Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: cwq7H+W+Yqllz4QEMtMaMyTPKgLmjWInsyAKp+XiZho=
Subject key identifier: 63:E4:12:09:50:DA:AE:19:35:23:92:87:55:52:A3:5B:41:24:2A:06
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0198D404841075ACBE741593C7DA98020FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0609
Signing time: Fri 22 Aug 2025 23:02:02 +0000
Manifest this update: Fri 22 Aug 2025 23:02:02 +0000
Manifest next update: Sat 23 Aug 2025 23:02:02 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: mwj9HgiRduFpkGIspk2CWLBDpYq0UsFHqfzbppIKO+A=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:84:10:75:ac:be:74:15:93:c7:da:98:02:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Aug 22 23:02:02 2025 GMT
Not After : Aug 23 23:02:02 2025 GMT
Subject: CN=63e4120950daae19352392875552a35b41242a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:49:c8:98:ab:8b:82:e5:9d:4f:5f:be:54:
67:49:97:83:52:07:ff:4a:31:6b:11:d2:bc:99:dc:
83:12:8e:e9:8a:6c:37:9b:1d:c1:49:06:10:92:a7:
a6:58:ee:02:c4:63:8a:87:8f:63:aa:f1:85:43:7b:
db:bc:c3:45:c1:1f:43:a9:05:a6:67:ed:ee:17:ed:
ea:f4:67:d4:ef:84:f6:ce:93:fb:98:31:b2:c9:91:
a6:6b:1a:f0:07:67:59:76:6e:d2:5c:e3:1b:18:0e:
8b:cb:dc:78:7c:fa:de:31:42:09:ed:18:8c:ad:9b:
b9:be:34:5b:47:0c:28:e0:1d:e0:b3:cc:45:84:75:
e8:c3:61:cf:82:f7:ae:85:4a:f0:dc:1f:0b:b9:1d:
f3:da:d4:99:a4:d3:83:68:ab:be:30:43:96:08:c4:
83:86:82:e9:18:55:d5:6e:c2:c1:e4:07:85:f1:c7:
79:d1:71:79:99:c9:0a:47:d9:46:1b:0c:0a:7d:3a:
f2:ec:31:9e:58:e4:1f:0c:ec:f9:3e:ec:01:f6:0b:
b3:62:39:48:b4:f5:50:02:98:ca:3c:63:e2:80:2e:
53:10:c5:19:a4:04:59:59:04:56:0a:20:d7:d1:e5:
6f:7c:63:39:72:de:76:b6:ad:8f:53:c4:6f:c8:9f:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E4:12:09:50:DA:AE:19:35:23:92:87:55:52:A3:5B:41:24:2A:06
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:27:78:33:72:cb:1f:be:d4:3e:46:fc:48:87:c8:73:6d:e8:
f5:9c:a4:d4:7e:7c:bd:e1:85:b0:ea:68:da:6a:7c:17:42:23:
ed:6e:5b:86:13:35:4f:26:28:16:e8:17:6a:3e:4d:25:15:fc:
8b:05:c9:a4:7a:e8:0a:fe:7e:d1:26:70:53:18:55:d4:a0:92:
1f:bf:91:7f:67:3c:29:46:c2:7c:72:ca:17:63:1f:e7:26:5c:
24:e8:a3:8e:10:e3:1e:4f:2b:5f:2b:53:1a:82:31:59:ee:63:
1b:81:0a:f2:6c:ce:d9:a7:ff:92:b4:c1:fb:db:bc:57:73:e3:
5e:c1:ab:c3:92:5c:e7:7c:d9:e1:93:8f:b4:63:3c:0b:1f:9c:
05:38:85:38:80:38:7d:5a:40:6f:f8:24:03:ef:96:97:fb:dd:
7d:7d:66:89:07:d0:c7:d1:8e:29:c6:99:09:c2:ee:42:92:9f:
f2:00:0c:77:c0:f6:ce:fc:c1:5a:27:b9:db:6c:ce:b7:20:5b:
8b:ee:11:1f:74:84:62:38:6c:58:5d:b2:bb:2e:75:94:73:c2:
4a:df:13:45:af:a4:78:de:18:4c:a5:50:09:77:81:e0:a3:c3:
cf:9b:10:d3:43:de:62:3b:07:be:42:8b:5b:45:b7:1d:d8:d2:
0e:56:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:40:19 2025 by rpki-client