Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: brVmjWeEyyUlaGezsguU2/gSA3dBdoMHT41xGzR1txc=
Subject key identifier: E9:48:04:7D:F3:B0:9B:46:DA:21:A4:D0:4C:21:97:B7:32:29:9C:CC
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0197635EBD4957FFC68CDC5BE289FC40A4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0A3F
Signing time: Thu 12 Jun 2025 09:00:42 +0000
Manifest this update: Thu 12 Jun 2025 09:00:42 +0000
Manifest next update: Fri 13 Jun 2025 09:00:42 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: RWRpaeAbKDOeh9EelzohoVPLJV0oIdZBqnd7txwel4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:bd:49:57:ff:c6:8c:dc:5b:e2:89:fc:40:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jun 12 09:00:42 2025 GMT
Not After : Jun 13 09:00:42 2025 GMT
Subject: CN=e948047df3b09b46da21a4d04c2197b732299ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:df:1b:05:5c:b5:04:b2:f5:81:31:ba:26:
fb:ac:31:b5:99:45:c1:35:f5:17:09:84:17:8a:c3:
7c:c9:68:c4:a7:a1:ae:8c:a9:4a:c6:95:24:06:4e:
dd:fb:a2:f5:29:e5:f5:2b:cf:ab:8b:1d:d2:00:69:
79:30:aa:ba:9a:fc:d8:d0:c2:64:5e:80:f4:62:a2:
1d:ac:f5:5a:b5:6d:1e:98:2f:5b:65:60:b5:12:a6:
35:bc:f1:df:22:4d:1c:d8:e1:cb:04:e0:ba:0c:da:
ef:20:9a:2a:e3:43:64:2a:4e:07:c5:e5:d4:0c:f7:
95:22:a4:58:30:1e:bf:ee:80:6c:b0:3c:a4:ac:1c:
83:df:7b:cd:9c:74:0b:6b:84:5a:19:99:b1:f6:53:
93:dc:c9:0b:74:7a:e8:b2:c3:12:2d:07:ed:47:c5:
a3:80:55:9e:2f:33:f1:5d:de:dd:16:43:bb:a7:2f:
fd:10:84:0e:44:a6:fa:e5:ca:82:ba:06:8f:7d:77:
a9:38:27:cf:14:07:a8:d5:39:96:7e:54:54:12:04:
a9:52:8e:cb:97:59:97:6c:9e:6d:4f:8d:4a:84:76:
30:54:56:86:e6:f2:11:14:c5:59:7e:5d:f1:00:dc:
6b:97:54:32:ef:22:3e:0a:bf:9c:1e:24:4d:93:f0:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:04:7D:F3:B0:9B:46:DA:21:A4:D0:4C:21:97:B7:32:29:9C:CC
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:13:01:68:e4:0c:60:ac:8f:49:ba:35:be:2e:17:f8:9a:
92:31:19:69:73:4e:cd:30:71:c0:ed:e8:87:59:b1:39:16:45:
74:e2:48:4c:ce:3e:ac:6d:69:4c:be:6e:fe:7b:6a:b4:61:b5:
58:40:43:c6:71:9c:53:5c:c3:c1:79:f0:b7:49:ca:1c:a3:36:
fc:2f:6e:f5:eb:a4:64:37:bd:d0:ad:f5:72:74:52:37:23:c7:
bf:e6:41:c4:e6:87:32:04:49:ef:3e:2a:6a:64:f3:81:7a:82:
55:3e:1c:ba:40:97:91:69:1a:67:be:f6:1d:b5:6e:a4:a1:fc:
bd:57:51:fa:95:97:de:4b:73:c6:31:1d:35:a2:f0:d2:f6:3e:
69:2d:d6:af:fd:51:38:c5:54:66:ac:6e:e7:3c:47:11:95:fd:
e4:a2:e9:95:59:d4:21:70:17:1c:d7:b9:d5:b7:ca:81:b1:1a:
c6:fd:2e:fd:cf:c2:73:16:82:40:76:40:05:4d:f7:93:91:61:
1c:d8:24:9e:29:6b:5a:73:97:64:34:4b:58:d8:eb:96:d7:c5:
b1:e7:6b:80:64:f0:ab:db:02:99:f6:32:bf:73:31:43:89:e9:
ee:f9:95:e7:78:58:23:50:f7:ca:b6:c1:cc:5f:30:1c:e5:ea:
ae:50:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:52:42 2025 by rpki-client