Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: R7p1Xjl7CcI1nTXtStkulP4N2vcGAd5HPx2QdPj4IRI=
Subject key identifier: 23:E3:9B:B8:8D:D1:41:FE:57:F4:16:99:24:EB:81:63:57:D0:04:7F
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 019A71B8A4BAB07208C3EB3C17CBCD30B18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0BD4
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: lKNW7+qTrAGhzgF3qTvJ2a7KgQEv3yapuyQNYpipp40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a4:ba:b0:72:08:c3:eb:3c:17:cb:cd:30:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=23e39bb88dd141fe57f4169924eb816357d0047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:ec:5a:23:42:84:b7:24:ad:97:f2:2d:4d:
37:d4:fb:ff:6a:a4:3b:26:89:52:05:00:60:00:b0:
0d:b8:f1:1c:34:2b:17:74:96:68:c1:62:b9:e7:60:
06:e0:64:08:f0:0e:e3:11:e0:5c:18:db:e0:6f:de:
e4:62:f8:6f:a8:7b:5c:c0:13:ee:3f:ef:44:3f:05:
7b:24:db:66:21:b1:c3:bd:25:3c:da:e5:63:0e:ce:
cc:d4:8e:e4:43:0a:ee:d3:02:0b:7f:4d:fe:8e:56:
e9:6d:72:3e:41:df:2f:d8:de:87:be:4b:46:6b:ba:
29:cd:4a:71:af:a9:8a:88:3d:ad:3e:08:6b:18:39:
41:35:4a:21:48:c1:2f:8a:cf:8c:ec:c1:d4:eb:eb:
37:3c:ab:14:61:d1:97:77:a0:87:96:7c:24:50:b9:
7c:f7:cf:b0:66:c2:e1:e0:01:46:77:7e:5c:de:58:
59:a0:36:ba:29:e8:16:0f:97:76:ae:3c:f9:2c:d0:
fd:88:0c:7f:48:78:fb:d9:d6:53:33:23:6f:aa:46:
38:eb:1e:65:30:01:f1:30:f3:ce:87:4b:e2:fc:15:
f1:58:13:bc:42:12:e7:89:37:bd:18:e3:1d:3a:ff:
86:48:71:31:16:56:b8:c8:1a:1e:10:98:79:05:ab:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:9B:B8:8D:D1:41:FE:57:F4:16:99:24:EB:81:63:57:D0:04:7F
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:69:c6:66:0e:63:ef:6e:ff:44:22:68:24:b2:0e:f3:a0:69:
53:db:ad:b3:c9:b3:fc:7f:71:04:7c:cb:a7:0e:33:65:35:60:
ae:70:85:65:5e:80:7c:97:59:1c:96:e6:d2:d6:e0:65:70:3e:
9e:09:88:de:78:8c:70:dd:b3:b6:6c:2d:3e:a5:02:51:5e:ff:
d1:3b:08:3c:cd:88:f7:1d:d6:13:9f:59:2a:fd:5e:5f:cb:7e:
b2:c3:f8:dd:27:dc:fa:30:0b:b0:3f:2f:b2:18:77:82:1c:9d:
6f:16:c8:c2:58:84:99:18:94:05:aa:7f:a6:12:b2:c4:2f:83:
31:29:80:a8:1e:78:c8:33:a5:25:b0:c1:74:49:93:53:e3:74:
a7:54:96:43:b6:9d:c5:9c:58:a7:2b:88:d0:32:dd:cb:ac:2f:
8a:e7:d2:e2:84:ad:fe:30:fc:0c:b2:ab:b6:10:07:35:75:a9:
d2:54:0a:a5:96:9c:67:6f:0b:d3:05:01:ef:ad:1e:26:5d:d5:
ff:d9:58:e2:e9:dc:9d:04:bb:1c:65:15:56:f0:8b:91:66:8e:
d1:91:8d:09:a2:c1:dc:61:ab:7a:dd:1c:54:0f:1d:6d:86:86:
92:cd:b4:c9:fc:78:05:b7:a4:85:1d:76:2e:5b:5e:83:97:1f:
29:9e:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:59 2025 by rpki-client