Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: uNW4ZcSjg9XIYEDyvnzgas079P1B18fZkB/DroRD0rA=
Subject key identifier: D2:BE:3B:39:FB:E5:AA:AD:2B:FE:73:60:48:3C:EF:7E:48:C4:E8:FD
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0197579128E29F3A8AB8FB7385327BA6FE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0544
Signing time: Tue 10 Jun 2025 02:00:20 +0000
Manifest this update: Tue 10 Jun 2025 02:00:20 +0000
Manifest next update: Wed 11 Jun 2025 02:00:20 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: G5gHn+DLhO8TIQDypHNYoNXdCvhRFgQEpoWFUk4rCsY=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:28:e2:9f:3a:8a:b8:fb:73:85:32:7b:a6:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jun 10 02:00:20 2025 GMT
Not After : Jun 11 02:00:20 2025 GMT
Subject: CN=d2be3b39fbe5aaad2bfe7360483cef7e48c4e8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:bc:87:46:ab:cf:11:97:f5:93:bf:ae:56:
34:f6:9b:5a:5e:89:30:b5:3c:09:ed:c0:8c:bb:68:
da:c2:ad:3f:2e:92:86:11:92:5e:71:68:5c:e5:27:
3e:18:96:9f:a0:a5:e2:1a:c2:0a:be:4c:57:58:f4:
b6:1e:7a:66:f6:d2:a8:2b:32:64:99:3f:f9:d0:98:
eb:a0:95:dd:14:e2:d1:e0:00:ed:2f:41:86:58:ea:
a2:3b:d8:ae:85:50:fc:6b:88:a8:d7:97:2f:42:9f:
3a:da:ba:02:7d:32:4c:2f:33:20:5b:6c:40:29:6d:
70:ba:18:a6:0d:8e:a7:f5:a5:5e:e2:64:ad:4e:c6:
e5:4d:7b:c0:c8:84:03:ae:34:c2:0c:c5:47:f4:e2:
a9:b7:32:19:71:c4:c3:fd:e0:64:c9:63:80:b6:3a:
a3:58:3f:2e:6f:82:fc:4c:d4:8e:32:9e:2c:47:85:
ee:83:78:cf:5c:f7:85:d8:93:ca:db:ca:b7:1c:30:
16:ec:1a:6c:b3:bc:09:29:fa:05:e5:88:2b:e3:c6:
87:3b:f9:90:f4:12:4f:7d:43:a4:54:e6:94:2b:bc:
83:ae:58:66:e2:ac:76:a2:31:d9:37:1f:a4:e6:7e:
00:cb:ec:2e:c9:9b:7a:6e:ff:8e:a0:41:5d:c3:20:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:3B:39:FB:E5:AA:AD:2B:FE:73:60:48:3C:EF:7E:48:C4:E8:FD
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:17:7e:7c:f9:98:24:20:3a:64:17:77:8a:df:07:f2:af:11:
6d:e7:0f:95:3a:b1:34:d4:d6:fc:25:a5:6f:76:89:66:8d:ba:
19:f3:ab:8f:86:94:99:5e:fb:ac:c4:c7:3e:85:e5:26:1f:dc:
3a:a9:8b:c3:56:f0:2f:7a:0a:dd:a0:f7:3e:d9:c5:f0:be:67:
bb:74:8e:d1:88:7b:4b:75:bd:bb:c4:ce:78:c8:77:97:22:78:
ff:85:39:60:69:dc:54:bb:d6:68:09:46:ca:e9:d8:74:d6:90:
1c:00:4a:f0:ad:b3:2e:a3:b2:a2:14:1f:f9:fb:e9:5e:46:63:
4a:81:28:04:74:78:72:29:f8:0f:0f:68:54:ea:35:20:d7:73:
3c:9a:3b:cd:61:01:d7:f2:ef:59:fc:90:27:5c:9b:07:fa:40:
fd:ca:ba:eb:ca:12:8c:bc:13:08:9d:99:12:1c:f7:a9:9f:49:
82:b5:31:d0:97:fc:8a:f6:77:3f:18:99:d2:ec:b5:70:29:a8:
52:b5:54:da:b8:c5:84:70:65:c2:db:d7:82:fd:65:c9:ef:58:
dc:b8:46:a0:83:d5:0c:d9:b2:7f:c4:5b:a8:62:cb:5d:bd:e4:
d3:f3:39:d7:08:ee:f5:d1:28:1e:2a:b4:70:4b:5b:a7:9f:4b:
9d:cd:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:54:53 2025 by rpki-client