Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: DQzZG5ow5OyaYscG+JeM1q+PvQjodQVY14VoCBY0kmI=
Subject key identifier: 31:71:6F:D2:D9:E9:25:8D:0A:5E:19:45:4E:7E:D9:D0:01:54:CC:27
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 01989637026B0F65C61B6A878E1B57B0A6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 05E9
Signing time: Sun 10 Aug 2025 23:00:44 +0000
Manifest this update: Sun 10 Aug 2025 23:00:44 +0000
Manifest next update: Mon 11 Aug 2025 23:00:44 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: vMp1MGy+WjZ0jnUeSu2gCmAgtGEEMmCZy+HvahKeKjw=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:02:6b:0f:65:c6:1b:6a:87:8e:1b:57:b0:a6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Aug 10 23:00:44 2025 GMT
Not After : Aug 11 23:00:44 2025 GMT
Subject: CN=31716fd2d9e9258d0a5e19454e7ed9d00154cc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:ed:b5:0a:02:07:6e:a4:76:da:9e:b3:e7:
df:83:4c:f6:f6:55:b1:45:c4:a6:46:a3:d9:db:80:
f5:82:00:1e:80:50:23:c1:60:96:12:bf:13:f3:f8:
0c:ef:cd:69:2f:60:08:34:2c:52:d2:42:15:01:f6:
70:74:c0:85:61:17:73:68:9c:33:f3:8e:4e:66:d7:
91:f9:ab:9c:2c:b2:dc:e3:92:b2:2e:03:93:a1:0e:
e3:d3:b5:d7:1b:28:82:77:7b:1a:29:1d:35:b6:77:
20:aa:36:27:30:15:fc:9c:99:01:84:ae:d7:04:64:
84:e0:50:49:86:bf:4a:13:cb:6a:79:9a:60:af:d8:
96:56:2a:59:89:03:ca:02:1b:f4:64:9b:be:fc:a0:
57:dd:e3:6d:b7:c6:19:1c:d1:e3:fa:8e:f2:37:8f:
29:35:36:4d:38:93:0f:45:68:ba:65:3e:a2:b5:78:
e2:33:e4:47:af:83:96:f6:80:4a:86:c4:ab:96:d0:
8a:1b:e8:d9:e1:4e:03:5e:26:b0:99:54:45:3f:a1:
c7:02:3b:b2:83:4f:30:68:2f:a7:eb:90:26:73:46:
c2:a5:76:b9:ca:2e:73:a8:c3:7d:a6:16:a6:af:17:
86:39:64:e3:65:97:9d:70:eb:60:f1:d2:0f:ed:8b:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:6F:D2:D9:E9:25:8D:0A:5E:19:45:4E:7E:D9:D0:01:54:CC:27
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0e:5f:29:2d:62:d6:01:c9:a9:83:41:da:91:f9:f1:69:42:
6d:57:2e:33:39:8f:1b:0f:d6:1a:8d:44:83:2a:ed:ca:5d:e2:
27:62:2f:e9:0b:f9:e3:e5:64:f5:76:3a:80:a7:69:74:04:04:
92:4a:b3:6e:51:6d:8e:7e:49:3b:4e:84:ba:a7:b0:da:c7:e9:
0d:3b:93:17:eb:2f:6d:af:ed:29:b7:3c:98:d1:56:b6:8e:b2:
4b:55:56:79:25:fc:1a:db:89:ea:b7:2d:98:54:ad:a3:6a:b3:
22:d2:85:b3:31:c5:17:01:bf:83:ad:b5:27:0a:b7:30:74:49:
92:9c:a5:fb:ce:ae:04:2a:cc:b9:f3:a0:62:d8:ed:fb:68:41:
f9:28:6c:52:fb:c1:76:04:3d:c5:4d:5a:31:63:43:fa:d1:74:
91:8e:75:02:72:db:32:2d:ec:5b:f1:a7:26:fc:b2:a3:ed:31:
86:9c:4d:06:db:8e:91:f8:04:4c:be:57:7b:b3:2d:ed:cc:69:
c3:6f:2c:46:c7:2b:0f:5e:01:69:78:f6:f7:8a:9e:8d:4e:d4:
0c:60:17:ab:aa:dc:61:5a:d0:3e:82:9e:83:40:4a:d5:ad:dc:
06:07:96:b1:66:8f:c1:c8:5d:b6:b3:ef:9e:e6:c2:79:8c:eb:
18:c7:43:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNwJrD2XGG2qHjhtXsKatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj
ZmYzNDYwHhcNMjUwODEwMjMwMDQ0WhcNMjUwODExMjMwMDQ0WjAzMTEwLwYDVQQD
EygzMTcxNmZkMmQ5ZTkyNThkMGE1ZTE5NDU0ZTdlZDlkMDAxNTRjYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zbttQoCB26kdtqes+ffg0z29lWx
RcSmRqPZ24D1ggAegFAjwWCWEr8T8/gM781pL2AINCxS0kIVAfZwdMCFYRdzaJwz
845OZteR+aucLLLc45KyLgOToQ7j07XXGyiCd3saKR01tncgqjYnMBX8nJkBhK7X
BGSE4FBJhr9KE8tqeZpgr9iWVipZiQPKAhv0ZJu+/KBX3eNtt8YZHNHj+o7yN48p
NTZNOJMPRWi6ZT6itXjiM+RHr4OW9oBKhsSrltCKG+jZ4U4DXiawmVRFP6HHAjuy
g08waC+n65Amc0bCpXa5yi5zqMN9phamrxeGOWTjZZedcOtg8dIP7YsdewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFxb9LZ6SWNCl4ZRU5+2dABVMwnMB8GA1UdIwQY
MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt
OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3
LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg5fKS1i
1gHJqYNB2pH58WlCbVcuMzmPGw/WGo1Egyrtyl3iJ2Iv6Qv54+Vk9XY6gKdpdAQE
kkqzblFtjn5JO06Euqew2sfpDTuTF+svba/tKbc8mNFWto6yS1VWeSX8GtuJ6rct
mFSto2qzItKFszHFFwG/g621Jwq3MHRJkpyl+86uBCrMufOgYtjt+2hB+ShsUvvB
dgQ9xU1aMWND+tF0kY51AnLbMi3sW/GnJvyyo+0xhpxNBtuOkfgETL5Xe7Mt7cxp
w28sRscrD14BaXj294qejU7UDGAXq6rcYVrQPoKeg0BK1a3cBgeWsWaPwchdtrPv
nubCeYzrGMdD1w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:43:09 2025 by rpki-client