Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: xR3jlq2WkB43D6hII/YsbMJ+j6aacQZY4qfeKjkZXOw=
Subject key identifier: 5C:E0:0F:7E:36:9A:43:5F:44:8A:25:2D:3F:30:DF:42:EC:29:2A:A4
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0198451AA4F3653F3CA7641B5569EA52012D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 05BF
Signing time: Sat 26 Jul 2025 05:00:30 +0000
Manifest this update: Sat 26 Jul 2025 05:00:30 +0000
Manifest next update: Sun 27 Jul 2025 05:00:30 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: vm7zpER6CN/U5QnE3uCJ58+P8PrTJOm6r9Nt6NbVd2c=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:a4:f3:65:3f:3c:a7:64:1b:55:69:ea:52:01:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jul 26 05:00:30 2025 GMT
Not After : Jul 27 05:00:30 2025 GMT
Subject: CN=5ce00f7e369a435f448a252d3f30df42ec292aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:ee:fa:48:06:37:91:b1:a6:ae:7b:e1:b6:
cb:0f:03:82:41:6b:46:8f:5a:0a:5a:16:1a:52:9d:
91:76:6d:2c:32:79:f0:40:ab:2a:8a:e3:dd:46:19:
47:c8:54:12:42:d2:dd:ca:be:6c:3b:7c:de:3a:5d:
17:eb:cf:62:d4:58:21:1d:84:35:3c:66:56:7f:ac:
21:60:8d:6c:b6:d7:2b:15:52:e5:03:1d:a6:b8:d8:
c5:0e:45:ad:64:a4:6d:ee:21:5c:2d:35:64:ec:93:
29:9a:1f:56:af:9d:79:31:0e:09:4f:9f:10:7c:a9:
f9:13:14:14:17:97:f3:49:7e:26:da:41:7c:c1:42:
24:0a:c8:98:61:ca:e7:b7:24:2a:d5:72:3c:6d:75:
9a:95:72:9b:86:32:90:ca:3f:c9:46:d2:4f:74:6c:
19:63:56:1d:db:61:40:e9:9a:65:9f:20:f5:84:2f:
4f:a1:6c:fd:d2:3a:e4:8c:4a:ea:5b:f8:24:4e:bc:
1c:78:4f:70:22:78:20:90:7c:00:d2:64:d3:b2:bd:
8d:56:0b:e8:e3:c9:34:92:ae:44:d6:5f:2c:91:3d:
fc:9d:0f:1d:45:6a:6f:71:89:10:36:e9:b7:ea:df:
9b:73:8a:7f:a6:b8:c0:bc:1f:b9:de:ec:54:5f:62:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:0F:7E:36:9A:43:5F:44:8A:25:2D:3F:30:DF:42:EC:29:2A:A4
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:d1:a3:93:a4:ab:98:54:1e:79:d1:b8:d1:65:0f:61:9a:
e4:6b:d1:09:e7:ea:ee:47:68:f4:fd:6f:49:49:d2:c4:b8:03:
21:aa:77:0b:ce:10:5f:ea:4d:0b:04:27:ef:43:f1:3b:07:22:
22:93:30:57:43:54:66:e9:e9:ab:15:05:30:cc:f0:a6:6e:4b:
c4:a7:e4:7d:00:fc:63:a7:3b:e1:39:2f:ae:fc:70:29:c3:ff:
f7:47:fb:13:2e:29:e9:2f:da:85:30:28:3b:c7:b1:f3:09:ab:
e5:16:79:f1:a9:a7:8f:9e:65:5d:e4:d2:5a:d3:d1:02:55:33:
76:6b:9b:6e:31:23:d2:15:13:38:03:11:7e:ee:91:02:78:09:
00:35:18:74:0f:30:be:f3:a8:60:58:65:6d:dc:a7:9c:dc:f5:
d2:79:0c:cf:bc:12:de:9a:b5:68:ff:87:6b:5b:02:c1:8a:af:
fe:c1:70:9f:db:55:79:26:07:09:17:2f:1f:8e:2d:44:b1:49:
f0:05:5b:6a:2c:6a:59:40:47:33:46:d3:4d:36:64:20:1c:67:
55:f8:99:cc:34:76:25:ac:66:1c:8a:62:dc:37:ab:2d:b9:65:
b8:f1:0a:8c:a6:e0:e3:9b:ff:a2:a5:99:44:d5:aa:dd:6a:d3:
b1:81:2e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGqTzZT88p2QbVWnqUgEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj
ZmYzNDYwHhcNMjUwNzI2MDUwMDMwWhcNMjUwNzI3MDUwMDMwWjAzMTEwLwYDVQQD
Eyg1Y2UwMGY3ZTM2OWE0MzVmNDQ4YTI1MmQzZjMwZGY0MmVjMjkyYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUvu+kgGN5Gxpq574bbLDwOCQWtG
j1oKWhYaUp2Rdm0sMnnwQKsqiuPdRhlHyFQSQtLdyr5sO3zeOl0X689i1FghHYQ1
PGZWf6whYI1sttcrFVLlAx2muNjFDkWtZKRt7iFcLTVk7JMpmh9Wr515MQ4JT58Q
fKn5ExQUF5fzSX4m2kF8wUIkCsiYYcrntyQq1XI8bXWalXKbhjKQyj/JRtJPdGwZ
Y1Yd22FA6ZplnyD1hC9PoWz90jrkjErqW/gkTrwceE9wInggkHwA0mTTsr2NVgvo
48k0kq5E1l8skT38nQ8dRWpvcYkQNum36t+bc4p/prjAvB+53uxUX2KHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzgD342mkNfRIolLT8w30LsKSqkMB8GA1UdIwQY
MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt
OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3
LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQPRo5Ok
q5hUHnnRuNFlD2Ga5GvRCefq7kdo9P1vSUnSxLgDIap3C84QX+pNCwQn70PxOwci
IpMwV0NUZunpqxUFMMzwpm5LxKfkfQD8Y6c74TkvrvxwKcP/90f7Ey4p6S/ahTAo
O8ex8wmr5RZ58amnj55lXeTSWtPRAlUzdmubbjEj0hUTOAMRfu6RAngJADUYdA8w
vvOoYFhlbdynnNz10nkMz7wS3pq1aP+Ha1sCwYqv/sFwn9tVeSYHCRcvH44tRLFJ
8AVbaixqWUBHM0bTTTZkIBxnVfiZzDR2JaxmHIpi3DerLblluPEKjKbg45v/oqWZ
RNWq3WrTsYEuGw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:18:11 2025 by rpki-client