Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: mwSbB/uqWcU4WeJCgrkx977Ve714DepNjzByqCCm8EE=
Subject key identifier: 01:96:70:54:19:36:C7:FC:ED:ED:02:34:23:45:C5:02:BF:87:08:57
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 01976D747FBF0B81322462C6558573D79197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0C77
Signing time: Sat 14 Jun 2025 08:00:40 +0000
Manifest this update: Sat 14 Jun 2025 08:00:40 +0000
Manifest next update: Sun 15 Jun 2025 08:00:40 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: hmlcJ9/mqiKWJuhuH2Z/wcpuY1ZXlhGKGlIWdQEZ1Y8=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:7f:bf:0b:81:32:24:62:c6:55:85:73:d7:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jun 14 08:00:40 2025 GMT
Not After : Jun 15 08:00:40 2025 GMT
Subject: CN=019670541936c7fceded02342345c502bf870857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:b5:8b:c2:c9:7a:76:f4:a3:1e:a3:5d:6f:
60:bc:10:73:f2:29:18:73:35:7d:32:59:ff:43:73:
90:48:6d:4d:77:db:06:9f:52:94:c6:e1:4f:0e:06:
29:22:dc:18:d8:9d:53:1f:75:45:42:87:ed:29:50:
bb:af:92:60:1a:29:31:9a:e4:45:db:f9:78:f2:a1:
6b:dd:5d:f9:77:96:c0:1f:8f:08:c5:17:8e:fa:80:
a8:c2:bf:0b:3f:5f:73:f8:43:91:09:19:da:8b:57:
12:be:80:84:c2:c1:64:08:fe:c6:0c:8b:40:75:bb:
87:58:be:05:b0:d9:d6:05:98:2d:2d:84:ee:f1:b2:
03:1c:43:b4:c0:ba:8c:c1:06:5d:ca:24:11:d8:2c:
fa:11:d4:3c:9e:97:21:6f:0f:c1:81:13:3e:e7:8a:
3d:c5:f4:c3:a2:3a:a1:67:f8:6c:17:56:ac:92:a5:
69:c6:a3:61:a2:af:cd:71:2e:b5:c8:4d:83:c0:a3:
2a:27:bb:0e:1c:b8:71:a2:ad:00:fe:53:42:66:8b:
bb:72:1f:dd:8d:58:fb:91:b2:65:fd:1c:19:bd:15:
35:e1:83:2f:e3:93:75:36:14:51:1d:33:61:ce:d1:
94:63:58:eb:90:8b:da:2f:79:e6:bd:2a:23:17:fa:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:70:54:19:36:C7:FC:ED:ED:02:34:23:45:C5:02:BF:87:08:57
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8f:d5:77:32:56:3d:1d:b4:d1:98:03:e9:db:2e:14:4d:59:
e3:bb:62:68:d5:b6:bf:44:c7:b6:5a:65:c8:16:82:bc:68:9b:
60:50:e9:75:49:7d:a9:e0:5a:1f:60:77:3a:26:5a:11:4c:80:
4d:0c:32:a1:47:66:d1:87:5c:24:49:0d:1d:6c:8b:a0:1c:d4:
46:fa:06:16:4d:18:10:8b:d9:05:1b:73:db:50:ed:2e:37:e5:
d8:b5:5c:01:83:ec:12:b6:fd:cb:e2:71:d8:c0:46:98:75:5b:
d6:09:0a:73:c6:a1:d1:44:60:82:65:de:1c:58:15:15:0a:27:
ed:1a:c6:6d:c0:32:cb:20:25:69:df:8f:b4:bc:62:e2:56:16:
de:3d:9d:26:7e:4a:19:fd:32:07:ac:f2:22:8a:37:e2:d0:5b:
41:b1:fa:51:84:40:9b:e0:cc:57:84:00:fb:7a:5d:9a:2c:05:
b5:92:11:67:8b:4f:e3:da:55:22:dc:fd:68:c9:b9:12:d5:47:
e9:b2:5a:87:fc:23:6e:2a:e7:28:c5:6a:fc:ab:68:0c:32:4b:
a2:77:e7:5f:17:44:7c:de:76:f4:4d:58:ee:6a:b0:e6:dc:6b:
3a:a3:ed:17:99:2c:94:33:b1:21:7c:36:03:b3:ef:b4:96:6e:
1b:09:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:39 2025 by rpki-client