Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier: MwacjnD7To13aA95uA7IWVC+4lOQKpg9gCcTdFqCDnk=
Subject key identifier: 1F:E9:02:75:A9:32:51:60:4C:CB:F5:15:DB:13:75:85:47:90:BA:36
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 01976E86F73DECF6089D6760D42F77E60E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number: 0D55
Signing time: Sat 14 Jun 2025 13:00:28 +0000
Manifest this update: Sat 14 Jun 2025 13:00:28 +0000
Manifest next update: Sun 15 Jun 2025 13:00:28 +0000
Files and hashes: 1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: r2oteibhlQ57mN4rj1/qTrJ8UgGie4CH4vbWGyivZlE=)
2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:f7:3d:ec:f6:08:9d:67:60:d4:2f:77:e6:0e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Jun 14 13:00:28 2025 GMT
Not After : Jun 15 13:00:28 2025 GMT
Subject: CN=1fe90275a93251604ccbf515db1375854790ba36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:09:3d:9f:da:35:75:51:ee:6e:54:57:b3:
8f:3d:99:c5:a5:bf:67:a4:27:69:2e:95:46:94:b4:
52:74:08:3b:a7:c7:b2:12:bb:0a:5f:46:2b:49:0c:
13:50:ae:20:ab:f3:c8:bd:30:33:73:a7:36:47:3f:
16:02:09:28:d3:8f:d8:e6:bf:4e:d1:f2:1d:80:6e:
da:4a:af:19:91:e1:be:ce:05:c4:d9:4a:d9:f9:6d:
b7:db:e1:cd:f2:65:50:4d:b4:4b:99:6b:30:9f:d8:
b8:82:8c:2d:65:c4:0f:8d:39:90:e3:3f:65:25:db:
06:f7:a6:b5:24:67:6f:c4:a4:b6:cc:ed:7b:af:d9:
da:9f:97:d4:d0:e7:89:24:12:6b:f5:c5:4d:d3:fb:
50:ff:d2:8d:2f:1e:3a:15:aa:a6:d7:43:01:46:b0:
07:a3:25:77:32:ce:01:db:d4:6b:36:5f:75:ec:5c:
e0:38:df:4e:53:8b:7e:67:94:e6:4b:34:39:ad:09:
09:6a:d6:3f:eb:b3:ea:c4:c6:85:ef:22:29:9a:1e:
e3:d0:c0:e1:f6:40:aa:fc:ac:e5:2b:06:b6:ed:a0:
cb:22:2e:c4:78:7e:6e:5b:53:a2:5f:39:ae:53:12:
6a:e2:55:2b:98:38:34:0d:9c:df:09:6f:08:d3:f6:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:02:75:A9:32:51:60:4C:CB:F5:15:DB:13:75:85:47:90:BA:36
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bc:67:01:94:2c:d4:26:b9:0a:86:cb:3d:60:cc:09:63:df:
f9:24:4e:f6:da:a6:da:0b:cb:37:83:80:04:81:0e:4e:c6:f4:
81:0a:9e:df:f0:b1:8e:16:ca:fd:d1:83:da:d7:76:4c:18:d4:
78:ae:f7:5c:5f:ad:80:4b:7a:35:71:ef:c8:da:36:6d:7e:5c:
0b:d2:16:cf:8c:3d:b1:13:74:08:83:f4:c0:b2:90:7a:e4:5e:
fc:e6:f2:53:02:a4:9f:72:a2:08:a4:f2:53:19:d9:1b:cf:a1:
10:14:a3:ff:e6:bc:1b:71:1e:85:0d:f0:11:8f:96:04:d5:9b:
69:db:2c:c5:ad:07:ed:c0:da:b2:bf:42:13:0e:af:2b:c2:e1:
a1:aa:be:7f:2d:a4:29:ff:92:fc:b1:82:99:6f:87:b6:dc:41:
88:0d:83:f7:07:b6:e1:3d:96:a2:3a:13:6a:cd:11:8f:39:c2:
7a:40:a8:d2:bc:fe:9a:cf:02:3b:05:d8:86:e5:fb:b8:42:fb:
e3:4e:42:07:29:19:f6:5e:56:ca:ed:35:29:f2:41:bf:29:14:
0d:5e:aa:9b:f9:57:65:f6:42:b5:2d:03:c5:1c:a6:03:7d:6a:
d6:7e:be:5d:7b:3e:bc:69:09:be:d3:8c:c1:0a:62:b3:8a:73:
66:b3:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:55:19 2025 by rpki-client