Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: XvVQ580EApwPj1cyfN9qvByz4HlEN5E9KKbRZlR6ckA=
Subject key identifier: B8:95:39:F9:E5:FB:63:B7:CE:49:C1:37:D8:95:04:4A:76:77:15:BC
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 019A1505FD46981E3F09DD842704CD9643A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 05E3
Signing time: Fri 24 Oct 2025 07:01:45 +0000
Manifest this update: Fri 24 Oct 2025 07:01:45 +0000
Manifest next update: Sat 25 Oct 2025 07:01:45 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: t4jSfGnqIKbLsbQtEKd4ebByv1PgQhESHYsVwjMQpqo=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:fd:46:98:1e:3f:09:dd:84:27:04:cd:96:43:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Oct 24 07:01:45 2025 GMT
Not After : Oct 25 07:01:45 2025 GMT
Subject: CN=b89539f9e5fb63b7ce49c137d895044a767715bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:46:4c:a8:2c:fa:51:6e:e7:78:a2:60:90:
93:e9:ff:ae:5b:b0:b9:8e:e2:57:38:63:45:60:16:
19:b9:2b:79:4a:72:53:c5:e2:9c:9a:c8:97:32:c9:
97:b0:0a:a8:1a:5e:f4:9a:8b:21:2e:15:44:87:3a:
72:1f:9f:d3:56:0f:9e:e8:01:f3:6c:a7:cf:d3:a4:
ea:1b:8d:11:c3:ce:fd:fe:f0:d9:13:7a:d8:bb:e7:
35:4e:bf:62:e5:fe:9a:60:42:2f:6d:1a:d1:41:2e:
b2:62:19:59:3a:b3:f2:5b:22:e6:4f:24:6e:d7:eb:
09:9a:c5:92:3c:f1:4a:7f:e2:35:6f:55:31:ff:e1:
0f:fc:33:b2:d2:e3:5d:8c:49:d5:0b:2b:9e:03:a6:
b7:93:b9:21:45:19:e3:85:b4:7e:ec:bf:ae:c0:13:
37:03:29:8f:27:d4:b7:a4:40:7c:21:95:99:af:3f:
7b:2f:90:fd:e6:b2:1c:34:07:f8:b1:e9:2e:93:ac:
6d:90:81:25:a3:2e:8c:c7:47:b1:ab:fd:94:2b:2b:
64:fe:7e:e3:55:e2:5a:3f:33:be:4a:4d:8f:8a:32:
7c:82:7e:86:3b:20:1a:09:eb:a1:db:a8:da:c2:09:
d4:3d:b7:65:17:11:8c:6e:79:09:d9:16:56:6a:3a:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:39:F9:E5:FB:63:B7:CE:49:C1:37:D8:95:04:4A:76:77:15:BC
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:fc:38:0d:81:d1:bc:6e:37:d3:65:0d:6a:2d:49:2a:d0:
e5:ab:80:79:9e:3f:12:c2:6c:23:5a:10:96:2a:99:2c:c2:f7:
34:f6:7a:c6:30:d4:3b:3c:6d:11:02:80:bc:c2:f4:54:e9:69:
6c:e5:66:d4:ff:ac:13:d9:cc:5b:33:1b:9a:5e:15:7b:c3:33:
60:6f:90:d5:3c:df:5e:ff:02:a9:4c:f0:ec:c5:de:a3:75:7a:
16:1c:95:2b:71:a4:3a:e8:b5:b1:1f:c9:0a:cf:20:fb:fa:c1:
ad:23:08:e2:23:f3:1b:33:3f:6e:ad:ff:99:d1:3f:77:75:6d:
89:e6:51:62:65:e4:31:0a:03:f5:07:9b:31:91:71:e4:87:28:
0f:f4:12:b6:67:cd:ed:bc:44:75:d2:e9:29:ba:63:6f:47:0e:
c6:08:de:6c:a4:4a:40:f1:4e:85:20:8e:64:8c:c0:eb:e4:60:
90:86:0c:74:bb:ba:f5:fa:35:8b:10:d4:3d:a7:0d:cc:16:19:
d2:be:52:4b:df:e1:70:5c:3d:08:bc:86:d2:60:73:c1:23:29:
9c:c8:ff:d3:f2:e3:b1:ff:63:b2:39:6e:d6:0a:3d:d1:32:97:
12:7a:c3:7a:1c:14:2b:5f:3f:96:75:45:dc:4e:cf:5d:84:c7:
3b:89:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:51:08 2025 by rpki-client