Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: W/WD/3Yk+qkuF1EH1w77fcEWknJmMbFISWugTJvPXms=
Subject key identifier: 54:8B:1F:13:53:4B:93:63:2B:21:93:51:FD:17:E3:8A:37:69:38:13
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 01992367B8C233368A693C0B83320CC37232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: D3
Signing time: Sun 07 Sep 2025 09:00:23 +0000
Manifest this update: Sun 07 Sep 2025 09:00:23 +0000
Manifest next update: Mon 08 Sep 2025 09:00:23 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: SfSvbdgq9uYetNt+OHcWUm/16R7cuGVhBhkQn8CsmX4=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:b8:c2:33:36:8a:69:3c:0b:83:32:0c:c3:72:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Sep 7 09:00:23 2025 GMT
Not After : Sep 8 09:00:23 2025 GMT
Subject: CN=548b1f13534b93632b219351fd17e38a37693813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:56:19:8b:7a:ee:dd:51:18:a5:b4:af:44:
32:f0:32:be:79:fa:88:5e:b8:5f:ab:ba:d2:18:18:
56:99:9a:b7:a4:ee:a6:ad:bb:5d:57:b4:7c:f9:ca:
21:c3:2e:7d:66:40:52:56:f9:9e:13:35:4d:2d:83:
b0:f3:f5:9c:3f:43:0c:0d:6e:02:ac:94:02:36:fc:
8a:21:59:15:c8:2e:97:ca:ce:c2:72:a2:6f:29:d9:
a8:87:2a:6c:ff:f5:e6:9b:d2:24:ff:cc:86:e3:5e:
0f:15:04:f9:ea:9a:65:a1:33:3c:48:fe:cb:76:6f:
fb:fb:5d:d6:9e:1c:23:f0:db:2c:2c:be:85:52:82:
a7:26:b3:ac:7f:c4:1f:db:3b:74:33:be:a8:85:f7:
19:fe:f5:82:9c:25:77:ed:fb:ef:c5:e3:6e:2f:28:
f9:9f:2a:c0:c5:d0:d5:91:c1:88:22:ec:56:8d:8b:
86:77:5f:9f:5b:fc:58:70:89:f7:fc:3c:3b:e7:dd:
9e:b6:8c:54:dc:3d:b4:76:44:8c:03:db:37:74:90:
62:83:71:82:4e:f7:ef:14:b1:f0:68:76:68:a4:99:
30:af:fa:5c:1d:82:b7:f1:60:40:c9:55:0c:04:c3:
b2:e3:76:45:9b:ba:af:9c:b8:24:d9:4e:66:f6:83:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:1F:13:53:4B:93:63:2B:21:93:51:FD:17:E3:8A:37:69:38:13
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:69:a4:63:8a:6b:1c:98:dc:35:2d:b4:38:df:23:3f:4d:1e:
0f:9f:6b:90:35:40:14:51:6a:cf:62:41:c6:6c:56:f3:de:7e:
4a:2d:24:17:b7:ce:2f:8b:51:b4:6d:a4:91:e0:9a:e8:be:66:
4f:e1:cf:bf:ea:48:e6:0c:6a:c8:b5:24:fb:ad:35:d6:5b:29:
35:d6:69:c1:a3:cd:7e:7c:58:c8:47:32:96:d8:7a:63:90:98:
0d:53:fd:77:7a:9f:d1:f4:d9:7d:ae:c8:9e:34:b7:22:bb:e4:
af:8f:90:21:a3:ea:ed:af:3f:34:b4:ad:f0:35:a5:93:56:40:
04:4a:db:16:8d:d4:d8:61:19:f8:50:98:7f:9c:32:6d:9e:f0:
bf:bb:9e:35:2d:3a:9f:c4:f9:09:25:1d:3c:1e:4f:df:6e:da:
ae:84:41:de:02:b7:b2:32:64:4a:7e:77:d6:92:80:60:a2:b8:
42:d5:ad:31:26:ae:39:75:d9:4e:b8:2d:9f:db:e9:65:27:c3:
fe:ad:20:07:3e:27:ef:06:f6:19:d9:ac:f1:ce:9a:e0:db:2d:
e6:2a:08:13:cf:ce:fe:e6:30:4d:d6:9d:42:ad:e6:70:3f:cf:
cb:ae:e1:fc:2e:47:22:9f:91:2c:96:51:86:32:db:fb:40:2c:
6b:9b:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:58:22 2025 by rpki-client