
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: mCVR9MBysZ/lrHFgN9HtO2OMpQDX0VRI5KOUVmgow08=
Subject key identifier: 82:5F:59:C6:EC:B2:86:03:88:54:88:83:A5:D9:69:25:55:4B:3C:F4
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 0198D6981D87C35D00050C4944639A7FB0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0D32
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: Dx7ckm2qEQwD95VimxMpqSzONROj5FeB9lpaNJCW8Oo=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1d:87:c3:5d:00:05:0c:49:44:63:9a:7f:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=825f59c6ecb2860388548883a5d96925554b3cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:94:ff:7e:46:f8:2a:06:d9:72:45:79:8a:
c9:ef:0a:77:e0:0a:6d:f8:2e:9b:66:be:ec:ff:31:
83:95:5f:19:4c:9a:6b:36:fe:ec:53:a7:6e:47:c7:
bc:3e:99:7e:82:df:73:a4:9f:a1:78:2a:ca:6f:30:
fa:bb:b0:e2:ca:dc:cc:fa:c6:01:89:96:bc:ac:68:
8d:ed:c7:24:76:2a:cb:f7:39:d2:77:c9:56:17:a8:
82:6b:85:3e:36:fb:b8:ac:7c:7f:b5:cc:6e:d9:3a:
17:95:82:1b:b7:06:29:e6:33:6b:ec:67:2c:79:d9:
b2:64:4e:50:bc:64:f1:76:fc:c4:1c:13:5e:ea:1b:
cd:f4:70:7e:4c:44:40:41:a9:62:19:31:1a:d6:ef:
0f:4d:35:7f:67:45:dd:f3:7e:52:6d:e3:42:ea:82:
3a:2f:9d:a3:23:a7:8a:26:97:64:d5:19:a5:e4:d0:
d2:1b:64:e5:6e:ab:35:e1:33:12:01:ce:8f:fb:48:
66:59:e8:55:dc:2b:71:b6:7f:dc:41:1c:57:4a:b4:
32:2b:ae:13:ed:60:d5:32:ce:ad:d2:bc:5b:1e:92:
6f:a2:a6:02:7d:16:28:3d:53:e9:46:52:2b:13:c7:
83:cd:81:5e:19:79:a6:f9:ae:e4:89:a3:d7:3b:32:
e2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:59:C6:EC:B2:86:03:88:54:88:83:A5:D9:69:25:55:4B:3C:F4
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:31:e5:68:a9:ab:8d:f5:51:d0:31:a4:3a:4a:1a:ed:7a:
6f:92:80:50:7f:a2:70:e0:b2:08:39:f4:05:35:7c:b7:8e:b6:
61:93:36:01:77:f7:27:7c:95:c2:ca:31:f7:0b:1b:ce:2c:f4:
57:63:36:3c:ea:37:bb:53:9e:9b:e1:36:b6:6b:84:52:35:8f:
a1:62:f9:16:3f:a4:68:8a:72:9c:ed:53:6a:e8:ef:35:f6:67:
1a:f7:21:45:38:09:79:0a:2d:ae:fa:b5:2d:3c:45:26:b2:90:
5c:c1:5d:3a:8d:2e:e5:4c:d8:ce:63:02:25:62:93:b1:fb:21:
0a:41:05:6e:0d:86:52:d7:41:70:fa:27:fe:d9:c7:f3:4c:56:
26:ae:83:1c:97:7d:06:4a:17:b2:06:0f:3a:2e:40:92:b6:e9:
19:a3:51:22:62:20:b4:ca:35:e7:75:c9:30:7f:87:e3:07:ce:
59:cd:ed:13:e7:90:a6:90:09:13:b9:1f:ed:6d:39:45:b9:0c:
93:61:aa:43:c3:41:67:91:23:ef:b2:80:89:38:a6:13:47:f2:
5d:cd:59:f8:65:29:f7:99:c6:7b:aa:59:1a:be:28:b0:b6:97:
f3:d0:8e:b8:bf:11:d9:5b:d5:06:53:b1:22:ff:98:17:5f:f0:
e0:c3:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:12 2025 by rpki-client