Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: VYdSTRpNrU5RcCFFFtXJ87SrAfAgXhe+k5OXpfZ9RYM=
Subject key identifier: A0:F4:5D:82:DD:B4:CC:DA:9D:48:19:67:F9:5D:87:F4:BF:19:C3:08
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0199239FBB314A34FB8C3545CDEE29FF8977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0B27
Signing time: Sun 07 Sep 2025 10:01:34 +0000
Manifest this update: Sun 07 Sep 2025 10:01:34 +0000
Manifest next update: Mon 08 Sep 2025 10:01:34 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: wanKtT0RWG/SvkwZgAIPC7p7OJHGPRj9eFoWxJ6Z+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:bb:31:4a:34:fb:8c:35:45:cd:ee:29:ff:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Sep 7 10:01:34 2025 GMT
Not After : Sep 8 10:01:34 2025 GMT
Subject: CN=a0f45d82ddb4ccda9d481967f95d87f4bf19c308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:de:e6:c5:ef:68:31:38:5b:c8:39:4d:d1:
41:40:c6:d3:86:a7:ea:98:58:39:5b:48:b8:74:9e:
82:17:51:b3:b5:63:fc:fc:38:41:c5:d0:fe:79:e6:
32:24:9c:88:2a:6a:b3:38:e5:1c:87:f7:d2:b0:f7:
c1:ae:2f:59:71:cc:8d:f7:84:24:94:5b:71:51:eb:
22:41:3a:77:97:f7:35:be:44:0b:1f:fc:ed:f5:7e:
a3:1a:83:62:cd:09:99:2b:93:c9:4b:ab:46:c5:3a:
73:5b:86:e4:d7:e7:76:30:2a:3a:6b:eb:0b:61:34:
bf:ca:23:79:3e:ca:02:ee:c0:ee:3e:24:39:a8:89:
23:6b:5a:72:b5:58:8c:a2:01:c1:e5:c1:94:31:03:
53:bc:4a:95:aa:03:c1:a6:e1:26:d6:0e:28:9f:7f:
00:08:80:ee:89:5c:66:03:1e:d2:29:b7:84:bc:c3:
ea:f9:41:4f:5e:c8:1a:5d:b0:1b:8b:2c:a1:e1:02:
db:65:60:61:ba:e4:53:c9:f0:7d:a6:b5:95:09:a2:
f3:38:bc:35:4d:af:3c:e9:a9:44:33:88:de:16:84:
bf:9c:b9:f4:ef:35:12:6f:02:d4:48:0c:dd:57:49:
91:94:26:87:59:95:97:d3:2b:75:6e:84:93:e9:c0:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:5D:82:DD:B4:CC:DA:9D:48:19:67:F9:5D:87:F4:BF:19:C3:08
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2b:1d:3e:92:05:b6:2e:73:eb:44:78:be:22:8a:08:df:38:
f8:d2:b8:45:54:de:c1:f3:99:3d:c1:70:1b:67:5b:f7:37:9c:
26:91:10:97:24:5c:56:0e:46:8e:42:d2:70:d8:53:83:18:85:
b9:02:ab:f9:de:75:cf:7d:f5:4e:e5:6d:fc:fc:9b:ec:31:56:
42:8c:83:b0:8a:28:e9:e3:fd:f7:04:6d:c8:45:e3:52:fe:df:
4d:39:77:f8:b7:f9:ad:92:3d:1b:6d:da:ca:b5:ef:99:f8:f4:
1c:91:ee:32:62:07:be:30:b7:9f:32:1e:bd:49:d3:ec:66:28:
b5:c7:a9:0b:3d:00:69:eb:41:56:03:72:c6:e4:a1:ba:aa:ab:
8e:62:ae:23:c3:17:67:16:b1:08:79:63:be:85:fc:5f:ce:2a:
1e:92:4b:7a:a8:16:02:2a:a0:ac:3d:31:8d:e4:53:2d:c8:9a:
85:ec:c5:23:a7:97:d2:ad:0d:77:65:3e:cb:ba:3f:1e:af:59:
a1:05:85:05:f1:79:ce:ac:01:ac:2a:71:1c:73:50:62:1f:d3:
21:ae:ac:08:af:15:89:6a:66:29:21:13:9f:52:ba:6a:f4:19:
63:38:1b:43:27:49:2e:5c:6c:f6:e9:e1:3b:62:3a:ab:e2:46:
5f:89:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:58 2025 by rpki-client