Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: PPjPiP3YyjrQVzH6BudOR+9ZKGivj1O/c/4mVh16sZE=
Subject key identifier: D9:8E:C8:E6:E5:E9:FD:C2:D7:F4:49:35:40:A0:05:5C:0B:AE:60:19
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 01976B185EEEB9F8E47C72AF75A522F2F54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0A43
Signing time: Fri 13 Jun 2025 21:00:48 +0000
Manifest this update: Fri 13 Jun 2025 21:00:48 +0000
Manifest next update: Sat 14 Jun 2025 21:00:48 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: AXdXVf7QXdnwwV90T5tHNHPC9efGQciiJd/sm9IAXZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:18:5e:ee:b9:f8:e4:7c:72:af:75:a5:22:f2:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jun 13 21:00:48 2025 GMT
Not After : Jun 14 21:00:48 2025 GMT
Subject: CN=d98ec8e6e5e9fdc2d7f4493540a0055c0bae6019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:ba:c3:d2:a7:fe:28:f0:30:9e:da:3d:2f:
3f:d7:19:1d:2d:25:c5:05:ff:7d:e0:01:9b:41:9f:
d3:66:fe:d0:74:23:ab:ac:5c:44:b1:81:16:d3:b8:
17:d1:8d:ef:26:44:cb:e5:18:1e:b4:bd:fc:55:04:
7f:ca:f2:2a:ed:9d:54:5d:01:e7:84:27:04:42:31:
a7:ed:2e:9c:13:23:6f:18:19:b5:1c:3f:75:42:d0:
02:01:4f:35:46:b7:a5:55:86:09:3b:2c:12:7e:20:
05:55:94:97:31:3b:ca:df:6d:2e:02:fd:21:66:ca:
a6:1c:f8:fc:85:a9:cc:c7:47:d2:f0:00:62:27:8a:
3c:04:43:29:d0:b9:a7:5c:bb:e3:25:ed:89:9f:04:
ad:ea:18:ed:58:55:3c:27:7e:8a:2f:ec:49:b1:3b:
5b:0d:c8:89:58:3b:ee:66:5e:11:12:b1:9d:75:45:
f7:87:c1:de:29:83:ea:ab:e3:e2:f0:4a:ef:d6:fa:
98:7a:f6:45:58:d4:58:e3:86:8e:b0:9b:58:63:58:
1c:95:3a:78:7b:cf:f2:ae:95:79:63:36:e3:f9:61:
83:20:55:25:91:5b:58:3e:00:88:08:82:a2:e9:ae:
69:62:ad:e4:7d:1c:f6:ec:93:41:f1:16:79:96:3e:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8E:C8:E6:E5:E9:FD:C2:D7:F4:49:35:40:A0:05:5C:0B:AE:60:19
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:58:ce:1d:8a:fc:62:c2:b0:c0:e8:ca:c2:10:49:1d:d1:
6b:bb:6a:ed:2a:92:5d:6c:7c:a5:94:80:86:3e:a5:96:12:91:
49:85:fc:a7:28:f9:99:f9:f6:70:78:6b:ea:3f:5d:f7:de:c5:
56:df:81:3c:13:bb:e1:eb:59:ee:02:26:09:be:7d:c7:d4:15:
62:5c:8a:eb:27:3a:41:32:ca:57:cc:48:e3:50:df:5f:ff:a2:
74:75:66:45:b5:3b:f9:77:f7:26:50:36:a1:ca:58:1a:bf:40:
ea:24:68:bc:e4:eb:06:5d:bc:44:74:40:62:65:d6:b1:82:1e:
fd:7a:2d:e9:74:ef:a8:eb:a3:62:a1:f9:8a:c0:65:4f:b0:f2:
36:77:41:4e:a1:6c:38:8d:56:91:bd:24:90:70:fb:58:82:39:
16:18:f8:ae:9d:7a:f2:dc:b9:38:b3:23:22:5e:91:64:95:f0:
eb:80:3c:1d:e0:46:69:5e:7e:5e:66:f8:72:36:e5:48:76:a3:
8d:23:1f:6e:e7:f9:f9:56:85:0b:88:bd:61:68:cf:79:40:0a:
3c:40:2d:f1:33:e8:9a:fb:20:e3:5a:14:d1:76:a6:69:9a:41:
72:74:1e:30:3d:ca:ae:31:16:45:3a:07:6e:8e:aa:12:74:28:
fa:26:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:49:30 2025 by rpki-client