Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: RhW5zEUV9w8tRrgAMXJO2mL4NLS3j/ejDpkTB044geg=
Subject key identifier: B3:52:15:EA:F3:7E:10:9D:83:88:85:2D:DB:4F:25:F9:BF:15:6F:C7
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 01992EC75CA56B0848E0C676759166497C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0638
Signing time: Tue 09 Sep 2025 14:00:41 +0000
Manifest this update: Tue 09 Sep 2025 14:00:41 +0000
Manifest next update: Wed 10 Sep 2025 14:00:41 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: ebVrjrSwduMKYEgnrLt7YYcpxkp5ORDvKgvFUGod9KU=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:5c:a5:6b:08:48:e0:c6:76:75:91:66:49:7c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Sep 9 14:00:41 2025 GMT
Not After : Sep 10 14:00:41 2025 GMT
Subject: CN=b35215eaf37e109d8388852ddb4f25f9bf156fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:96:42:5a:e0:66:1a:16:4f:1c:20:ef:94:
3f:7b:6e:42:66:9f:93:8b:59:f1:17:02:94:a5:8f:
92:e7:c9:ee:a1:a7:29:58:13:6e:2c:42:bc:d1:60:
3d:57:58:6f:f9:f5:24:e4:f3:a3:5a:70:9f:e7:77:
2d:fd:57:08:1d:a9:6c:c0:21:1c:4c:ef:34:cc:d6:
b3:79:79:00:79:ba:75:04:ae:65:ca:a2:cf:cd:7b:
90:33:ac:7c:d5:41:24:59:16:61:d7:8f:19:4c:41:
ab:45:14:17:85:75:4f:39:7e:da:0e:b4:2e:08:f5:
d9:65:88:b2:4f:04:86:c7:5d:19:cb:96:1a:46:21:
fc:b2:6b:2b:0a:cd:e7:25:b6:60:77:62:12:59:71:
d4:81:01:df:d1:1c:67:5d:a2:23:41:3b:fd:1b:12:
87:43:5a:15:06:63:22:bc:35:b7:92:88:9a:c7:3f:
3a:21:c7:3b:86:ca:70:c4:f3:33:32:61:8b:29:6d:
e6:19:59:bb:5b:0b:92:06:e2:99:9f:2f:25:07:d7:
4a:a1:66:dc:84:7d:08:b9:c5:90:94:65:db:5b:21:
55:50:15:ed:58:86:b7:38:c2:6b:f2:57:c8:26:b8:
f4:e8:e4:50:13:2e:f7:55:80:2a:ce:f3:4c:61:68:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:15:EA:F3:7E:10:9D:83:88:85:2D:DB:4F:25:F9:BF:15:6F:C7
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f0:be:7f:57:2d:5a:03:6e:f5:a5:91:f9:9d:dc:48:5e:f0:
45:a2:52:a1:e1:91:fa:8d:31:bb:1d:e8:b2:8b:83:4b:ea:cd:
7d:ca:a3:00:a2:b2:69:db:85:1a:7c:b3:fc:d5:36:83:c4:48:
62:a4:29:f3:db:9d:b1:bd:7c:03:df:16:7e:16:ce:10:b6:a1:
b7:c5:14:70:37:6a:1a:09:75:78:fe:8e:e0:6a:41:a2:aa:cb:
a8:8a:ca:14:ac:bc:93:25:47:cf:7c:f3:f1:6b:6d:30:52:c5:
62:9a:ca:33:27:b3:ce:54:17:b9:f9:f0:87:fa:be:40:e2:e3:
27:44:95:10:4e:5e:c4:ef:4b:db:66:ed:32:b3:9b:82:74:d6:
9f:41:38:4f:bf:d1:af:aa:50:81:75:80:d2:d0:0f:4f:41:49:
d3:91:3a:fe:66:02:ba:f7:86:0e:a8:92:be:21:0c:c7:ad:12:
7c:bc:d2:e3:53:ce:8e:fa:d6:9c:f5:61:b2:9a:01:9b:2e:70:
53:75:cd:51:2f:ce:05:a5:9b:1d:50:2f:e8:7c:49:4b:2e:08:
a8:20:1b:10:11:ca:57:3e:f5:ce:f0:b7:19:48:58:c3:68:07:
d4:05:21:c4:5b:30:b9:cd:41:57:ce:60:13:bf:b0:09:d5:e4:
37:1e:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:55:39 2025 by rpki-client