Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: lRtfvVrk63xqcVrRmnO7KPdBhSQfVRdp2TgTuj6UpXU=
Subject key identifier: 7E:5A:AC:5A:5B:A0:A4:0A:BE:83:06:08:2C:89:AA:52:D0:D0:14:0D
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 0198499C20C0BCC8FD678A3E953CA4E339D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0CE9
Signing time: Sun 27 Jul 2025 02:00:25 +0000
Manifest this update: Sun 27 Jul 2025 02:00:25 +0000
Manifest next update: Mon 28 Jul 2025 02:00:25 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: jHrE3MCvf2aXR6ehvY4tYbppi/7bTvYVQtaa9XcF/e4=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:20:c0:bc:c8:fd:67:8a:3e:95:3c:a4:e3:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jul 27 02:00:25 2025 GMT
Not After : Jul 28 02:00:25 2025 GMT
Subject: CN=7e5aac5a5ba0a40abe8306082c89aa52d0d0140d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:26:55:f4:cb:1d:36:af:1a:a8:85:09:b5:
42:a4:f2:e3:c0:e9:b8:4e:7d:77:d5:9e:3b:8b:27:
a1:74:79:05:8b:f5:df:05:32:c5:0d:93:b1:86:32:
fd:2d:3d:e7:c5:68:3a:d5:4a:55:bd:0f:fd:82:1a:
e4:c4:27:c5:20:4b:77:fe:68:0b:ed:7b:75:26:06:
a2:0a:bd:d9:0c:43:f2:51:dc:80:7e:4a:cf:e0:02:
20:8b:c7:d0:73:73:bf:4f:25:ab:44:9c:a2:1b:38:
f2:d4:01:1f:6b:fe:11:86:cc:08:6e:2b:06:b3:d2:
f2:15:01:e5:0a:6d:49:6f:d6:7b:db:ef:72:fd:3e:
d7:bc:b8:a9:83:77:40:a3:74:de:84:55:08:8b:02:
a0:9d:6e:13:b8:ea:ba:2a:09:4f:ef:9b:4a:67:80:
ac:b4:4d:7a:13:f9:a9:bb:67:b4:14:ac:ab:53:67:
f6:30:4d:9a:85:87:0a:f5:8b:79:80:ca:31:8f:83:
d2:6e:dc:4a:5b:0c:94:07:e4:b3:c9:15:03:f8:76:
4c:d2:a8:ec:14:8b:c4:09:d4:41:0f:4b:f1:85:01:
d0:8e:09:53:e3:64:d4:2d:36:66:43:99:08:13:12:
24:e9:54:fd:4f:23:5d:e8:d6:d2:0a:ad:0a:68:00:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:AC:5A:5B:A0:A4:0A:BE:83:06:08:2C:89:AA:52:D0:D0:14:0D
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:bf:cc:ca:75:f8:76:68:85:7d:89:18:aa:f4:b0:7b:41:
22:57:19:e5:df:b6:51:6d:fb:52:3d:b9:49:0a:93:e3:51:34:
a4:c2:1e:97:d7:39:cc:d0:83:f1:3d:af:34:ac:dc:fd:5d:45:
3f:f6:bb:23:9e:f4:97:2e:3c:0b:76:da:d9:4d:7f:87:1e:07:
6f:95:e7:63:6b:5f:dc:1a:5e:15:2e:64:93:ca:c2:bf:d9:ef:
66:0a:ab:bd:e9:65:9e:f3:a6:a6:05:b6:cf:c6:df:5e:3c:8e:
4d:19:2c:0e:9e:96:82:fa:40:10:b3:94:88:d9:9d:1c:9c:7e:
6d:56:47:2d:93:8c:9f:18:a1:75:84:bc:4b:89:fa:72:80:28:
cc:52:94:b5:7d:3b:60:6c:35:27:d0:0a:f3:97:4d:68:fe:80:
f7:a5:0a:b2:53:15:e4:84:76:9d:28:bb:3e:19:c9:fb:c5:a1:
2b:32:3b:b7:4a:80:4b:f4:fe:96:64:51:fb:9f:16:cd:ac:a6:
3b:64:2f:2a:c1:20:1a:48:0e:b4:ac:b7:3d:f2:77:37:23:24:
33:43:78:f3:2c:a4:a8:51:9d:76:f8:f3:b0:d5:f1:72:f1:b2:
20:90:a1:d9:54:86:88:b5:e6:39:5b:01:df:1e:72:07:98:3d:
21:66:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:33 2025 by rpki-client