Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: hJD03ok9Y9wQeNOUUrBQqtz8Sp+Jx/gYApVwddnjL5Q=
Subject key identifier: FE:D7:45:59:6F:50:51:38:13:B8:69:78:C4:EC:10:28:D4:08:C2:95
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 019A4D066478A7ABB9118246777A8BEFA1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0BC1
Signing time: Tue 04 Nov 2025 04:00:55 +0000
Manifest this update: Tue 04 Nov 2025 04:00:55 +0000
Manifest next update: Wed 05 Nov 2025 04:00:55 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: UXkEb4hmE3MU3v0l6GifXMAvaWMR6IVoOmpZ6uouSb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:64:78:a7:ab:b9:11:82:46:77:7a:8b:ef:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Nov 4 04:00:55 2025 GMT
Not After : Nov 5 04:00:55 2025 GMT
Subject: CN=fed745596f50513813b86978c4ec1028d408c295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:83:95:ae:35:2a:e0:ef:87:7b:d1:90:20:
97:11:6f:b7:7c:3f:01:e5:62:2e:ef:6a:8d:fa:ff:
a0:3f:a7:2e:90:01:4e:92:8a:a9:24:05:9b:d2:2a:
0b:21:6c:e0:4e:ed:9d:f8:ae:05:c6:0d:39:f7:a6:
b9:a4:f2:e3:b9:fa:4a:b9:6b:dd:bb:39:68:3b:0c:
e5:ad:9b:0b:81:4a:d9:bb:9b:d8:96:4f:ca:6e:26:
c3:ab:6e:3f:da:b5:eb:f4:f8:6a:ca:dd:22:a5:ff:
73:38:d4:45:c3:a0:fd:f4:27:5f:d3:a8:22:e6:cc:
6b:33:bf:d7:c2:b4:ab:d0:b2:f9:15:21:90:f0:26:
41:71:28:3c:6c:65:e6:f6:0c:49:f7:c7:dd:2c:c1:
78:fc:39:2a:41:63:e3:cf:c4:42:69:33:c1:e0:5e:
21:06:07:5c:78:19:d6:e8:b8:c8:90:82:ad:bd:05:
a8:8b:8e:22:fc:65:54:de:0c:ec:4b:96:20:ce:61:
66:3c:0b:8e:54:74:7b:96:c7:3f:b1:b6:3e:ff:12:
fb:76:9f:05:c6:95:c8:95:56:92:4f:fb:b1:fa:f5:
de:b2:1a:18:6e:3a:ae:1d:bb:f1:3c:62:4f:7d:f3:
91:76:4d:de:ce:2f:fa:65:a0:8f:fb:0d:b9:3c:fb:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:45:59:6F:50:51:38:13:B8:69:78:C4:EC:10:28:D4:08:C2:95
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:a3:ae:03:6f:e2:63:94:16:ae:dc:69:65:b5:fb:ef:80:
01:67:ab:31:82:8b:c6:5c:be:2c:60:50:13:cf:10:26:27:b0:
bd:44:77:d9:5d:45:f8:b4:93:83:b0:2c:6a:9b:25:c1:81:2d:
4f:b5:80:2c:44:d0:99:2a:ea:27:44:29:2f:36:33:f5:2f:d9:
c1:f8:8f:6d:bd:fc:82:86:12:f4:b0:f2:cd:27:f6:dd:24:89:
67:c7:ec:4c:e5:78:52:65:58:fc:69:1c:76:5d:df:29:2b:be:
dc:b7:09:bf:dc:83:fc:b6:55:4f:bb:30:83:6c:7e:da:c2:53:
8d:58:ef:af:04:77:15:7a:85:88:e8:59:cd:dd:d8:9e:19:9a:
c8:2d:ba:cc:69:d5:83:a8:9c:3a:69:c0:d1:53:d1:80:e1:b7:
2b:b3:ea:a7:1e:ac:84:b3:50:39:d5:d3:db:8a:f6:98:4d:b8:
d0:e9:4e:7d:ba:2c:de:d0:e1:6e:29:bd:85:0c:47:b6:41:1e:
93:02:7f:f5:a7:52:3a:e1:1f:92:83:be:2b:02:2c:50:2d:be:
f7:98:3a:49:27:68:0b:ad:dc:51:cc:d6:78:28:a8:b6:d4:53:
de:46:d1:f2:7c:ec:a7:5f:a1:77:d8:ca:21:e7:38:a0:bb:27:
c7:2d:98:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBmR4p6u5EYJGd3qL76HOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz
MGYwNjEwHhcNMjUxMTA0MDQwMDU1WhcNMjUxMTA1MDQwMDU1WjAzMTEwLwYDVQQD
EyhmZWQ3NDU1OTZmNTA1MTM4MTNiODY5NzhjNGVjMTAyOGQ0MDhjMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZmDla41KuDvh3vRkCCXEW+3fD8B
5WIu72qN+v+gP6cukAFOkoqpJAWb0ioLIWzgTu2d+K4Fxg0596a5pPLjufpKuWvd
uzloOwzlrZsLgUrZu5vYlk/KbibDq24/2rXr9Phqyt0ipf9zONRFw6D99Cdf06gi
5sxrM7/XwrSr0LL5FSGQ8CZBcSg8bGXm9gxJ98fdLMF4/DkqQWPjz8RCaTPB4F4h
BgdceBnW6LjIkIKtvQWoi44i/GVU3gzsS5YgzmFmPAuOVHR7lsc/sbY+/xL7dp8F
xpXIlVaST/ux+vXeshoYbjquHbvxPGJPffORdk3ezi/6ZaCP+w25PPtljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7XRVlvUFE4E7hpeMTsECjUCMKVMB8GA1UdIwQY
MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt
ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk
LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnGjrgNv
4mOUFq7caWW1+++AAWerMYKLxly+LGBQE88QJiewvUR32V1F+LSTg7AsapslwYEt
T7WALETQmSrqJ0QpLzYz9S/ZwfiPbb38goYS9LDyzSf23SSJZ8fsTOV4UmVY/Gkc
dl3fKSu+3LcJv9yD/LZVT7swg2x+2sJTjVjvrwR3FXqFiOhZzd3YnhmayC26zGnV
g6icOmnA0VPRgOG3K7Pqpx6shLNQOdXT24r2mE240OlOfbos3tDhbim9hQxHtkEe
kwJ/9adSOuEfkoO+KwIsUC2+95g6SSdoC63cUczWeCiottRT3kbR8nzsp1+hd9jK
Iec4oLsnxy2YrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:57 2025 by rpki-client