Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: emrP61Fi6b21J4J26sRzB2nvNZ+pKlH+otFAKxyou/Q=
Subject key identifier: 8D:54:30:92:C0:F8:19:0C:CA:4D:1D:EE:54:D6:8B:A2:FF:C5:BB:25
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 01987F414B1D65375BB080DDF2B57B75DC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 7E
Signing time: Wed 06 Aug 2025 12:00:42 +0000
Manifest this update: Wed 06 Aug 2025 12:00:42 +0000
Manifest next update: Thu 07 Aug 2025 12:00:42 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: XV/ewmRF7KGsRWxc9n7U9XKel0Hdkah76zampPPz1Iw=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:41:4b:1d:65:37:5b:b0:80:dd:f2:b5:7b:75:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Aug 6 12:00:42 2025 GMT
Not After : Aug 7 12:00:42 2025 GMT
Subject: CN=8d543092c0f8190cca4d1dee54d68ba2ffc5bb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:d7:d3:a9:89:a1:29:8f:8c:98:53:b7:a3:
78:d8:4d:1b:2d:71:45:c3:86:db:4f:3f:77:3b:ca:
78:2e:d1:19:c7:07:86:15:e1:4c:fc:61:be:19:28:
18:6c:f6:7a:bd:14:04:58:b3:c3:ea:ef:ec:cd:f0:
18:aa:24:03:01:80:9f:a7:29:74:da:ff:00:e4:27:
7a:b8:e0:68:4f:7b:ef:4e:b0:68:68:bc:46:b6:27:
1a:d1:33:8a:5b:b3:cb:cd:78:ac:08:73:bd:ac:76:
69:df:1a:9e:69:26:79:c0:2c:ad:aa:3e:4d:d5:62:
83:e0:9f:35:f0:6c:41:04:d8:b1:5c:4b:18:a9:96:
db:d8:cb:d9:29:7d:cd:f2:61:6a:1d:11:a9:c2:70:
a6:b6:66:b9:63:6c:45:b5:66:51:3a:4a:16:60:af:
a5:b1:cd:6a:ba:b4:63:28:6a:08:5f:72:b3:9b:20:
b2:77:4d:dd:9c:f2:67:ca:e2:c3:00:b0:ff:e7:cc:
82:ee:6b:3b:9a:14:b0:9e:b0:36:76:08:86:43:91:
35:eb:4c:62:3a:8c:3a:ac:43:26:7b:3f:ce:a8:5c:
b4:26:2e:9d:a6:ac:ca:6f:c6:67:06:b6:8f:11:c5:
9c:0c:30:c1:ce:e5:84:58:ac:87:77:63:a6:c8:e6:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:30:92:C0:F8:19:0C:CA:4D:1D:EE:54:D6:8B:A2:FF:C5:BB:25
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:16:9d:2c:cf:46:9c:5b:cc:ca:e2:46:51:7b:82:5f:f7:
ff:76:79:6d:14:75:37:71:42:52:d2:83:58:87:c2:d6:d7:24:
e4:95:b8:df:5a:06:d4:a1:d3:ed:cd:32:f0:1f:b7:0d:fb:ec:
7b:cd:8a:ef:e6:1a:51:de:8e:90:17:4d:aa:69:af:0f:4a:7e:
eb:98:49:48:04:55:1c:f6:58:6b:bf:2a:3f:3c:9f:21:99:26:
13:a1:f7:bc:b4:e4:6e:64:9f:aa:ec:53:4b:3e:3a:85:dd:a7:
6d:40:ae:82:fd:65:5a:62:e4:b0:ed:5e:33:b2:96:e1:51:45:
b0:a0:8c:3f:17:cf:77:4c:3d:3c:e5:9e:55:6e:68:33:90:c2:
49:40:54:fa:41:77:1f:b2:36:28:ca:2c:5a:6b:fa:0b:65:f8:
9a:69:c2:9b:95:88:e4:0c:28:81:a8:f3:6a:8d:c0:41:3a:a0:
14:6e:11:92:0a:e7:c5:1f:27:13:c3:ce:ff:a4:24:f8:49:ee:
7d:23:9b:aa:22:69:2f:ef:93:76:4c:db:13:af:e5:35:8d:2e:
41:d5:c2:61:72:25:ac:b6:a4:17:72:99:08:cb:a0:89:2c:db:
b6:b2:dc:5b:52:50:b6:c3:6e:3f:17:d9:c6:8e:0d:cb:bc:56:
40:ec:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:11 2025 by rpki-client