Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: yN3dFIOdFBigKE7tQUaOiVM6cX5Y264KaqlqwlOJaEc=
Subject key identifier: 15:42:22:E9:BE:C1:7B:4D:3B:F8:9D:E0:19:62:8C:6D:97:35:08:0A
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 0196BFA60204480DD9144315B97779EFC56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0C1D
Signing time: Sun 11 May 2025 14:00:49 +0000
Manifest this update: Sun 11 May 2025 14:00:49 +0000
Manifest next update: Mon 12 May 2025 14:00:49 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: bULyj/NVgFBqGANK3UJsxb3QVR5RHH5/HwfPUNFD83I=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a6:02:04:48:0d:d9:14:43:15:b9:77:79:ef:c5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: May 11 14:00:49 2025 GMT
Not After : May 12 14:00:49 2025 GMT
Subject: CN=154222e9bec17b4d3bf89de019628c6d9735080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:a2:6e:53:38:6b:34:f4:46:6f:64:1c:8c:
d3:b1:31:73:af:5a:a4:8c:0c:b3:45:ad:b0:6b:07:
20:71:46:66:14:58:0f:2f:92:57:93:ff:e8:21:0e:
4c:1f:09:82:51:3e:a0:5f:90:2b:98:8f:7d:67:e4:
41:af:18:5d:69:94:88:0f:5e:b0:7e:b5:e1:c1:13:
97:b3:4f:50:39:4e:18:53:1c:d7:0d:2b:57:fe:cd:
69:2f:a4:a6:55:9a:29:c5:c5:57:cf:e1:3b:86:54:
6e:18:dd:f0:4d:fa:4f:4e:34:01:2d:b7:d5:39:48:
0c:5a:9a:01:49:d5:61:dc:b9:42:0a:72:b2:1c:35:
3e:6c:fb:fc:cb:5b:42:8d:af:9a:16:bc:70:36:24:
7a:a6:ad:10:9e:43:ce:8c:c1:6e:1e:1d:e6:51:e1:
41:15:2c:32:0b:72:b8:91:43:6d:84:a9:4c:15:1b:
44:33:7f:66:19:72:b7:00:32:31:ae:6d:8c:c7:56:
e7:ac:14:31:b0:da:35:66:0f:59:f5:96:c7:17:3a:
72:b3:e4:51:3a:9f:74:b0:11:77:c4:90:7e:e1:f1:
f6:1c:0c:05:0c:9e:31:9a:e9:13:2f:0e:59:2d:66:
f0:75:b8:75:f9:af:9f:8e:14:1b:95:5c:5b:af:14:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:22:E9:BE:C1:7B:4D:3B:F8:9D:E0:19:62:8C:6D:97:35:08:0A
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2f:a4:f0:ec:cc:25:36:09:7d:0c:cd:48:b6:d7:78:b2:a0:
ec:32:46:85:7c:47:f7:32:21:bb:e0:cc:d2:0a:07:ad:26:65:
a9:35:91:46:cc:43:0b:cc:8d:85:2f:9a:0b:14:6e:e5:03:49:
b5:d3:64:02:e4:1a:fc:ad:d0:52:cd:1a:70:48:40:70:56:ac:
3f:4e:cd:a2:e5:b5:45:48:17:31:6a:bf:c5:1b:8d:2a:dc:d0:
03:67:da:5a:f3:33:a0:6b:bd:d3:15:1f:f3:de:77:58:3e:50:
64:fb:48:0b:37:9d:e6:cf:74:dc:55:b1:54:dd:88:a9:f0:4a:
8a:f6:f8:59:c0:01:a4:41:40:5f:5e:60:83:99:29:14:c5:e5:
9d:1e:94:00:74:b8:68:72:bd:b5:4d:bf:4f:a3:0c:8e:c8:af:
9d:a3:08:67:dc:92:2e:ea:2e:63:ab:13:9f:25:44:3d:64:94:
8b:9c:54:aa:0f:e6:1e:7c:a1:de:51:a8:1b:69:a8:80:0e:74:
a3:72:d4:5a:89:b7:cb:2d:d7:31:37:4c:4a:ae:37:e4:9d:04:
f6:1a:20:40:c7:fc:5d:bc:92:86:9d:02:0e:bc:d0:83:3c:90:
7f:b9:40:e1:b5:1f:99:20:82:e0:ec:8c:df:5f:9f:4e:cc:f3:
61:e1:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:02:32 2025 by rpki-client