Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: QZU8wT5dFsou9QTFjZRTy6iChI74J2W3/Uvt1NZNgf0=
Subject key identifier: 0D:7D:5B:FB:82:74:F6:69:65:41:87:67:73:CC:5F:20:A4:AF:77:38
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 01988EEC142F6DC9FF9BDAC437BAAA437A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0ADA
Signing time: Sat 09 Aug 2025 13:01:32 +0000
Manifest this update: Sat 09 Aug 2025 13:01:32 +0000
Manifest next update: Sun 10 Aug 2025 13:01:32 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: 4AtQsms9rhmpfqWATFsLsyoSYTCTBXX6oLU8yczq9VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:14:2f:6d:c9:ff:9b:da:c4:37:ba:aa:43:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Aug 9 13:01:32 2025 GMT
Not After : Aug 10 13:01:32 2025 GMT
Subject: CN=0d7d5bfb8274f6696541876773cc5f20a4af7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:2a:3e:f7:1b:e0:5f:af:4a:a7:38:c5:9f:
2e:a4:63:70:a3:d4:e4:c2:0e:a2:78:c5:fd:d9:12:
8e:d7:54:32:4a:66:b0:cc:22:53:c7:14:f4:bc:30:
ae:5f:e1:ac:a0:cc:71:f8:04:15:c0:fb:fe:54:38:
20:0c:e7:69:0f:bd:8b:1b:6d:d0:21:4c:63:f6:1c:
51:21:d9:da:b0:1a:b3:76:4a:cb:9a:b8:67:c2:f3:
42:88:83:7a:be:5e:4e:c5:61:6d:05:ec:e4:20:f8:
34:a6:12:55:78:dc:93:dc:0c:2e:70:1b:58:38:06:
e6:04:a3:57:24:45:e5:3f:93:22:ae:c5:8b:f0:7d:
ba:a3:7e:55:0f:f6:9d:3b:0b:eb:bf:50:79:b2:af:
a0:cd:36:87:34:6c:b8:62:1a:49:42:1f:a6:8d:43:
29:11:21:9c:5f:da:7c:5f:3a:42:60:cd:2d:4a:0e:
d8:b4:4a:48:b5:03:28:e8:5f:36:06:45:66:43:26:
8a:25:0c:66:3a:a9:9d:66:db:ae:d6:a0:31:85:48:
cd:98:ea:7c:bd:02:e7:16:a4:02:61:02:b0:02:70:
09:8d:91:4f:45:1f:94:7a:5f:fb:20:df:c9:bb:d0:
b0:23:6e:1a:3f:f6:bf:21:41:28:3b:3f:e7:5f:09:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:5B:FB:82:74:F6:69:65:41:87:67:73:CC:5F:20:A4:AF:77:38
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:88:82:d9:db:7b:9a:d8:47:05:7a:ba:29:56:ae:5c:e7:ec:
49:9d:a0:c2:70:ac:31:63:a7:8d:7b:85:09:44:6a:24:c4:f4:
3d:17:7e:dc:4b:e9:81:73:fa:f6:b0:3d:ab:ab:ec:04:53:d6:
f9:35:43:5d:82:92:20:ab:81:36:26:58:ea:c8:1c:7d:c9:e5:
39:41:fd:40:9b:1a:b5:7e:fe:fe:75:7b:44:ea:58:11:e1:61:
8c:f7:a1:3d:70:4c:6e:dc:07:e9:83:38:73:58:3e:9c:67:84:
54:49:92:6a:46:1d:7b:0e:87:60:81:fc:da:28:0a:32:e1:62:
4e:68:61:bf:13:d0:b5:e7:fb:17:93:f0:27:68:31:85:68:23:
2d:d6:bd:48:fc:d8:20:91:40:d4:6c:04:ac:e3:68:b8:ba:e7:
0a:73:b0:d5:56:33:1f:e7:e8:ea:bc:67:72:00:ba:ec:68:c3:
b8:6c:60:38:d2:b1:20:b9:33:ea:a9:70:3b:44:cf:15:25:1e:
32:3b:18:b4:c9:7d:13:4f:28:a7:f5:de:de:de:1e:ac:ad:12:
5e:93:c0:1f:a1:60:c5:39:6c:12:a2:6d:93:f0:24:97:0d:f3:
56:65:9c:51:99:d7:15:b2:0e:1d:2d:38:a1:1f:17:bc:4a:c3:
30:7d:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:53 2025 by rpki-client