Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File: GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier: 21T3Lf9ERgP0ZH+b6lXrkOBlMx6y2TMeAoddWoAPuM8=
Subject key identifier: 3D:3F:93:9C:59:55:18:5B:B5:8E:B8:61:B6:13:8F:C0:3C:14:09:E1
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer: /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial: 0199FD33ED0ED9B75F8D570BC668AD226932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number: 1261
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: G9o7dQAL+YF335Tva7M/Tckcgo2+xP+CeXmTHnWWY0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:0e:d9:b7:5f:8d:57:0b:c6:68:ad:22:69:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=3d3f939c5955185bb58eb861b6138fc03c1409e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:02:0f:91:8b:11:70:89:8c:e6:dc:05:34:
5f:47:74:2c:87:2c:4c:ce:84:12:63:5a:18:3b:de:
b2:c5:0a:7d:04:92:72:fc:fd:5a:d8:0b:0a:4d:4e:
83:aa:55:ae:e1:5e:4b:26:56:e4:cf:2f:ce:4b:4c:
79:c3:71:e6:4b:17:46:26:4f:42:ab:de:66:2b:e0:
03:28:38:b5:9c:5f:a7:f8:4d:ee:af:c3:fd:ea:8f:
5d:7e:0a:f9:37:1a:8a:4f:6d:b7:84:96:37:75:60:
de:56:50:02:55:dc:de:68:88:ba:ee:0e:41:a0:57:
b3:f5:4b:00:96:0d:e6:dd:de:d8:6f:dc:92:0f:47:
47:81:52:75:ea:e5:02:aa:d1:c8:fb:e5:26:bd:12:
3d:16:af:7c:df:b8:b3:7f:b2:bb:83:38:79:56:e5:
18:bf:44:84:37:20:0c:8c:9c:a4:ed:54:7d:5f:95:
c3:96:44:25:9e:64:52:f9:d1:f7:ac:a3:c2:b7:11:
c8:17:35:c6:05:11:58:56:db:b2:d1:c4:e3:ea:07:
46:42:95:ef:2e:0d:fc:24:56:ef:4d:89:ef:80:ec:
51:88:17:00:9d:49:19:69:7a:d5:35:3b:10:1e:d0:
20:11:15:b8:a1:52:f8:01:27:56:87:d8:f1:5e:f3:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:93:9C:59:55:18:5B:B5:8E:B8:61:B6:13:8F:C0:3C:14:09:E1
X509v3 Authority Key Identifier:
keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c6:15:c9:ce:64:89:c2:69:1c:ce:3f:45:05:d8:83:b7:a5:
fd:cf:af:7c:ed:6c:e2:76:35:0c:a7:93:8b:d2:a9:2d:12:b2:
2f:96:e3:22:b9:d2:a6:16:90:8c:8f:77:11:cf:3a:e4:2d:31:
3a:c9:c6:e0:66:35:b1:1e:a4:1e:a3:ab:83:32:47:cb:1d:2c:
e4:76:77:81:be:d3:1a:96:6d:fd:7f:50:ae:f3:fa:d3:85:8e:
07:a0:5b:5a:71:48:dd:24:04:4b:d1:1c:d3:d7:d6:b9:a9:20:
e4:a6:7b:db:b1:f3:38:4b:86:75:3a:cb:fe:a4:51:96:8d:e4:
e1:4e:37:31:57:81:50:f7:0f:11:2c:31:4a:2f:5a:8b:d0:10:
4c:60:57:8d:b6:b6:77:90:72:ca:0b:0f:a2:9f:a0:32:55:f5:
b8:bb:c1:90:0d:32:5e:d9:19:a5:1f:08:73:1c:e8:d6:f7:6a:
5d:01:97:d9:12:ef:93:93:4e:e9:29:18:e7:3f:b0:74:4e:49:
75:75:58:a3:18:ba:bc:55:ec:cf:0b:25:f6:f3:8d:5a:78:6b:
46:cb:1b:b9:b7:a4:5b:9c:f2:19:26:4b:ee:9e:50:9c:91:ec:
52:9f:d4:0e:fe:c1:b1:96:9f:8e:a7:db:c7:96:d3:68:d1:90:
62:ab:5d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+0O2bdfjVcLxmitImkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MzU5ZDhiNDQ0ZjI3MzRiMjllOWI5ZTA5MDFiZTA4YjAw
ZjQwZTMwHhcNMjUxMDE5MTYwMTAyWhcNMjUxMDIwMTYwMTAyWjAzMTEwLwYDVQQD
EygzZDNmOTM5YzU5NTUxODViYjU4ZWI4NjFiNjEzOGZjMDNjMTQwOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhkCD5GLEXCJjObcBTRfR3QshyxM
zoQSY1oYO96yxQp9BJJy/P1a2AsKTU6DqlWu4V5LJlbkzy/OS0x5w3HmSxdGJk9C
q95mK+ADKDi1nF+n+E3ur8P96o9dfgr5NxqKT223hJY3dWDeVlACVdzeaIi67g5B
oFez9UsAlg3m3d7Yb9ySD0dHgVJ16uUCqtHI++UmvRI9Fq9837izf7K7gzh5VuUY
v0SENyAMjJyk7VR9X5XDlkQlnmRS+dH3rKPCtxHIFzXGBRFYVtuy0cTj6gdGQpXv
Lg38JFbvTYnvgOxRiBcAnUkZaXrVNTsQHtAgERW4oVL4ASdWh9jxXvOqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0/k5xZVRhbtY64YbYTj8A8FAnhMB8GA1UdIwQY
MBaAFBk1nYtETyc0sp6bngkBvgiwD0DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYTk0NGItYjQyOC00NTQ3LWI3ZmIt
MzhmN2M2YWM5YjY2LzEvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zYTk0NGItYjQyOC00NTQ3LWI3ZmItMzhmN2M2YWM5YjY2
LzEvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcYVyc5k
icJpHM4/RQXYg7el/c+vfO1s4nY1DKeTi9KpLRKyL5bjIrnSphaQjI93Ec865C0x
OsnG4GY1sR6kHqOrgzJHyx0s5HZ3gb7TGpZt/X9QrvP604WOB6BbWnFI3SQES9Ec
09fWuakg5KZ727HzOEuGdTrL/qRRlo3k4U43MVeBUPcPESwxSi9ai9AQTGBXjba2
d5ByygsPop+gMlX1uLvBkA0yXtkZpR8Icxzo1vdqXQGX2RLvk5NO6SkY5z+wdE5J
dXVYoxi6vFXszwsl9vONWnhrRssbubekW5zyGSZL7p5QnJHsUp/UDv7BsZafjqfb
x5bTaNGQYqtdHA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:53 2025 by rpki-client