Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: Tyn/zk0Zqgp+DlGh2K0viPManSa56t0NiVamZ0QjRNI=
Subject key identifier: D1:79:8A:44:80:BD:12:37:63:FC:B3:82:94:52:F0:F6:C0:E0:72:53
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 0197B6694DF2ACD3FDB3DF78B5EAD2B16142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 16
Signing time: Sat 28 Jun 2025 12:00:43 +0000
Manifest this update: Sat 28 Jun 2025 12:00:43 +0000
Manifest next update: Sun 29 Jun 2025 12:00:43 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: GmLjMpiVRIvP3zsflHEcUoavNAPw3yI4IcGcb5lCi0M=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:69:4d:f2:ac:d3:fd:b3:df:78:b5:ea:d2:b1:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Jun 28 12:00:43 2025 GMT
Not After : Jun 29 12:00:43 2025 GMT
Subject: CN=d1798a4480bd123763fcb3829452f0f6c0e07253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:c4:da:bf:d4:7c:9c:91:f6:2c:26:b2:5e:
fe:9d:91:36:43:1b:77:81:05:f4:e1:8b:fd:0d:9d:
30:5e:00:1f:2c:18:c0:b9:19:d2:a1:18:5a:4b:bf:
73:27:13:62:be:32:91:a9:ee:cb:c1:30:8f:29:68:
80:a2:f7:d2:a1:61:f9:9c:b7:4d:50:ba:76:13:e3:
66:5e:b2:31:04:55:4f:18:a3:5c:cd:9a:11:70:ae:
46:d3:41:e0:68:41:19:fa:d7:69:a5:61:6a:9b:47:
fd:f5:b2:c1:3f:6f:bb:0a:2c:54:99:c8:a9:a4:45:
e8:f6:78:b5:78:52:25:14:7c:15:6b:65:ac:cf:d3:
39:50:c0:42:2f:21:8c:5f:7c:cd:6a:55:38:be:32:
c8:15:57:c7:e7:04:35:15:8b:8d:c8:9d:53:08:a9:
5c:c2:18:d8:7f:fd:73:6e:a1:a5:75:38:ed:5e:6c:
10:bf:83:2b:fd:3d:7b:8c:dd:41:f9:36:7e:74:a0:
93:df:c4:6d:2b:f8:07:c0:cc:57:3c:7e:f9:16:8f:
bb:fe:2f:35:f6:b3:6e:b5:1d:81:f0:99:44:7b:5e:
43:ab:0c:70:fc:92:15:1f:fd:ad:6c:c5:5e:ba:c9:
0f:83:03:74:c4:e0:c9:68:c6:14:41:3a:2f:c3:23:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:8A:44:80:BD:12:37:63:FC:B3:82:94:52:F0:F6:C0:E0:72:53
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4d:5c:b2:46:9d:8e:2d:8a:e4:4f:7f:0d:df:ee:e0:93:f6:
9d:9f:2c:7a:6d:40:3a:e4:2b:9c:54:0f:c0:18:88:88:e7:ec:
0e:8e:44:8d:c8:2c:bf:2c:d0:29:92:da:c6:8b:2a:36:63:a3:
ce:67:95:13:19:c3:08:47:24:5c:30:bc:ea:e8:a0:4b:55:ae:
e1:c2:04:fd:ab:e4:1f:c9:47:d8:f0:df:68:7b:94:2f:01:63:
1e:c8:25:af:d3:be:40:aa:b8:b0:f9:e6:2b:b0:ae:6b:7a:55:
9e:db:e9:41:3d:80:e4:c1:41:99:58:0d:ac:ba:a4:a4:61:36:
df:05:cf:aa:df:86:fb:2e:61:ce:e6:96:d9:c4:0d:45:12:9f:
27:18:0b:2f:d6:e9:dd:6a:ea:59:97:fa:af:b4:70:36:71:ae:
c2:88:46:ed:54:f3:54:a3:02:7a:ab:f1:b9:e6:36:a1:41:6b:
fe:30:a6:dc:97:0e:6c:df:cb:c7:e9:ed:09:af:66:ee:e4:09:
29:aa:2c:c3:ee:97:8c:42:c6:ab:3c:3a:94:30:fa:1e:c0:7c:
78:ef:54:c6:3e:f4:8c:ba:dd:a5:88:e8:c5:a8:ed:73:82:b2:
54:60:ea:ba:22:47:8d:a1:b7:10:ce:1f:bf:9b:42:e7:a3:fb:
61:10:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:44 2025 by rpki-client