Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: r8N9TW8/8Z8S9rt2L6Aza7Bnb8oQVXXpyCcTwSUfkM8=
Subject key identifier: 59:80:FD:17:C6:3E:69:B0:B1:14:EF:61:46:0F:06:2B:AB:45:A5:C1
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019A4D3D381323EEF4419A7857C17A5F1AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 05:00:48 +0000
Manifest this update: Tue 04 Nov 2025 05:00:48 +0000
Manifest next update: Wed 05 Nov 2025 05:00:48 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: tp/4vT1rKz77wkujkqMvbG6SubUPX2f+R2x2uw97CJE=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:38:13:23:ee:f4:41:9a:78:57:c1:7a:5f:1a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Nov 4 05:00:48 2025 GMT
Not After : Nov 5 05:00:48 2025 GMT
Subject: CN=5980fd17c63e69b0b114ef61460f062bab45a5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:78:6d:41:54:3d:37:4a:fa:10:bb:40:93:
bc:8c:f0:16:c2:78:e2:5f:a7:3c:ee:4c:18:18:41:
1c:7a:bc:75:bb:7f:99:ae:47:c2:29:64:19:47:bd:
b6:b1:21:1f:e5:b3:5f:6f:48:37:4e:b8:2e:dc:26:
74:6c:c1:ab:31:04:6f:6c:0d:30:b7:0c:f6:75:5b:
23:8e:b7:f4:fb:32:f2:10:fc:05:74:8f:1f:a9:3e:
56:14:98:c1:38:96:11:97:e5:5f:b8:79:18:5e:96:
82:0f:de:8a:bd:68:66:61:be:68:6a:ec:1f:16:0d:
cf:b5:71:43:33:99:13:9e:02:d3:86:95:ee:69:ad:
36:fe:3a:9b:90:05:45:9b:21:3c:f0:ad:36:a6:c2:
45:69:a0:0f:86:05:c2:a2:c9:1e:84:19:28:22:d6:
8e:7c:32:f8:dc:b1:d2:e6:21:1d:1c:ad:f4:03:2d:
3a:6e:c3:bb:6c:04:47:e5:7f:28:01:5d:e8:76:fc:
52:b0:b0:13:8e:3a:f2:da:63:e6:9c:2a:42:af:89:
7c:24:cc:ec:ee:60:f3:24:a8:f1:b2:52:c1:d3:2d:
5e:7f:7b:fa:0c:35:df:d3:2f:8e:f9:51:6e:77:51:
e3:a9:81:a7:43:9a:8a:e0:bc:e2:05:8c:38:e7:19:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:FD:17:C6:3E:69:B0:B1:14:EF:61:46:0F:06:2B:AB:45:A5:C1
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6c:04:c3:b3:70:bb:0a:00:e4:2c:fe:4b:6b:7a:48:d0:fa:
b9:4e:fa:6f:a2:de:22:f8:8a:81:bf:8d:7b:7a:b5:78:89:13:
4e:b7:24:37:0f:5d:b8:80:3b:f4:89:86:d6:01:c0:1d:b2:3b:
df:cb:a9:51:7a:76:0a:0f:f2:c2:d1:bb:ad:dd:25:6a:77:46:
b5:27:7f:8c:2f:4d:85:49:57:ca:d2:93:ca:5b:9c:e7:50:2b:
1f:32:5c:2a:8c:d1:18:c7:25:57:10:3a:f1:a3:ca:77:2e:7f:
6f:c0:14:de:14:18:f1:fb:1c:ff:ae:04:5a:94:db:98:f7:38:
10:9a:81:e7:66:63:10:3b:89:49:fa:0b:b3:59:3b:1d:1c:6b:
2c:bf:61:42:94:ea:69:9b:f5:48:64:ba:b8:37:11:8e:6d:2c:
77:f8:83:8d:7f:bc:5e:28:e0:47:64:74:37:70:9f:22:70:7d:
0c:ac:51:c2:9a:ca:ca:df:25:be:cb:d1:2c:5e:16:ce:16:32:
1a:f6:89:ed:39:7f:d3:67:ca:aa:da:5c:53:1f:16:24:f0:89:
fb:64:ee:49:4f:dc:ec:d1:9c:35:71:c2:7f:3e:36:d4:c3:c4:
39:91:77:67:4a:0b:c7:da:a1:d6:00:76:e6:8b:e3:7c:0a:3a:
e1:1e:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:06 2025 by rpki-client