Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: KkFlGW5drRgDaS6P6GO7WMFkb44Wh708Ce2cqzY4H4k=
Subject key identifier: 65:9D:89:4C:6A:12:65:80:41:87:3E:01:FE:F4:85:31:49:87:D9:4B
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 01983804AC9F5E1136B28DBAB7E8B7E96A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 04EC
Signing time: Wed 23 Jul 2025 16:01:27 +0000
Manifest this update: Wed 23 Jul 2025 16:01:27 +0000
Manifest next update: Thu 24 Jul 2025 16:01:27 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: miomzkz7Ih6DBPKk03G1y84+bdFya5ngpZ/SQuXNb7E=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:ac:9f:5e:11:36:b2:8d:ba:b7:e8:b7:e9:6a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Jul 23 16:01:27 2025 GMT
Not After : Jul 24 16:01:27 2025 GMT
Subject: CN=659d894c6a12658041873e01fef485314987d94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:82:bb:1c:79:df:7e:3f:08:a0:db:df:75:
d0:f6:2e:e5:1f:16:6a:10:61:85:1b:c7:0a:ca:81:
11:7a:25:bd:e0:7d:36:7c:c1:a4:08:d6:12:7c:34:
eb:65:09:41:53:34:c1:53:d0:bb:c5:97:9d:04:ea:
a4:d0:e9:dd:b9:f8:41:a8:2f:0c:e0:7b:26:72:08:
85:49:84:01:e4:e8:80:a9:3f:42:91:9c:23:31:b6:
87:97:33:3d:6c:da:22:8d:e6:90:1e:a7:c6:33:98:
ac:3f:df:01:cd:a0:52:13:d4:89:10:cc:18:67:25:
8f:b2:50:90:2d:dd:9e:cb:a0:85:54:24:30:4b:64:
c1:1c:e8:d5:d1:b0:a1:0b:c2:4d:3a:a6:f7:e0:76:
b8:2b:1e:0f:e3:48:05:e8:a3:11:bd:1d:cf:cf:5c:
ee:3e:4c:e0:4c:bd:3c:43:aa:db:58:7d:92:27:e1:
df:de:80:e8:86:b1:53:9e:55:1c:4f:64:06:58:1a:
3d:15:91:89:d6:c9:12:1e:f6:d2:f0:02:21:03:17:
8b:a1:ad:12:85:b9:63:67:81:fd:24:6a:86:03:3f:
ff:af:d2:4f:4b:f8:46:89:e9:ea:df:41:7e:50:0e:
8c:66:9d:05:52:ee:c2:ec:63:6a:f0:79:ad:03:5d:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:89:4C:6A:12:65:80:41:87:3E:01:FE:F4:85:31:49:87:D9:4B
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:16:71:e5:09:9f:81:f4:ab:d7:ae:01:c2:b1:32:2c:85:82:
8c:35:a8:b7:8b:21:87:4a:6b:ea:6c:1f:90:6c:28:7f:6a:36:
4a:c4:d7:55:ce:fb:46:c0:f3:e6:68:e3:ae:b7:a0:ce:52:34:
66:fb:c5:a2:8f:52:a6:f0:b1:e8:ec:72:07:62:59:34:49:d0:
a9:2b:1a:a9:95:88:f6:57:e9:81:3e:a0:3d:c2:05:37:21:87:
5c:86:51:76:44:e0:62:40:f0:10:ff:6b:a9:17:d6:76:b2:19:
13:7a:24:4d:cc:88:a4:01:1b:ff:2f:1e:f8:0a:34:47:f9:88:
93:6e:5a:83:04:f3:c8:8e:a7:7d:0f:16:05:6e:69:c0:a6:03:
56:e2:13:c5:e2:01:d5:5f:87:c6:5c:75:ba:66:4d:ba:3f:32:
cc:8f:f0:46:c3:fc:f9:d0:bb:f5:ff:53:96:0b:fd:e0:c9:ee:
b9:09:c5:55:18:ae:65:ed:07:ff:03:51:00:d4:68:53:a7:e0:
20:5f:98:f7:5a:0f:e5:ef:bb:37:5e:d5:4f:5b:52:96:ca:ef:
1a:1a:e0:a8:fd:86:3d:ab:75:2d:67:6b:b8:e6:5f:46:bd:ec:
33:4e:79:37:6b:95:d3:88:de:b3:ba:14:fd:10:c8:16:a4:15:
b3:10:9f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BKyfXhE2so26t+i36WoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm
OTJjNDUwHhcNMjUwNzIzMTYwMTI3WhcNMjUwNzI0MTYwMTI3WjAzMTEwLwYDVQQD
Eyg2NTlkODk0YzZhMTI2NTgwNDE4NzNlMDFmZWY0ODUzMTQ5ODdkOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKGCuxx5334/CKDb33XQ9i7lHxZq
EGGFG8cKyoEReiW94H02fMGkCNYSfDTrZQlBUzTBU9C7xZedBOqk0OndufhBqC8M
4HsmcgiFSYQB5OiAqT9CkZwjMbaHlzM9bNoijeaQHqfGM5isP98BzaBSE9SJEMwY
ZyWPslCQLd2ey6CFVCQwS2TBHOjV0bChC8JNOqb34Ha4Kx4P40gF6KMRvR3Pz1zu
PkzgTL08Q6rbWH2SJ+Hf3oDohrFTnlUcT2QGWBo9FZGJ1skSHvbS8AIhAxeLoa0S
hbljZ4H9JGqGAz//r9JPS/hGienq30F+UA6MZp0FUu7C7GNq8HmtA10kRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWdiUxqEmWAQYc+Af70hTFJh9lLMB8GA1UdIwQY
MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt
MWM4MjI1ZDQwN2I1LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1
LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShZx5Qmf
gfSr164BwrEyLIWCjDWot4shh0pr6mwfkGwof2o2SsTXVc77RsDz5mjjrregzlI0
ZvvFoo9SpvCx6OxyB2JZNEnQqSsaqZWI9lfpgT6gPcIFNyGHXIZRdkTgYkDwEP9r
qRfWdrIZE3okTcyIpAEb/y8e+Ao0R/mIk25agwTzyI6nfQ8WBW5pwKYDVuITxeIB
1V+Hxlx1umZNuj8yzI/wRsP8+dC79f9Tlgv94MnuuQnFVRiuZe0H/wNRANRoU6fg
IF+Y91oP5e+7N17VT1tSlsrvGhrgqP2GPat1LWdruOZfRr3sM055N2uV04jes7oU
/RDIFqQVsxCfhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:43:37 2025 by rpki-client