Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File: GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier: NGEpln3Jt6Rr0X5RvUJ7EaIAYJPT7UWJfCOu7Ec18GU=
Subject key identifier: 1C:9C:4E:7A:10:50:FC:55:29:8A:1E:58:92:E0:47:1B:CC:13:53:C7
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer: /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial: 019922FAB67379FA63F58F93522573C737F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number: 11F0
Signing time: Sun 07 Sep 2025 07:01:19 +0000
Manifest this update: Sun 07 Sep 2025 07:01:19 +0000
Manifest next update: Mon 08 Sep 2025 07:01:19 +0000
Files and hashes: 1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: kBXdZ9FTlOgfJegHO/0q+aVGZ7H0rfptppSE27m4nG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b6:73:79:fa:63:f5:8f:93:52:25:73:c7:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Validity
Not Before: Sep 7 07:01:19 2025 GMT
Not After : Sep 8 07:01:19 2025 GMT
Subject: CN=1c9c4e7a1050fc55298a1e5892e0471bcc1353c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:4c:99:03:30:4a:35:75:04:0c:4c:35:b2:
11:f1:6c:4a:ab:31:b1:92:e3:00:f0:10:fe:67:a5:
aa:15:d3:72:03:1b:34:f5:43:8e:1b:b2:6c:31:77:
57:04:44:ec:91:0c:d0:9c:8a:ff:c5:15:bd:51:98:
4e:18:6a:36:2d:ca:36:3d:fe:80:0a:14:cc:a5:b7:
2b:83:44:c9:9a:88:e4:54:23:e9:a0:97:60:9b:99:
2f:05:f0:79:c1:fd:5d:eb:dc:ea:37:9e:6c:bf:90:
4a:f3:d1:67:30:eb:3c:60:c7:ce:f5:56:da:a5:30:
65:92:f4:38:12:9f:85:0f:5d:bb:77:a5:d2:c6:7e:
de:7c:b5:19:48:6a:8a:37:bb:38:c8:bf:19:df:af:
c9:bd:3c:ef:27:db:43:a6:6d:7f:26:2f:3c:92:b5:
f2:fa:8e:46:84:76:5b:37:6d:7e:40:f0:0d:c2:81:
fb:e4:25:2a:88:1e:b3:fc:17:64:fe:0f:04:27:ec:
f4:8b:27:71:c9:dc:40:78:3b:3b:bb:93:71:c7:a0:
cc:ff:f5:da:6e:5c:65:18:4c:20:60:98:f7:fd:3f:
55:44:5d:a6:dc:f9:61:25:a3:4f:d8:5e:a4:7d:2e:
0b:ca:54:f6:24:2a:3a:c8:7a:8a:ef:45:a9:29:14:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:4E:7A:10:50:FC:55:29:8A:1E:58:92:E0:47:1B:CC:13:53:C7
X509v3 Authority Key Identifier:
keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:b4:b1:39:3f:69:06:ec:0b:3a:44:6e:c5:a3:44:2f:0c:
95:21:c5:68:be:61:13:ab:87:9b:e0:9e:f5:be:17:4a:e7:b8:
b0:0c:d7:e2:d9:cf:c1:b8:76:3f:c7:6f:68:4e:87:c1:1e:99:
9f:08:7e:78:64:16:bb:bb:6e:e3:ad:a2:2e:a0:95:d1:8d:5a:
aa:27:bb:65:73:46:03:4b:ac:c5:b7:65:1c:f7:08:11:cd:cb:
fc:f8:bd:1a:c8:b1:7a:c3:35:b0:7f:86:6c:1e:3a:27:ab:ab:
98:78:cc:c1:df:95:01:e7:d4:23:01:58:91:09:b7:89:89:04:
97:f4:51:29:94:e2:77:5e:ce:b2:25:47:37:3f:c6:8c:2e:2e:
fe:79:72:1e:00:0f:ee:17:fa:95:67:ba:61:4c:84:ef:f7:35:
bd:ff:9a:05:fd:82:93:81:bd:d6:ec:5c:ce:aa:c1:3c:58:d7:
a1:d5:79:e7:a4:21:b3:8e:e7:5e:7f:81:be:fc:b6:81:83:6f:
81:be:f8:0c:3c:b4:d1:95:d3:15:ff:6e:56:ae:c8:73:cc:07:
26:d4:ff:80:22:0e:42:c7:50:1e:bf:8c:20:4d:78:6a:b0:24:
70:02:9c:8f:5d:13:78:d1:4b:54:99:44:7e:7f:57:69:d7:03:
17:a0:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:49 2025 by rpki-client