Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier: UsyqO9pnWTdDDUPdrOaE1kF4gbTOBKPwKIhzF4aZh7I=
Subject key identifier: 34:A3:FA:F2:E4:CA:DA:5D:AF:DA:C4:ED:B7:32:DB:9F:8C:E4:68:4C
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 0197B5FC51AE44CF1F11B3B9AF809124E171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number: 0D7A
Signing time: Sat 28 Jun 2025 10:01:41 +0000
Manifest this update: Sat 28 Jun 2025 10:01:41 +0000
Manifest next update: Sun 29 Jun 2025 10:01:41 +0000
Files and hashes: 1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: 0NFLkU1DF84zIC+vLVOKlYdHnbg69rku30Q0LHMXyDQ=)
2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:51:ae:44:cf:1f:11:b3:b9:af:80:91:24:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Jun 28 10:01:41 2025 GMT
Not After : Jun 29 10:01:41 2025 GMT
Subject: CN=34a3faf2e4cada5dafdac4edb732db9f8ce4684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:d1:72:09:e6:6b:cc:a5:8a:91:82:e8:34:
a4:91:73:64:3f:4c:db:c2:a3:71:bc:c8:db:71:37:
5c:00:a4:f4:07:c6:21:1c:4c:f2:b8:a3:34:76:a5:
70:5e:e6:94:05:a1:09:e6:22:1f:7e:9f:52:83:63:
8e:b8:0c:58:9d:9b:e5:1d:fb:37:e8:77:6b:8b:c9:
9f:5a:93:22:73:d9:8f:91:bc:37:26:44:90:9b:b1:
ab:2b:45:8e:29:a5:9c:af:28:ce:86:ee:53:17:9c:
9c:4f:30:8c:3d:b2:6f:f1:44:a5:1a:63:ca:c4:4e:
cd:31:7f:b1:f4:e0:36:52:91:20:a5:b5:cc:2d:ba:
6a:44:3c:4e:5d:be:05:58:1a:0a:84:59:34:ce:77:
9c:6f:7c:bb:91:84:af:a9:25:ee:85:6a:64:6c:88:
72:37:8b:a4:ed:b3:f8:da:e0:25:4d:92:12:3e:3b:
3b:bd:eb:b2:48:7f:60:41:83:34:33:28:7a:87:6f:
98:03:fc:46:57:cb:2a:3a:ba:da:9e:24:ca:cc:85:
3e:89:29:3e:fd:62:c7:1b:f9:7f:fa:74:a8:e4:0f:
56:c0:19:07:fb:36:02:94:7a:4d:fc:2b:1c:3c:ac:
af:8b:9d:0a:32:83:7d:4b:e1:b2:b8:71:9a:39:95:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A3:FA:F2:E4:CA:DA:5D:AF:DA:C4:ED:B7:32:DB:9F:8C:E4:68:4C
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:1d:dd:2d:ac:a1:4a:18:cb:48:cf:f4:74:38:01:f4:b4:
1f:98:b6:67:ea:72:59:77:e5:67:c3:5a:52:a3:5f:ae:5c:27:
1e:92:0f:45:0d:7b:0d:56:ea:14:94:bc:65:f1:54:e5:6c:02:
b1:d4:a1:d4:0a:bd:01:1b:8c:53:d6:d8:17:29:7d:bd:7c:b5:
71:7d:c0:a6:59:b9:0c:4b:de:9d:72:60:d8:15:c2:d8:50:59:
64:1a:82:dd:27:2e:d8:be:12:16:03:3b:04:c4:cf:fa:24:bb:
a4:af:88:0d:83:00:43:bb:3a:5f:a1:96:e8:2c:19:73:79:6b:
24:18:79:e6:a5:c8:b4:19:a9:89:b2:e4:ea:64:00:8d:fe:c6:
35:75:64:a0:cb:46:df:91:15:f5:f8:82:a7:39:24:c4:e4:e4:
7f:d2:05:1c:d3:b6:fe:6c:ab:49:02:78:23:ca:d6:a6:37:2b:
52:24:85:2c:87:32:7b:e8:17:53:0d:dc:87:c8:91:10:bb:4e:
00:6d:77:e4:45:b8:59:dc:89:9c:b6:43:8d:c8:fe:61:67:32:
07:7d:7c:61:d4:b1:5c:3b:c0:45:59:df:46:32:a1:8f:ad:89:
e3:a4:f1:89:ea:be:2b:65:41:b6:90:e4:f7:a9:e8:db:e5:95:
0f:2d:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:09 2025 by rpki-client