Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: bVBaqQlnwUEN4kCUYklnqRQDicLq6xHBCr/fbCMoZE8=
Subject key identifier: FD:1D:07:B8:EC:D9:A8:12:91:CE:29:C8:23:95:72:FD:95:2D:E4:E1
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 0199FC216E5888FE0033E19B413E216B3B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: sdhhgfC6xQ25PVEe4MBvMFTrtDgNDZ25WLzHWUvFTn8=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6e:58:88:fe:00:33:e1:9b:41:3e:21:6b:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=fd1d07b8ecd9a81291ce29c8239572fd952de4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:87:ec:8b:a8:8d:8b:61:70:66:38:a9:59:
e2:86:f0:9a:55:09:88:bc:b8:af:c1:f9:25:e4:fc:
1b:f0:9a:6f:e5:fa:b5:9c:80:60:a0:20:45:78:98:
1d:11:13:94:15:4e:bc:22:26:9c:79:d1:2c:c9:83:
59:5a:4f:6e:68:3b:f3:dc:3a:34:05:f4:1a:9e:2c:
17:e6:b8:02:c2:21:8f:89:ff:90:6f:c2:88:4b:8a:
80:ee:75:47:64:d7:5e:db:52:74:79:15:43:bc:02:
d3:a0:ac:28:c3:bd:b5:29:61:68:92:c3:97:e8:74:
c3:64:09:69:d4:f8:54:b1:be:16:53:85:88:6f:78:
54:f9:95:ea:50:ef:d7:07:84:33:f2:86:cf:f3:fe:
9b:b2:1b:72:ea:0f:1b:66:d4:a2:75:2b:8a:e2:fe:
cd:71:d8:f7:df:fe:4e:89:6b:8e:5e:55:c4:e9:c4:
cf:0d:9b:80:f6:10:ba:a7:d8:47:b1:19:8e:4d:f8:
a6:ea:3b:00:9c:15:9e:59:32:ed:83:3a:f7:15:e6:
14:31:1b:4b:ac:39:d5:dc:a0:ea:5e:a0:2e:0f:70:
2c:25:7e:24:5c:82:aa:76:23:3c:75:05:7d:ce:68:
00:96:28:44:e2:fe:01:20:ae:c9:a6:bc:29:50:db:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:07:B8:EC:D9:A8:12:91:CE:29:C8:23:95:72:FD:95:2D:E4:E1
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:cf:b9:2d:f9:5e:8b:4a:61:6b:55:23:5f:cc:86:3d:40:
e8:a8:7e:3e:00:df:85:38:89:16:04:3a:89:1f:e2:9f:f9:f7:
b2:db:9f:67:26:e6:4d:5f:fb:2b:ab:e4:5e:47:3c:c4:87:b6:
84:86:ad:02:05:94:62:13:86:97:6f:f7:2e:36:df:91:d7:d1:
16:d0:56:a1:dc:a1:05:84:44:78:aa:da:d1:35:5f:0f:e4:82:
73:9d:47:96:96:a0:0a:f1:20:35:c7:65:f5:ef:25:55:b1:92:
e1:83:6a:70:4b:a0:25:da:b8:ec:4f:a9:30:3a:95:d1:82:ec:
f6:9b:80:2b:13:62:9a:10:4f:52:ce:e9:83:07:39:4a:60:b1:
7b:7d:c9:38:56:9b:7d:59:59:ca:67:35:c1:bf:39:c9:f5:8e:
3d:24:97:4c:46:d1:85:96:95:fa:b7:ad:45:30:58:1e:73:30:
6d:3a:1a:8b:2f:9a:51:eb:0f:82:d3:b8:f2:4e:10:38:d2:7d:
43:e8:55:0b:a3:80:42:5a:7b:f5:ed:72:dd:77:58:9b:b1:2c:
d3:bd:36:9f:72:ad:d8:79:f5:af:c2:c8:be:3d:2a:24:b8:17:
2f:b1:40:a5:ca:48:d3:fb:ab:3d:65:fc:c9:5a:c0:99:8d:b8:
2c:8b:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:21 2025 by rpki-client