Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: 15mSE0xnGrSCTb2OqUX6eztbvwEPiL45lgxiHKqGpko=
Subject key identifier: 8E:74:33:A6:68:43:EB:DD:AD:BC:32:0C:D6:5A:E6:8F:98:F2:CA:7D
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0197654D1BBF6991891EA6F8F550D105C3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0A40
Signing time: Thu 12 Jun 2025 18:00:41 +0000
Manifest this update: Thu 12 Jun 2025 18:00:41 +0000
Manifest next update: Fri 13 Jun 2025 18:00:41 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: nZY3nw6J+b5IATRvN0Ex5ClkzVDQOwHD99UcLnicjmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4d:1b:bf:69:91:89:1e:a6:f8:f5:50:d1:05:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jun 12 18:00:41 2025 GMT
Not After : Jun 13 18:00:41 2025 GMT
Subject: CN=8e7433a66843ebddadbc320cd65ae68f98f2ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f2:56:2b:95:b8:3a:c1:e3:6f:58:c4:ab:79:
a4:28:55:a4:b3:50:9c:e5:e3:88:54:1a:e9:f1:fe:
98:34:d7:7c:ed:0c:c8:04:60:df:50:be:e7:e2:51:
97:42:67:9a:ca:22:ed:1d:4f:92:a5:03:3f:cb:ee:
59:bd:4c:fd:b4:9d:1f:09:6e:79:b6:86:9d:c6:4f:
17:dd:fb:34:16:2f:3c:17:4f:4e:91:ad:46:47:96:
24:cd:78:a1:71:8b:7e:65:30:b8:00:dd:6b:81:02:
46:84:b3:df:07:58:82:2b:ac:22:9a:84:c6:4d:b2:
3f:f2:4d:c1:27:3b:f7:50:45:02:9f:05:24:4e:7f:
bd:cf:69:b9:d8:16:0a:cd:72:76:f3:39:5b:d9:29:
15:26:24:ac:31:69:76:bd:6d:3b:27:4c:99:db:98:
32:17:c7:38:a7:16:43:fa:fa:0d:b7:1e:40:f7:dd:
2c:41:a6:70:d9:20:c9:cd:75:7f:6d:2a:88:fc:8f:
b7:ce:f4:06:4e:f9:a3:70:19:84:32:ae:63:2c:79:
8a:e3:b7:17:07:f1:44:89:c5:5b:3e:3f:bd:d6:f2:
d2:8a:3b:92:c1:07:22:de:06:7a:29:3f:11:7e:b4:
27:12:ec:70:19:b9:66:1d:a3:56:57:92:92:aa:df:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:33:A6:68:43:EB:DD:AD:BC:32:0C:D6:5A:E6:8F:98:F2:CA:7D
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8a:70:bf:d3:2b:d6:bf:8c:fc:bb:9b:65:ca:22:b0:0c:4f:
ae:8d:d8:59:44:08:72:1f:01:38:37:9d:1a:93:7d:08:ba:af:
6d:aa:4c:bd:b6:65:d4:56:aa:90:24:7b:31:6c:f2:b2:73:a3:
23:0b:d6:32:af:79:ac:ca:7d:a4:b9:80:0d:46:d0:4d:93:fe:
94:7a:84:dd:15:84:b1:d6:39:a7:6f:a2:3d:69:1a:2b:63:dd:
c8:a8:98:25:3a:6c:a9:12:3c:b5:4e:1e:b4:19:d0:30:20:94:
f5:dd:1e:24:ac:98:6f:4f:80:99:18:9c:06:02:e1:a0:81:c8:
98:0a:de:58:4a:55:41:a8:14:56:4a:96:58:13:18:a9:b0:69:
7b:13:7f:60:04:e3:d5:6c:bb:66:8c:c5:3e:77:d1:47:b2:15:
9e:5c:67:3f:20:fd:97:29:db:91:7f:59:dc:1c:dc:1a:37:9f:
c5:0d:15:39:f4:9f:80:48:4b:6a:87:d1:2f:92:81:90:3f:7c:
69:87:d2:75:c3:56:e9:60:55:80:02:53:e4:42:50:d5:25:f3:
a0:8e:0e:cf:2c:5c:73:9b:0b:b5:f1:e0:12:ee:df:33:64:c0:
a7:e8:d8:6f:1e:ad:a2:c9:22:71:fa:6d:3c:ac:f8:9d:52:a3:
0a:89:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:54:48 2025 by rpki-client