Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: +e0LN2PQXpLOFoJPZYK37vs+vFVobvyqW/C6MTI4wuY=
Subject key identifier: EB:9B:FA:8D:8A:77:90:C6:7D:5F:29:A6:AF:91:A0:2E:FE:EC:E2:07
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 0197BAB48EC350AC4A2FF89172344EA27DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0C9F
Signing time: Sun 29 Jun 2025 08:01:24 +0000
Manifest this update: Sun 29 Jun 2025 08:01:24 +0000
Manifest next update: Mon 30 Jun 2025 08:01:24 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: q1ntO3EGwdHl2PNBSjZWPaaWGBd/azfWSx+W4eOz1kM=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:8e:c3:50:ac:4a:2f:f8:91:72:34:4e:a2:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jun 29 08:01:24 2025 GMT
Not After : Jun 30 08:01:24 2025 GMT
Subject: CN=eb9bfa8d8a7790c67d5f29a6af91a02efeece207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:66:05:36:08:76:f3:68:4b:92:cf:77:38:
75:29:65:6f:c3:bf:b2:97:2b:39:24:d2:c3:a6:c2:
7f:07:f8:2c:70:3b:07:f2:98:ad:24:5c:46:9d:81:
19:d8:91:6b:89:06:48:11:6d:85:3f:4a:c8:b3:66:
5a:9b:6b:2a:06:ec:79:f6:10:88:26:ca:a8:9a:1d:
1a:83:06:33:9a:a8:de:c9:3e:99:bd:87:98:91:52:
7b:b0:59:14:0b:4b:8d:a2:67:5d:c1:89:43:16:7d:
e9:c3:84:77:8b:ad:f1:52:52:1d:6c:42:62:23:4d:
96:c5:f5:16:46:6d:69:6d:a2:4c:2f:bd:34:41:fe:
0a:e7:69:1e:87:dc:03:0c:a9:64:54:e2:84:5b:f9:
a5:6d:5b:dc:7b:b7:08:98:1a:64:e0:73:96:25:7b:
ec:07:16:f2:54:f0:15:70:2f:ee:03:7f:80:1f:9a:
35:9f:eb:fc:6f:3f:6f:0c:55:a9:e3:3a:eb:c7:62:
7b:71:42:2f:ea:6c:54:7a:ba:04:48:6a:e5:fc:23:
af:a2:0d:d4:d8:ab:46:d3:b7:3a:d8:56:74:4b:6c:
9f:3b:f1:70:1c:11:bb:5d:35:5c:b0:65:cb:53:99:
32:c0:84:30:d1:f4:21:60:a8:8d:35:d2:a5:08:95:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:FA:8D:8A:77:90:C6:7D:5F:29:A6:AF:91:A0:2E:FE:EC:E2:07
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:71:3f:b1:a9:76:56:21:31:0e:93:8a:aa:98:37:89:4a:0d:
c2:9a:e9:d6:3d:4f:e6:d7:c5:fa:9c:7a:80:5d:45:0f:c0:24:
18:57:00:69:39:bf:b0:6b:b7:31:76:81:08:92:87:c2:8b:f9:
1f:a0:0e:5d:ad:61:c0:52:8c:b3:66:b9:f9:f2:a3:2f:f7:c0:
16:86:0a:74:a2:ea:23:d4:e9:57:26:44:e4:20:ed:3d:ea:fd:
bd:ea:74:ff:3f:02:56:f3:01:95:3e:41:ab:ac:29:4e:ae:17:
c7:f5:30:ef:b1:f0:34:e0:28:03:b9:f9:4a:2e:9e:b6:ee:43:
4f:d3:f5:3d:39:3f:34:cb:da:b7:51:12:03:99:f0:cc:25:19:
49:b0:3b:89:a7:63:2f:cf:c2:c9:94:28:80:54:f2:ca:be:e7:
98:5e:3e:ac:92:45:e3:0f:b4:ff:4c:a9:b3:1e:aa:db:5b:e6:
49:e7:55:f4:aa:17:8a:18:b9:58:7b:c2:fa:76:79:bb:c6:26:
2c:71:e7:4c:f2:d3:28:f2:2d:62:4d:cd:e9:01:83:83:5b:7d:
c5:e7:3b:d9:61:49:16:21:11:c9:f2:15:ba:a7:5d:1d:f4:06:
bb:8a:93:84:83:d8:c1:b7:8a:c0:35:6b:f0:8f:37:dd:3f:c0:
5a:21:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:18 2025 by rpki-client