Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: mWeUayCnrQ+Tkp/X1NJnH1Y/QE2zdgQcMoZhp9a5jlA=
Subject key identifier: 15:77:2D:B5:B3:C9:BE:A6:8A:0F:7B:83:FC:AD:3F:67:73:E7:FB:1F
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 0199FBB35B50BB476EA2578A91C6736C5041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 0143
Signing time: Sun 19 Oct 2025 09:00:59 +0000
Manifest this update: Sun 19 Oct 2025 09:00:59 +0000
Manifest next update: Mon 20 Oct 2025 09:00:59 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: c5TQhnLiJQy6fLAFgMy5NP7wmJajL1f6XbNZuwuTKrg=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5b:50:bb:47:6e:a2:57:8a:91:c6:73:6c:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Oct 19 09:00:59 2025 GMT
Not After : Oct 20 09:00:59 2025 GMT
Subject: CN=15772db5b3c9bea68a0f7b83fcad3f6773e7fb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:d9:1a:ba:02:55:81:d9:35:2d:3a:3b:63:
a8:41:91:f5:0e:67:2f:bb:e9:e6:56:07:28:68:75:
5a:99:70:a9:29:ab:a9:40:a2:fc:d1:b3:e0:a5:82:
fd:cb:38:6d:c7:40:6f:c3:5f:c0:7b:10:c0:cc:82:
02:9b:c4:ae:e0:9e:d1:95:a7:2a:ae:b4:c6:55:4c:
a1:1f:3c:f1:34:e1:3c:a8:e7:6d:6e:62:98:fd:23:
62:4e:e3:5f:8e:76:9f:4e:b9:4b:e9:1b:86:95:fc:
a2:f5:56:d7:32:82:7d:51:16:17:ab:dd:97:93:b8:
87:90:61:6c:9d:94:02:b0:3a:75:2b:ec:78:04:04:
06:db:8f:a4:f8:5f:14:53:22:83:89:82:52:28:5d:
8a:67:0f:4e:21:d0:10:ca:dc:b2:cd:8c:60:88:87:
9d:f3:75:12:10:17:d7:b3:ef:64:34:08:35:8e:7a:
47:55:fb:30:6c:ec:ce:19:35:83:14:7b:36:8c:86:
9f:bf:0b:78:06:c8:a5:84:7b:a2:f2:e1:27:a0:a0:
61:d2:22:60:62:09:e5:25:c5:7a:23:19:e8:bc:fa:
3d:d1:b0:63:3e:7b:4b:32:34:3c:3a:86:fb:76:1e:
45:ec:6d:4b:1d:eb:a1:01:93:73:f4:bc:39:64:d3:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:2D:B5:B3:C9:BE:A6:8A:0F:7B:83:FC:AD:3F:67:73:E7:FB:1F
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:50:74:4a:10:11:ff:06:d8:d0:73:18:05:51:de:8b:d6:1b:
59:3c:ed:31:28:ff:15:36:e0:a9:17:ea:6f:6a:fc:7b:b3:70:
c9:7b:ca:33:b0:4c:d8:4a:e0:84:46:95:07:1c:29:53:9e:15:
7b:7a:75:00:31:48:eb:db:a1:d6:76:ad:19:f6:f2:cd:15:14:
5c:32:21:c5:aa:81:53:11:f5:69:26:e3:f5:b6:35:b6:cc:38:
5c:5d:4e:5b:87:62:c8:45:d4:19:6d:da:28:8d:d9:b9:22:1d:
95:5f:f4:00:b7:63:7e:c3:da:68:cd:5a:0d:64:94:73:39:65:
18:36:4e:88:b3:7c:f0:ba:66:3f:08:39:bf:69:d6:6e:cf:e7:
cc:50:c0:e7:2b:1e:e7:a9:11:c4:af:d5:ec:2c:44:14:5a:e4:
e1:7e:3e:b0:1e:e6:82:1e:12:f6:98:15:df:8a:06:4e:66:96:
66:10:4d:c8:67:25:dc:12:34:1f:53:85:cf:5a:87:40:1b:01:
30:1e:31:b6:56:36:01:f2:91:96:2d:95:43:cf:c7:20:a1:b1:
61:f8:68:8e:86:8f:b1:fa:36:1c:45:e9:7f:e1:e5:ee:24:56:
f6:c0:01:b1:0b:cf:e1:ee:8d:ce:58:c2:ad:f4:67:76:a7:4d:
e0:9c:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:36 2025 by rpki-client