Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File: GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier: 0MdCulHgnlIY/tmHwVHm32ju6J7IlS5JmF0EiknCg74=
Subject key identifier: 0B:FC:4C:5A:80:EC:E0:D0:78:90:F9:4B:44:48:74:5F:CC:6B:01:0C
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer: /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial: 019747E7C22B881E765F6300F0A9DFEE2B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number: 10FA
Signing time: Sat 07 Jun 2025 01:01:00 +0000
Manifest this update: Sat 07 Jun 2025 01:01:00 +0000
Manifest next update: Sun 08 Jun 2025 01:01:00 +0000
Files and hashes: 1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: gvFVTMuCJUPzAt1Ww0RmqwSxSlT8YI9qyMPf2ydrSvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c2:2b:88:1e:76:5f:63:00:f0:a9:df:ee:2b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Validity
Not Before: Jun 7 01:01:00 2025 GMT
Not After : Jun 8 01:01:00 2025 GMT
Subject: CN=0bfc4c5a80ece0d07890f94b4448745fcc6b010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:ad:f8:f4:76:40:1e:76:10:5f:9a:8b:d6:
59:2c:73:cc:8f:40:de:b9:0d:b1:8a:05:62:2a:63:
96:62:cc:70:76:da:dd:df:d9:b2:f6:0c:56:df:68:
4e:60:1f:91:fb:d3:fb:a8:c3:66:01:58:6f:86:6d:
e5:a3:2f:ce:4d:b5:e5:f7:09:f8:ef:04:58:e8:22:
0d:09:de:5f:04:5f:98:86:0b:5d:5c:7c:f4:38:6d:
b4:c7:2a:ce:6a:97:c7:88:f1:2f:56:40:16:ac:6e:
c9:e1:c7:65:5d:ac:a9:0d:8d:35:7e:0b:9f:d5:5e:
c0:29:a7:24:26:1a:67:c6:0e:68:d1:16:e1:14:96:
4a:63:2e:bc:01:c1:b4:e5:dc:b6:d9:b9:bd:a7:12:
1a:9a:42:5f:1b:97:a1:d5:8b:5c:60:cf:96:dc:36:
5a:2f:21:bd:32:70:95:40:57:b2:76:f4:2f:37:4a:
9d:6b:c3:3a:0a:dd:1b:39:dc:3a:67:cd:85:47:83:
e9:94:ee:17:dc:42:b6:44:d3:8d:8c:7f:55:16:ce:
8e:88:6d:09:d1:b9:ee:99:b9:f8:e3:15:56:46:ad:
f2:35:b1:cd:7e:fa:8e:68:c8:89:21:30:5a:48:2f:
de:7f:9c:ee:db:2a:f0:af:fe:db:ab:c8:fe:60:d1:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FC:4C:5A:80:EC:E0:D0:78:90:F9:4B:44:48:74:5F:CC:6B:01:0C
X509v3 Authority Key Identifier:
keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4a:45:e3:60:2e:3f:80:c3:f3:e7:de:5f:46:50:13:35:38:
de:db:94:97:9f:fb:7b:f1:92:48:14:7d:a4:08:00:b7:04:e0:
51:dd:99:4d:48:2c:6a:d6:74:c6:e9:21:0f:63:d7:ce:27:b0:
0e:ad:6c:b8:70:92:d3:2c:31:9c:e8:8d:1e:9d:d3:c1:78:33:
fd:e3:69:b2:88:8f:58:9d:98:a1:7e:e8:84:5a:7b:f2:ce:df:
1a:89:be:c9:13:ef:5c:e1:4a:42:e8:37:2a:30:e1:10:41:30:
7a:e3:0c:c7:68:f9:23:8c:45:00:a2:13:b5:39:32:e7:d8:f8:
3d:a2:21:a0:c3:8a:af:fd:23:67:a0:0a:1d:bd:ec:f4:f8:51:
8f:a8:78:ad:68:38:fc:77:13:3f:f5:28:4e:fa:0c:2b:b7:b1:
b6:81:07:e0:06:c5:87:ad:90:2e:0f:bf:84:40:c2:b8:ef:59:
80:b9:9d:86:2f:63:52:48:b8:a7:70:41:f0:36:5d:cc:f7:be:
59:59:35:6d:b3:c4:93:36:74:d8:31:69:e4:fa:eb:bd:62:5d:
dc:46:06:ab:70:61:17:11:f1:14:33:04:d8:38:85:8e:65:e9:
a5:31:95:08:14:61:80:50:8c:4f:3e:2c:02:2a:97:74:9e:c4:
10:b5:c6:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH58IriB52X2MA8Knf7isFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MzU5ZDhiNDQ0ZjI3MzRiMjllOWI5ZTA5MDFiZTA4YjAw
ZjQwZTMwHhcNMjUwNjA3MDEwMTAwWhcNMjUwNjA4MDEwMTAwWjAzMTEwLwYDVQQD
EygwYmZjNGM1YTgwZWNlMGQwNzg5MGY5NGI0NDQ4NzQ1ZmNjNmIwMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpKt+PR2QB52EF+ai9ZZLHPMj0De
uQ2xigViKmOWYsxwdtrd39my9gxW32hOYB+R+9P7qMNmAVhvhm3loy/OTbXl9wn4
7wRY6CINCd5fBF+YhgtdXHz0OG20xyrOapfHiPEvVkAWrG7J4cdlXaypDY01fguf
1V7AKackJhpnxg5o0RbhFJZKYy68AcG05dy22bm9pxIamkJfG5eh1YtcYM+W3DZa
LyG9MnCVQFeydvQvN0qda8M6Ct0bOdw6Z82FR4PplO4X3EK2RNONjH9VFs6OiG0J
0bnumbn44xVWRq3yNbHNfvqOaMiJITBaSC/ef5zu2yrwr/7bq8j+YNHu/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv8TFqA7ODQeJD5S0RIdF/MawEMMB8GA1UdIwQY
MBaAFBk1nYtETyc0sp6bngkBvgiwD0DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYTk0NGItYjQyOC00NTQ3LWI3ZmIt
MzhmN2M2YWM5YjY2LzEvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zYTk0NGItYjQyOC00NTQ3LWI3ZmItMzhmN2M2YWM5YjY2
LzEvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkpF42Au
P4DD8+feX0ZQEzU43tuUl5/7e/GSSBR9pAgAtwTgUd2ZTUgsatZ0xukhD2PXziew
Dq1suHCS0ywxnOiNHp3TwXgz/eNpsoiPWJ2YoX7ohFp78s7fGom+yRPvXOFKQug3
KjDhEEEweuMMx2j5I4xFAKITtTky59j4PaIhoMOKr/0jZ6AKHb3s9PhRj6h4rWg4
/HcTP/UoTvoMK7extoEH4AbFh62QLg+/hEDCuO9ZgLmdhi9jUki4p3BB8DZdzPe+
WVk1bbPEkzZ02DFp5PrrvWJd3EYGq3BhFxHxFDME2DiFjmXppTGVCBRhgFCMTz4s
AiqXdJ7EELXGSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:59 2025 by rpki-client