Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: iTqxRuIFEz5W1IkJvxBGVxDUuiUNZIqfUZKcQQ+XhF4=
Subject key identifier: 3E:13:87:95:70:06:8C:56:3C:F3:C9:F0:4B:43:EB:4C:73:F7:E9:83
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 01968D01D2073701AF852DB7B15AED1BA2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 09D0
Signing time: Thu 01 May 2025 18:00:28 +0000
Manifest this update: Thu 01 May 2025 18:00:28 +0000
Manifest next update: Fri 02 May 2025 18:00:28 +0000
Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: goFJ62MglWrPxdrBl0RrKCHVa0JUSao6B++QWvml5ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:d2:07:37:01:af:85:2d:b7:b1:5a:ed:1b:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: May 1 18:00:28 2025 GMT
Not After : May 2 18:00:28 2025 GMT
Subject: CN=3e13879570068c563cf3c9f04b43eb4c73f7e983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:07:43:5e:e2:e9:5c:4e:11:1c:91:1c:89:
1d:72:bf:93:0c:72:18:68:50:a9:e2:2d:1a:cc:3f:
c9:95:2f:8a:e6:4f:e8:1c:b2:9c:fd:7b:cf:2c:48:
70:38:4a:91:71:4d:24:71:c1:06:61:79:d1:f6:ed:
30:5d:67:89:b1:c2:e9:b8:19:e8:10:ac:dc:25:06:
50:d8:d2:80:2f:84:dc:e0:9e:65:3e:e6:8d:97:d3:
9c:27:e5:77:3b:c4:71:9f:70:79:4a:4a:fa:fb:57:
8b:71:5f:74:b5:f6:ab:9a:81:e2:4a:ba:1d:9a:4c:
e7:18:49:48:e0:6a:71:b1:42:59:b0:a4:d9:b2:ee:
da:7c:2d:56:78:d5:31:f3:9f:9c:a2:0d:ee:d9:9e:
de:97:94:9e:3a:cf:9d:01:aa:5d:5e:b4:2f:a7:c8:
52:64:e2:1f:f4:93:e1:e4:a5:88:f5:88:bc:a6:9b:
08:30:16:90:7a:d2:5f:e6:ec:c8:dc:89:73:00:e1:
3c:ac:df:bd:39:c8:26:fa:f2:d7:ec:27:bd:79:d6:
48:12:0b:08:7f:0d:73:47:9e:5b:e0:5d:ed:ed:e0:
bc:2d:cd:98:c7:54:a2:a6:65:62:e7:c5:7d:87:49:
4d:9e:f9:42:23:4b:ba:2f:59:bc:9e:a3:8a:ae:c3:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:87:95:70:06:8C:56:3C:F3:C9:F0:4B:43:EB:4C:73:F7:E9:83
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9f:62:48:c1:ba:45:3e:12:f5:b1:f3:85:1c:62:e7:a0:9d:
d9:5c:70:5e:7d:5e:26:00:ad:06:2d:8f:f4:33:f7:9a:96:d2:
1b:88:b1:e2:e7:d8:e4:e5:fc:1d:fe:49:6d:28:94:f1:59:34:
a3:e1:f7:2b:0a:5c:a0:61:ef:3d:1c:a3:00:57:92:ac:e8:3b:
c3:fc:c2:31:ea:8b:ab:45:d3:5d:35:03:77:87:ad:4d:8e:cb:
2c:65:f9:b4:71:9a:78:7c:2a:06:89:a0:ba:a3:e2:c7:8f:69:
f7:f6:70:a8:44:79:b9:ac:cd:6c:72:53:15:bf:f1:af:6f:73:
cc:55:42:42:88:fe:5a:18:a0:b4:ba:98:55:41:ce:88:92:14:
df:fd:61:7f:95:a7:36:22:35:d4:00:e9:84:37:09:47:fb:bd:
4c:94:f7:04:40:a7:a7:8b:d9:81:38:15:e6:a0:75:6e:3d:eb:
8e:22:24:7c:80:c6:f1:e0:1d:fe:8a:15:07:2a:5d:86:05:60:
db:a8:17:ee:53:39:c7:4c:0c:15:28:df:a1:fa:38:7c:3a:e2:
2e:fb:8a:6f:ec:b3:69:02:c9:70:ba:c9:ca:76:33:f7:6e:3a:
c1:ca:e5:7b:b8:a2:68:ae:18:24:e8:9c:56:8b:05:60:38:52:
34:2a:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:56 2025 by rpki-client