Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: 7U5xc2OxLfd+t5nRiszTqe2bNzPc+PHHyGQVTt206c8=
Subject key identifier: 22:E4:D9:E9:5E:93:3B:2F:F6:BE:5D:3F:97:E9:85:A6:FE:78:52:03
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 0198D439B38DA9D5EA9558F403AC175236B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: AA
Signing time: Sat 23 Aug 2025 00:00:07 +0000
Manifest this update: Sat 23 Aug 2025 00:00:07 +0000
Manifest next update: Sun 24 Aug 2025 00:00:07 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: lTWoTqu6OzjT+4W5ALpZv1tqufuGVxIHj5IHQTaOGmc=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:b3:8d:a9:d5:ea:95:58:f4:03:ac:17:52:36:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Aug 23 00:00:07 2025 GMT
Not After : Aug 24 00:00:07 2025 GMT
Subject: CN=22e4d9e95e933b2ff6be5d3f97e985a6fe785203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:12:c8:9f:58:01:2b:4c:35:24:ef:79:87:
f4:25:c5:2e:ea:d4:e4:9a:af:46:f2:3b:46:26:25:
03:e6:1e:be:1c:54:62:35:42:65:96:84:3a:68:5d:
77:d6:51:f4:1a:a0:af:47:a1:04:04:99:7f:33:53:
99:be:06:7a:e9:29:8b:a8:e9:38:86:99:d7:ee:5a:
78:af:db:c5:ee:86:17:e9:62:2c:0e:9a:4a:42:cb:
1c:f4:80:99:dd:18:a7:05:c2:37:76:e0:3b:8d:81:
c8:c3:a1:4b:14:43:1a:e9:8d:e9:9c:6b:a7:a6:39:
89:2e:72:da:7a:58:3e:1e:80:94:d3:ed:5d:29:4b:
9e:2b:bb:24:6e:17:e8:cf:03:93:49:24:e3:8c:dd:
9b:3d:02:2b:fc:4e:7f:98:7e:46:ad:0b:5d:55:27:
15:d2:e3:2f:36:d4:e9:c7:56:2a:80:59:20:6e:d7:
99:27:04:31:56:c1:60:78:19:5d:08:07:9b:d2:00:
7d:b4:65:31:46:6e:04:77:b9:91:2f:df:6f:96:3e:
7a:34:61:09:3d:91:46:55:eb:5a:9f:95:1a:d1:85:
16:ef:9b:78:80:fd:ac:c0:27:88:3d:16:96:d9:fd:
db:69:2f:e7:7f:9e:e9:09:fb:56:86:53:ef:4d:79:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:D9:E9:5E:93:3B:2F:F6:BE:5D:3F:97:E9:85:A6:FE:78:52:03
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0e:47:85:ac:56:44:d8:ef:9d:83:7f:59:28:75:5c:1b:1c:
a5:87:ed:93:b6:66:29:78:17:f0:d8:af:ae:61:f8:76:f3:92:
5b:01:94:e2:71:48:39:d5:36:d0:1e:cc:16:45:59:ff:9e:90:
20:63:e5:8c:2e:4b:3e:a1:2e:ac:2b:87:0c:fe:ce:31:ca:69:
c7:ef:4a:e8:b0:1c:33:b6:5d:be:74:fd:f4:5e:b5:db:6a:ae:
7d:48:fb:4a:50:b7:08:de:47:34:b3:e3:45:c0:9a:21:8c:e2:
28:c9:d9:2c:11:75:d3:95:e4:9c:af:d7:bf:7e:5e:c7:dc:0b:
d3:44:4b:d2:f4:32:a5:b4:ff:0c:19:e3:ec:4e:d5:9a:61:e7:
9e:5f:d9:b3:e7:30:a1:4d:68:49:9b:c3:55:96:df:d2:63:03:
cf:f4:79:34:e1:73:a2:5d:b8:eb:e1:3f:7e:46:ed:7c:c2:1c:
7e:d6:5c:0a:ce:36:8f:d1:72:3b:60:fa:a8:a4:85:46:4d:21:
df:1d:71:e3:7d:dd:6f:06:25:f9:ae:46:5a:f7:07:05:40:6b:
65:48:60:69:5f:47:62:21:ee:b3:ce:bd:5e:63:fc:6c:28:34:
a3:32:2f:7c:6e:65:fe:41:a4:e0:03:63:a5:ba:69:f4:65:73:
95:28:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:48 2025 by rpki-client