Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
File: gmvh-3GvSNazGFEKqL35qBXzPbg.mft (raw, json)
Hash identifier: h36j/FYgpN6HLiC0JpB5bOrRm9QNFO6XQbOeuedtY7A=
Subject key identifier: 43:21:E8:48:7E:11:1E:75:4C:45:CA:8C:8E:19:AA:16:51:E7:15:17
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 019A4FD0601A067C1AB1608FD6F28FFCA64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
Manifest number: 0DEF
Signing time: Tue 04 Nov 2025 17:00:47 +0000
Manifest this update: Tue 04 Nov 2025 17:00:47 +0000
Manifest next update: Wed 05 Nov 2025 17:00:47 +0000
Files and hashes: 1: ItDOSAPXP7fGwIUCyAUKyyhkB4Q.roa (hash: OWstEJSZcgCk402ChRTJkXohNTIeEApse64rKCImRuM=)
2: ckwFjtT2deecTIv0EBJffOzlHQ8.roa (hash: AfxLwGByDY21vrcsdo3k0yXW342fPqqOEbjPkEKPwyg=)
3: gmvh-3GvSNazGFEKqL35qBXzPbg.crl (hash: mgaaQQ4KldMxGMKL2WDi7QIvMun3p91hXnul3KfnjfU=)
4: hSlAxKZnavSBFWLhMLPVbCueXS4.roa (hash: VFJXjLPeI3ZR1WorzKTvxcecT73zNWbWt4fU0UCHVzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:60:1a:06:7c:1a:b1:60:8f:d6:f2:8f:fc:a6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Nov 4 17:00:47 2025 GMT
Not After : Nov 5 17:00:47 2025 GMT
Subject: CN=4321e8487e111e754c45ca8c8e19aa1651e71517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:f3:eb:53:59:62:4f:57:fe:f6:5b:5c:e1:
4b:98:c6:07:29:a7:61:21:bb:f2:c6:95:3f:86:62:
20:bd:af:14:e3:b9:c5:af:45:af:f2:47:cb:b9:01:
83:26:c7:8c:ae:3a:4f:cf:be:a7:2a:e5:27:11:67:
71:99:8f:79:37:86:1b:82:65:92:f4:71:04:4e:44:
9c:06:6b:f5:db:53:6e:e2:44:d3:cb:6d:23:bc:32:
bc:25:4b:e5:65:f9:92:25:e7:1d:ad:96:a0:34:2b:
0f:f9:90:2b:73:7a:7f:ac:84:8c:4f:8c:89:8e:12:
4a:54:fe:51:61:b8:b7:96:d3:74:00:c8:b0:72:f3:
20:40:48:0b:fd:1d:56:a4:32:4f:d8:78:be:b8:64:
90:04:d2:cf:51:35:a8:f6:b1:6b:be:15:16:47:05:
2d:ca:ad:91:43:0b:cd:53:94:e5:74:44:39:cf:5b:
67:dc:b3:d7:f0:3d:fe:83:e3:b5:a4:9c:1d:b1:84:
2a:53:8a:e3:22:63:9a:a9:74:ca:0d:f2:fb:ea:e2:
5e:eb:a4:57:45:42:d3:21:ca:8e:fa:4a:3c:df:27:
ad:e5:8d:46:4a:fd:16:e1:79:77:59:e1:22:c7:09:
a8:e5:dd:7a:c2:7e:70:0c:bf:5b:d3:73:6e:8d:47:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:21:E8:48:7E:11:1E:75:4C:45:CA:8C:8E:19:AA:16:51:E7:15:17
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:af:20:7a:18:11:e4:75:5a:65:fe:19:00:25:9e:87:ae:61:
35:d3:25:45:60:e5:20:ee:8e:82:f7:9e:e1:e8:00:2c:59:d9:
c8:84:d5:ac:49:64:c6:d1:e2:26:d9:0b:19:ea:06:fc:10:e3:
4d:64:c0:cc:00:3c:42:f3:c8:08:41:3a:34:87:32:d6:85:29:
03:15:cb:ae:8b:3a:93:73:8b:7e:b0:49:02:05:03:85:90:38:
a1:b0:10:bf:21:6f:81:85:87:b5:c3:2c:ac:26:d9:6b:2f:bf:
9c:ae:ca:8e:05:a6:25:45:07:ab:4c:27:fc:85:e1:89:cd:db:
6b:27:21:41:77:45:86:18:f1:ec:ff:c1:da:02:49:83:31:e7:
4b:c6:7d:35:ff:b8:7e:29:92:50:63:ab:1c:0b:ad:db:d7:16:
08:e6:21:c9:5f:e1:b6:7d:8c:4f:1a:d0:f7:d8:69:aa:fd:9e:
d5:cc:28:be:4e:93:7e:58:96:02:28:5a:44:65:60:17:a7:c9:
de:33:d4:8b:c3:8c:9c:af:66:05:03:10:91:33:5b:39:48:e8:
d8:a8:c9:da:90:5f:34:78:2c:b0:a2:de:2b:cc:4f:b8:cd:97:
3b:5a:d8:97:d8:78:61:1b:7a:1b:2c:3d:e6:0e:9a:b0:6f:03:
36:62:7b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:17:37 2025 by rpki-client