Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: JHGjeBvhlmmkwChqUYl23lUisogtcU/G9+Ko+GJXh0A=
Subject key identifier: 8B:66:21:39:4E:9D:B0:D8:80:85:88:97:AC:09:A1:01:55:A7:35:89
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 0197D172B077BEEFF585C638A7303388FE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 24
Signing time: Thu 03 Jul 2025 18:00:43 +0000
Manifest this update: Thu 03 Jul 2025 18:00:43 +0000
Manifest next update: Fri 04 Jul 2025 18:00:43 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: vTR6772WxQ3YiRBF1i9L0Ixrz89gRiaVrOMn0rt3Kcc=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:72:b0:77:be:ef:f5:85:c6:38:a7:30:33:88:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Jul 3 18:00:43 2025 GMT
Not After : Jul 4 18:00:43 2025 GMT
Subject: CN=8b6621394e9db0d880858897ac09a10155a73589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:18:cb:e7:1a:d4:42:0e:e1:54:a5:e2:88:
c6:15:09:ce:67:d6:b2:bb:09:e1:75:a2:01:85:41:
6d:bd:6b:f5:04:06:25:23:a4:b2:32:52:56:cf:cb:
ef:39:ac:37:68:8e:d9:68:77:a7:cd:c5:2e:c8:bd:
5b:eb:fc:96:bd:d4:20:c6:38:38:1b:7e:c4:f3:a1:
63:67:01:e7:65:65:fa:6c:5e:ee:13:07:66:97:77:
b2:ad:07:2c:e7:fc:77:7f:44:29:08:10:ae:e4:b8:
6e:08:14:c4:74:74:ab:88:ea:11:cd:9b:ae:e4:ca:
3e:6b:0a:f4:c9:3f:4e:3f:56:d1:b1:dd:fd:2a:4f:
73:c6:8d:b2:66:b0:81:c4:7c:d4:e4:55:a0:0e:76:
ae:4c:69:fa:b7:c2:6d:ab:51:d3:85:de:b4:47:9d:
cc:b7:0c:15:3f:0a:03:d9:61:85:72:1d:c7:f0:fe:
8f:1b:30:1f:69:00:4a:85:4e:37:45:f5:dc:3b:f0:
aa:cf:fc:c0:96:30:2a:17:ef:9a:24:64:e8:88:04:
8b:e3:c6:3d:c1:f7:82:3c:06:33:6c:e7:5c:e9:1f:
3c:c2:6f:fd:67:22:d0:ae:93:a3:91:b7:17:05:12:
fc:30:c2:9c:a4:49:dc:89:fa:46:29:13:7a:01:a7:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:21:39:4E:9D:B0:D8:80:85:88:97:AC:09:A1:01:55:A7:35:89
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:36:79:25:3c:61:d0:9b:24:05:ff:80:f5:35:70:e6:33:2c:
7f:ee:7f:f6:2a:77:95:64:d4:b4:b1:80:41:89:a2:14:81:2b:
1e:9c:c3:f7:15:10:9f:ff:5a:ae:2f:6f:7a:29:6b:a0:52:20:
94:97:3f:c1:25:40:b3:51:7c:17:6c:98:da:e4:9c:f1:e5:76:
df:63:ad:ae:bf:11:8b:5b:14:cf:6f:b5:bf:28:9f:55:c0:a9:
6f:ec:14:16:c8:71:76:71:d2:ef:dc:10:a0:4f:bb:8a:5b:be:
86:98:63:8a:1a:17:6d:f8:c3:f6:ce:e6:a9:5c:91:37:84:db:
de:40:28:20:81:ee:29:fc:9f:65:21:60:ff:93:42:3d:fe:37:
3b:c0:82:0a:73:96:f7:4e:19:c6:3e:a1:ec:1d:46:99:39:a4:
57:f7:ed:f3:4e:47:d2:c8:35:b5:42:85:8b:07:4c:e9:51:14:
c1:aa:7c:a4:cd:3a:cf:64:3c:b7:db:9f:70:83:2e:d4:25:5f:
58:06:47:9b:38:c9:cd:f6:59:ce:79:c8:2f:ff:a0:f8:e9:85:
10:d5:6e:8e:32:fa:6e:d2:8b:2a:ae:15:ad:42:46:a9:d4:36:
24:aa:2c:64:33:6d:53:d9:68:21:3a:c2:6d:ab:d2:71:c0:b4:
52:e1:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:14:57 2025 by rpki-client