Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: H69PIE91kT9FHWxKcub7wC+2pqD9C8KIECEVWO61DU4=
Subject key identifier: F9:D3:00:A6:4F:F7:B4:34:A9:59:CD:35:75:07:56:53:4F:81:6D:30
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0196AF8E0C08C4A324004A30E9B1C90AEFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 04ED
Signing time: Thu 08 May 2025 11:00:43 +0000
Manifest this update: Thu 08 May 2025 11:00:43 +0000
Manifest next update: Fri 09 May 2025 11:00:43 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: qFkK2gNK/OdEepHYWCtPnrEqcD1TkfaTiIzHomzc/7o=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8e:0c:08:c4:a3:24:00:4a:30:e9:b1:c9:0a:ef:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: May 8 11:00:43 2025 GMT
Not After : May 9 11:00:43 2025 GMT
Subject: CN=f9d300a64ff7b434a959cd35750756534f816d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:1e:6b:76:fb:39:63:18:ed:fe:c9:4f:dc:
4d:95:83:06:59:ce:8a:6e:a5:6d:82:ee:f3:82:e3:
f3:ce:14:24:db:66:f1:ca:c2:11:9b:a7:35:db:d7:
eb:63:63:c3:c9:b0:ea:04:72:89:e1:b9:f3:e9:55:
63:34:b6:02:b1:2d:e0:03:3a:2b:26:20:17:75:ad:
ba:7d:6e:7a:08:f9:a1:5a:e5:9a:5a:b0:d2:0a:ae:
04:4a:76:ac:ac:d2:2b:f2:28:e6:78:eb:5f:18:55:
23:77:e5:75:34:79:7a:7c:d8:a5:6c:c1:54:e0:d6:
07:c8:5d:25:f4:92:6e:3b:12:31:b5:49:09:0b:04:
a4:09:f4:ae:43:e3:89:5f:b3:0e:5d:7f:02:24:2d:
70:32:c7:5a:85:2d:0c:5d:e2:f5:60:39:b5:2d:08:
03:36:f9:a6:cb:82:c8:10:a2:09:ca:48:9a:17:7f:
02:ee:52:06:52:1c:4d:1f:60:87:92:34:87:9a:61:
d9:86:62:aa:4c:07:a0:15:a6:b4:73:37:f0:07:14:
ba:45:0d:1a:a3:a7:93:d0:2d:e1:b4:0e:db:2e:d2:
bf:dc:cb:a3:79:08:92:9b:75:dc:4b:77:41:00:1a:
a7:2b:d5:31:9c:e1:77:ee:c0:9c:30:51:37:0c:b9:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:00:A6:4F:F7:B4:34:A9:59:CD:35:75:07:56:53:4F:81:6D:30
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:9e:36:5f:66:8f:0c:b3:61:8f:54:3c:eb:0a:b8:14:e6:
79:2b:e2:a7:1f:80:63:e1:6e:c6:24:23:7e:48:05:c3:89:35:
70:1c:6d:17:26:38:86:57:8c:7a:88:30:8e:5b:5e:f8:32:ab:
1f:57:ee:91:a5:f1:f2:e2:99:08:b5:e7:dd:bb:cb:b5:b5:b5:
98:bf:16:55:da:75:3b:ab:29:af:c6:8b:5f:77:51:b1:c3:7a:
87:d3:15:ab:91:96:5b:c8:78:58:63:54:d4:01:ae:49:f9:30:
40:c9:0d:94:6d:ca:0a:e3:7e:ad:ce:87:ab:9d:e3:cc:ce:78:
2c:de:be:3d:98:ac:45:a8:42:46:1c:95:f4:8f:8b:37:5f:a2:
46:7a:fa:3a:fe:01:05:06:79:a2:3c:c1:d4:10:02:41:01:4a:
0c:3c:c2:75:24:7b:f3:0d:10:e7:11:58:2f:3e:d0:9c:91:64:
c9:cc:cb:cb:3c:21:04:de:c9:ed:d1:e0:8f:d0:52:22:6e:61:
4f:80:3a:a9:9c:83:b3:c1:57:b9:16:84:20:e8:cb:f3:ab:d6:
e2:04:41:ed:98:7f:47:02:93:e0:b4:96:7c:29:2f:de:8b:99:
80:05:dc:d8:1a:3c:c1:1a:d5:89:6d:2e:0a:73:a4:0a:92:1e:
28:75:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:47:29 2025 by rpki-client