead3b9be15eeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:ef:a2:65:15:8f:4a:ee:3c:1e:2b:1b:61:
29:cc:6d:0f:24:1f:30:c4:ea:0f:ba:f1:0a:44:29:
67:60:d5:da:2c:79:d0:f2:3c:4f:f0:00:6a:cb:31:
98:f7:56:cd:85:f6:01:87:cf:a0:6b:c7:31:8d:5c:
10:c2:8e:1b:11:7d:93:15:89:d2:d5:19:48:ed:f4:
95:4c:97:71:ab:1a:70:2c:62:87:21:51:4a:6c:8a:
f3:f2:f9:3c:a1:a4:5b:7e:0b:2e:55:89:ed:6d:53:
ef:f2:fe:ce:bc:c6:a0:83:80:5e:f8:c3:64:0f:2b:
aa:58:5e:6e:ff:cb:fd:fe:e5:bd:32:2a:21:59:27:
41:0d:f6:ad:f2:82:ae:5a:1f:e7:fd:75:aa:2e:f9:
c4:0d:af:e6:db:88:21:f4:31:81:4a:3d:cc:6c:44:
25:aa:a8:c3:1c:73:65:df:69:3e:67:99:bb:27:3c:
4b:89:73:80:c4:da:3e:4a:d7:64:59:91:69:16:bf:
f5:95:2b:58:f7:cd:d0:9d:49:2a:53:ca:d0:aa:ba:
a6:ad:41:6a:5f:7b:c1:c8:e9:1f:0c:09:99:73:4b:
84:b3:fb:d9:e7:e9:9a:44:8a:f1:15:a8:2c:b3:29:
d7:9f:02:c1:86:7f:98:12:fe:33:2b:cb:89:23:d2:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:35:8B:6D:F1:D8:AE:C9:25:9F:35:28:D7:EA:D3:B9:BE:15:EE:B9
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6a:a4:10:33:13:6c:aa:45:7b:a5:03:a3:ee:17:6f:7b:02:
0b:cd:35:31:32:08:ae:1b:20:21:c3:50:b5:ee:6c:03:8b:d6:
f3:66:60:fd:1f:ed:5a:1c:92:ad:25:de:f6:c0:de:81:c6:cd:
f6:a6:3e:36:ea:e1:55:cd:fc:9e:50:b8:05:96:00:3d:52:99:
e0:08:8f:ed:73:09:84:74:63:d5:46:72:66:25:35:70:a5:2a:
2c:c2:46:4d:e1:5e:a8:af:8f:56:70:51:41:ed:d2:f3:e4:c3:
32:a6:ea:1f:ec:a3:bf:07:a9:0b:4d:57:34:b5:71:e7:c9:3d:
cb:2a:f8:13:de:a3:e3:fd:7d:82:61:2e:9e:ef:b8:15:7e:37:
55:65:cf:99:dc:26:4c:4f:9d:ef:0e:08:17:eb:7a:93:39:07:
bd:b8:7f:29:50:51:4f:12:60:76:6e:c3:aa:c9:ca:4f:c3:a5:
e2:44:03:51:41:65:f6:36:0e:98:5e:8f:e9:3c:8f:74:7b:79:
1a:41:d8:93:76:8b:19:8a:e2:85:65:a4:8d:ef:3b:b5:37:81:
a9:6b:a9:c0:40:5b:6b:7e:0d:6e:8a:56:ff:4e:d1:e9:5d:0a:
43:b2:f1:ef:64:d3:f4:10:c3:69:04:dd:28:94:66:cd:fc:12:
e2:f5:82:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fK5NbpGlHC8+vdD3YijeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj
ZmYzNDYwHhcNMjUxMDE5MDgwMTE2WhcNMjUxMDIwMDgwMTE2WjAzMTEwLwYDVQQD
Eyg5ODM1OGI2ZGYxZDhhZWM5MjU5ZjM1MjhkN2VhZDNiOWJlMTVlZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCjvomUVj0ruPB4rG2EpzG0PJB8w
xOoPuvEKRClnYNXaLHnQ8jxP8ABqyzGY91bNhfYBh8+ga8cxjVwQwo4bEX2TFYnS
1RlI7fSVTJdxqxpwLGKHIVFKbIrz8vk8oaRbfgsuVYntbVPv8v7OvMagg4Be+MNk
DyuqWF5u/8v9/uW9MiohWSdBDfat8oKuWh/n/XWqLvnEDa/m24gh9DGBSj3MbEQl
qqjDHHNl32k+Z5m7JzxLiXOAxNo+StdkWZFpFr/1lStY983QnUkqU8rQqrqmrUFq
X3vByOkfDAmZc0uEs/vZ5+maRIrxFagssynXnwLBhn+YEv4zK8uJI9JsBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg1i23x2K7JJZ81KNfq07m+Fe65MB8GA1UdIwQY
MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt
OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3
LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGqkEDMT
bKpFe6UDo+4Xb3sCC801MTIIrhsgIcNQte5sA4vW82Zg/R/tWhySrSXe9sDegcbN
9qY+NurhVc38nlC4BZYAPVKZ4AiP7XMJhHRj1UZyZiU1cKUqLMJGTeFeqK+PVnBR
Qe3S8+TDMqbqH+yjvwepC01XNLVx58k9yyr4E96j4/19gmEunu+4FX43VWXPmdwm
TE+d7w4IF+t6kzkHvbh/KVBRTxJgdm7DqsnKT8Ol4kQDUUFl9jYOmF6P6TyPdHt5
GkHYk3aLGYrihWWkje87tTeBqWupwEBba34NbopW/07R6V0KQ7Lx72TT9BDDaQTd
KJRmzfwS4vWC9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:42 2025 by rpki-client