Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
File: gmvh-3GvSNazGFEKqL35qBXzPbg.mft (raw, json)
Hash identifier: x/9fxKakHCHdGuw56Vznw5IgToeVMmHvL4lTUuneMeI=
Subject key identifier: 8E:35:8D:AA:75:6B:39:8D:69:B1:03:D6:83:B9:A3:A3:89:AD:CB:70
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 019A7293627EBC18689A369B746021DE13A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
Manifest number: 0E01
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: ItDOSAPXP7fGwIUCyAUKyyhkB4Q.roa (hash: OWstEJSZcgCk402ChRTJkXohNTIeEApse64rKCImRuM=)
2: ckwFjtT2deecTIv0EBJffOzlHQ8.roa (hash: AfxLwGByDY21vrcsdo3k0yXW342fPqqOEbjPkEKPwyg=)
3: gmvh-3GvSNazGFEKqL35qBXzPbg.crl (hash: gEsj12SLpSZCA56dTF2cqkKFQ/Z0Z0C8I62i4MEHcSM=)
4: hSlAxKZnavSBFWLhMLPVbCueXS4.roa (hash: VFJXjLPeI3ZR1WorzKTvxcecT73zNWbWt4fU0UCHVzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:62:7e:bc:18:68:9a:36:9b:74:60:21:de:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=8e358daa756b398d69b103d683b9a3a389adcb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:5b:2e:67:6b:9e:34:81:38:14:76:19:95:
be:3f:fa:fa:3e:1c:88:60:2f:35:62:03:65:c7:17:
0a:fc:42:78:dc:d8:c6:e9:d5:eb:8f:db:62:06:7b:
50:0b:43:ff:99:53:a3:5b:30:71:f1:52:b9:92:77:
75:04:23:10:f3:b4:d7:1d:1a:29:c1:6c:fc:2d:cb:
48:8d:9d:25:9c:c9:5c:7a:5d:43:a0:42:05:dc:29:
2b:68:c5:55:7a:9e:62:24:94:f7:9c:fd:78:f1:b1:
c9:af:1d:ed:1a:0b:79:9d:cb:26:fb:5e:82:ce:02:
49:77:40:c5:c7:ba:02:40:ed:c8:ad:13:25:1a:e3:
33:8f:06:39:42:3a:f1:68:23:89:51:df:1b:54:0a:
ff:e8:1f:0a:a6:59:25:96:ee:56:28:68:bd:a3:74:
c0:9f:c5:b4:2e:7c:32:10:01:0e:87:b6:4b:5f:57:
9e:6b:5f:50:32:60:fb:11:3e:64:a2:73:55:c8:4d:
79:55:d5:18:5c:79:82:d8:11:1e:2c:91:c3:38:52:
44:3f:0f:fa:3a:e3:77:1c:19:b7:3d:f6:b8:46:a0:
b9:e6:2a:96:b3:b7:92:70:bc:1e:39:de:2e:58:d7:
8a:a7:e4:d1:e8:ad:56:df:73:0b:c3:14:e7:ab:ce:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:8D:AA:75:6B:39:8D:69:B1:03:D6:83:B9:A3:A3:89:AD:CB:70
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3d:e4:ec:74:57:52:32:97:83:7d:a8:a7:5b:7a:86:b7:98:
65:15:61:07:55:43:e4:9e:02:05:1f:2e:8e:0a:21:9d:51:c6:
33:04:3f:d8:de:5b:d6:fc:a9:bd:b8:f1:c3:49:a5:55:14:34:
3f:8d:7d:cf:6e:1c:a0:a8:43:f1:db:18:2f:b1:12:b4:db:f3:
cb:88:f3:5b:d8:2d:d2:b9:01:a9:cb:32:3a:41:62:db:e2:9c:
d9:93:f5:d9:b9:3e:75:21:b7:79:bd:c7:1a:9c:56:de:d1:bb:
00:cd:13:e5:6f:5f:a4:d5:6a:f7:58:8a:bd:57:42:98:25:88:
c5:cb:4e:56:30:69:ac:9b:6c:91:12:6f:30:96:bc:68:e7:30:
50:d4:74:3d:4e:84:00:3d:17:3b:ce:6c:df:eb:36:32:18:43:
43:b1:a0:d7:ce:d8:44:8f:16:18:31:4b:11:22:c8:7a:d2:cd:
e5:b7:0b:e6:e0:5b:82:e2:51:63:92:b3:1d:b7:ee:01:4e:38:
99:dd:41:16:97:99:77:af:6e:17:7a:93:0f:a5:04:c3:23:c1:
bd:e1:e0:0e:8c:df:66:d1:f9:68:b1:dc:8d:b2:9d:c4:8c:88:
c5:32:44:78:f3:f0:6e:15:7d:52:97:4d:fa:dc:05:68:b7:dc:
38:08:08:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:47 2025 by rpki-client