Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: 4PE0xKJ+WmHRjhmmGeY28uL/JMjDhuXgbLfFeptIXlc=
Subject key identifier: DB:AF:E9:DB:E9:AA:06:D8:EE:A5:3B:3F:B9:DF:0F:00:43:6A:FE:8F
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019922FAA0A63A82E2BA11A6B3EDFE6FBB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 12E4
Signing time: Sun 07 Sep 2025 07:01:14 +0000
Manifest this update: Sun 07 Sep 2025 07:01:14 +0000
Manifest next update: Mon 08 Sep 2025 07:01:14 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: WbvJ4l12Ko8r/4D86+IrOF2D1t8Nwb88ijrmnzElFn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a0:a6:3a:82:e2:ba:11:a6:b3:ed:fe:6f:bb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Sep 7 07:01:14 2025 GMT
Not After : Sep 8 07:01:14 2025 GMT
Subject: CN=dbafe9dbe9aa06d8eea53b3fb9df0f00436afe8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:f4:15:6b:0e:2a:99:0f:18:21:c4:9d:07:
ec:f2:fe:8c:eb:9e:78:27:78:41:61:f3:b4:30:73:
bb:ad:14:0b:d8:03:ec:24:f1:ba:88:6b:3b:b8:9d:
ab:2c:2d:a5:d4:bf:02:6a:56:ff:cf:ea:e0:c9:55:
db:d4:4b:05:6c:22:c0:f9:bc:f6:83:dd:6c:d5:95:
b8:a1:ef:b0:00:22:87:36:db:18:fa:b8:2e:50:27:
88:da:bb:41:5b:56:ea:e5:62:e2:8d:2b:da:a2:8e:
af:d5:1c:ff:43:9f:ab:6f:8b:81:22:a6:d3:f5:9c:
f0:1b:e0:1c:eb:32:e2:da:0d:d8:75:28:57:fe:39:
19:81:c3:ab:a3:dd:1b:d7:f4:44:d1:dd:73:fa:70:
16:18:e4:05:27:f0:de:cc:55:41:ce:ff:7a:59:1f:
a7:97:bf:41:a9:8d:1b:b8:e1:ce:92:1e:ab:85:1f:
1c:d5:43:a0:06:e0:e2:7b:75:ea:d0:e7:07:19:19:
26:8a:ae:c7:c0:ea:fd:fe:78:ce:8d:50:79:eb:52:
bf:86:4f:96:79:8e:72:ff:00:67:b7:7d:8d:7c:89:
cc:2f:ea:04:3c:8b:67:93:b2:11:ea:89:49:c8:c9:
e4:d8:df:81:66:83:ee:95:22:85:f2:57:23:90:56:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:E9:DB:E9:AA:06:D8:EE:A5:3B:3F:B9:DF:0F:00:43:6A:FE:8F
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:a7:0f:0a:1f:33:5c:5e:8d:0d:dc:80:31:cd:b0:33:33:
e2:64:6c:23:85:4a:9b:87:d3:8e:5f:8c:66:40:54:b0:ae:71:
ac:01:2d:63:5c:fa:86:07:79:a6:34:36:80:0e:83:db:43:4d:
71:89:a1:39:45:40:35:99:24:c8:69:e1:6a:97:bb:47:b1:c6:
61:d3:f4:07:5a:14:61:eb:cc:47:41:d8:c0:87:40:c7:8b:5d:
24:48:2c:18:53:62:c7:75:11:71:63:ae:96:35:27:bd:32:6e:
ee:90:6d:75:f4:17:b7:9f:a0:7c:07:49:20:10:60:73:46:26:
41:b7:cf:54:6b:7f:46:f1:33:87:86:eb:cf:d9:18:61:b9:36:
c4:f7:7d:d2:20:09:70:c8:58:67:53:5b:5f:22:ae:41:34:01:
23:5d:c3:5f:5f:2d:59:1f:1a:f7:56:c3:5d:82:d5:bb:bf:3a:
d6:57:20:26:cc:27:58:17:30:eb:b7:b7:59:f8:ef:db:bc:18:
7e:6e:a6:6e:8b:0e:fd:26:27:66:b5:2f:54:8b:55:c8:46:d5:
df:a6:e4:c1:c0:dd:71:13:6e:35:69:13:2e:ba:0d:95:9f:5d:
31:82:84:18:8a:d7:02:e1:71:b2:31:30:58:12:16:1b:5f:04:
68:0d:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:12 2025 by rpki-client