Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: VpimEtFjzmR1AUr00cugmtrbpC/eoiITDOWe2jYbIEM=
Subject key identifier: 5F:22:13:36:A1:98:86:28:BA:A6:01:26:79:71:C7:EF:9E:55:DE:1A
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019A1873928250299D0C59A94CD04061AB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 06B1
Signing time: Fri 24 Oct 2025 23:00:18 +0000
Manifest this update: Fri 24 Oct 2025 23:00:18 +0000
Manifest next update: Sat 25 Oct 2025 23:00:18 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: pfvuxn+EqXERuinf3tGnUZfjLZHOM9u6xk/InrTx0qA=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:92:82:50:29:9d:0c:59:a9:4c:d0:40:61:ab:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Oct 24 23:00:18 2025 GMT
Not After : Oct 25 23:00:18 2025 GMT
Subject: CN=5f221336a1988628baa601267971c7ef9e55de1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:c2:0c:32:b5:39:2c:d0:6b:a6:c5:29:bc:
85:95:07:a2:fc:5f:ba:11:d3:89:24:b8:88:e0:63:
1d:38:b0:33:91:68:04:26:48:73:09:0d:ad:72:f4:
37:a5:de:97:ef:82:2c:88:d4:eb:dd:e8:06:8d:96:
ce:79:9a:94:43:12:ff:e5:2d:8e:73:4e:92:39:3f:
31:2d:67:26:85:0f:fc:25:12:bb:1d:fb:2c:4a:39:
ac:a0:d5:d8:16:ff:d4:ed:a6:dd:d8:97:47:24:cd:
da:9b:d7:f1:6e:d2:b5:c3:75:2e:1c:e6:fe:e1:77:
16:68:bd:1d:80:f3:77:28:0e:f6:3f:66:4a:e2:50:
56:43:be:e8:03:26:80:47:b2:53:29:c3:9e:46:e4:
f3:a0:df:2b:24:b3:cc:d9:a4:6c:78:50:e5:1c:8e:
ce:dd:44:20:1c:05:20:f9:c9:2f:1c:7c:bd:dd:d5:
f8:fc:46:85:ea:b0:0c:cc:c9:96:d3:e3:b4:f0:35:
b8:cb:e7:ea:60:fa:a2:6a:79:4c:2d:7c:65:26:93:
bf:9f:b1:af:8c:36:29:04:39:f1:97:3c:ac:76:40:
ed:3a:7d:39:3b:f0:ea:c5:57:c2:d5:61:6c:1d:59:
7d:13:7d:9b:1a:0f:ba:c9:78:36:7f:0b:cd:cc:d5:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:13:36:A1:98:86:28:BA:A6:01:26:79:71:C7:EF:9E:55:DE:1A
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a1:ac:4a:cc:d6:b7:0a:82:8c:5a:b3:03:0f:08:70:08:2a:
7c:73:db:d6:a3:2f:e5:57:e4:d5:73:14:e2:04:10:67:4a:04:
63:f9:2e:fc:04:c8:c2:1b:24:de:76:63:41:d2:9b:ef:bc:ed:
b2:2c:99:8c:ba:14:46:7e:b0:8a:bc:e7:2c:6f:c8:49:4b:5d:
84:15:c8:31:cb:4d:ce:2c:bd:57:64:41:a5:7f:87:18:42:04:
8a:4e:f1:58:73:97:36:c9:5f:1b:2e:9a:98:5a:93:20:f9:0f:
cc:02:f0:7d:c7:b3:90:80:af:0c:0f:53:0a:cb:87:e7:a5:85:
f8:dd:55:17:4a:34:6e:9f:33:96:4c:3a:da:62:22:09:c7:fe:
ae:b2:d4:ab:8f:b5:f9:b3:0f:16:bd:f5:8b:a9:52:eb:d9:ff:
ec:c6:aa:d3:88:c5:44:a3:55:79:23:35:a9:61:69:2b:25:79:
10:dd:6e:70:55:e1:98:cc:ed:80:93:af:81:f6:ae:35:a7:4a:
82:46:01:55:3f:62:ef:6d:61:a6:c5:2d:e6:9a:bf:3d:bd:7a:
20:ce:c0:4e:26:1f:21:e2:a8:d2:9d:d6:61:cb:03:64:31:de:
25:b4:51:b7:c2:a7:21:3e:b2:83:26:74:2c:b9:16:1a:d3:32:
50:6a:fc:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoYc5KCUCmdDFmpTNBAYatDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj
ZmYzNDYwHhcNMjUxMDI0MjMwMDE4WhcNMjUxMDI1MjMwMDE4WjAzMTEwLwYDVQQD
Eyg1ZjIyMTMzNmExOTg4NjI4YmFhNjAxMjY3OTcxYzdlZjllNTVkZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N3CDDK1OSzQa6bFKbyFlQei/F+6
EdOJJLiI4GMdOLAzkWgEJkhzCQ2tcvQ3pd6X74IsiNTr3egGjZbOeZqUQxL/5S2O
c06SOT8xLWcmhQ/8JRK7HfssSjmsoNXYFv/U7abd2JdHJM3am9fxbtK1w3UuHOb+
4XcWaL0dgPN3KA72P2ZK4lBWQ77oAyaAR7JTKcOeRuTzoN8rJLPM2aRseFDlHI7O
3UQgHAUg+ckvHHy93dX4/EaF6rAMzMmW0+O08DW4y+fqYPqianlMLXxlJpO/n7Gv
jDYpBDnxlzysdkDtOn05O/DqxVfC1WFsHVl9E32bGg+6yXg2fwvNzNUh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8iEzahmIYouqYBJnlxx++eVd4aMB8GA1UdIwQY
MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt
OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3
LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6GsSszW
twqCjFqzAw8IcAgqfHPb1qMv5Vfk1XMU4gQQZ0oEY/ku/ATIwhsk3nZjQdKb77zt
siyZjLoURn6wirznLG/ISUtdhBXIMctNziy9V2RBpX+HGEIEik7xWHOXNslfGy6a
mFqTIPkPzALwfcezkICvDA9TCsuH56WF+N1VF0o0bp8zlkw62mIiCcf+rrLUq4+1
+bMPFr31i6lS69n/7Maq04jFRKNVeSM1qWFpKyV5EN1ucFXhmMztgJOvgfauNadK
gkYBVT9i721hpsUt5pq/Pb16IM7ATiYfIeKo0p3WYcsDZDHeJbRRt8KnIT6ygyZ0
LLkWGtMyUGr83Q==
-----END CERTIFICATE-----
Generated at Sat Oct 25 02:47:02 2025 by rpki-client