Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File: GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier: qWQPc2FpbAw1mBln9x0cr2Fc2tyWh0DROcFXNm6dZ9U=
Subject key identifier: C2:8F:0E:3F:95:4F:D1:A7:11:65:0A:24:AB:76:50:1B:75:C0:97:A2
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer: /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial: 0197B7EA702BB75D504118B5359720365ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number: 1134
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: Oic8hQ/tGdBERVG97ToTFXCPOIlZGUj6IW23kiTt62U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:70:2b:b7:5d:50:41:18:b5:35:97:20:36:5e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=c28f0e3f954fd1a711650a24ab76501b75c097a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:30:04:02:f4:d5:1f:e5:07:71:4f:2e:48:be:
ce:7d:80:a7:0c:72:02:4e:7a:dd:2f:86:f4:b6:ad:
5c:e8:f0:c0:de:f7:e6:18:27:cd:65:84:42:65:ad:
96:10:75:b0:c4:e6:8b:20:4b:ff:65:a5:e4:5b:08:
1e:63:2e:07:02:b6:90:67:c7:3f:50:8d:e5:f0:cc:
2f:41:e9:b9:93:a2:44:94:c6:ad:e0:07:99:d1:53:
68:d1:79:bf:cd:8e:67:01:a4:1b:a1:2d:63:bb:b0:
61:4a:b9:58:42:01:68:a2:5e:9c:dd:1e:b7:34:ad:
3d:89:d7:5e:e3:0d:a6:7d:52:f7:48:df:5b:7c:b4:
ae:9a:17:79:75:3b:45:0c:82:18:b2:a0:19:cb:cb:
9c:84:fb:63:cc:12:b3:e9:47:3e:92:51:14:84:d5:
11:10:1e:5a:2a:15:72:50:19:31:b3:09:d0:f3:b9:
12:be:6e:61:bb:3d:fa:ef:b9:5f:54:53:b2:ec:28:
d9:ca:ae:eb:3d:4d:38:ac:71:4c:5d:66:21:6e:5c:
09:0c:37:45:a6:99:44:00:fc:54:0e:85:bb:58:4d:
3e:f3:02:78:a3:bc:44:0a:d4:19:cd:7d:b2:9c:89:
77:96:c3:8d:ab:b9:26:0a:79:9e:e4:e6:67:85:35:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:0E:3F:95:4F:D1:A7:11:65:0A:24:AB:76:50:1B:75:C0:97:A2
X509v3 Authority Key Identifier:
keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:d4:d2:01:4b:65:dd:85:96:da:18:7a:8e:93:ce:41:01:
61:18:3d:75:09:6f:5a:22:07:f2:29:4c:36:d6:f0:25:f4:e9:
40:29:f5:1a:a2:d8:03:a6:ed:60:0a:a5:67:43:5d:86:86:34:
c8:93:18:b4:b5:45:53:e8:02:cf:a3:d4:92:22:a0:f5:d8:58:
aa:27:30:d3:26:0f:24:93:47:0a:5e:bc:8d:28:1a:42:d1:99:
ec:7c:72:48:57:4a:d5:e3:79:48:e3:43:52:b3:ff:8b:f0:30:
1e:f5:b3:5c:6c:44:48:06:a3:94:f4:f7:4f:73:db:e9:5a:36:
42:0f:38:5d:ab:88:80:2b:d4:d3:cd:f4:81:96:98:74:e0:b3:
c9:36:dc:91:d3:bb:fa:b0:d0:1b:b9:a3:99:24:1b:f8:37:7f:
4b:f0:f0:ff:f6:13:48:fa:aa:e9:f7:39:aa:34:56:11:59:8e:
1e:e6:68:3f:3b:23:c2:46:3f:21:72:a8:a1:40:b7:2e:64:57:
0a:3a:57:86:b6:87:5e:2a:17:88:5b:f7:10:4a:16:43:2c:81:
77:5d:93:ff:c1:b9:31:c7:eb:b7:18:89:18:a1:80:4e:36:08:
71:51:f3:a4:08:10:8a:06:68:2b:19:c3:61:f8:17:36:1d:f1:
9d:ae:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:51 2025 by rpki-client