Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File: GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier: zSz4IhgIuJdJ/44YRilSS6jrP6EpbrahVty3rDxXoWc=
Subject key identifier: 7B:15:CE:A3:D5:15:C8:B2:AE:50:8A:CB:B5:9D:31:77:B0:ED:B7:11
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer: /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial: 019A7112CBFD771DF1E4D01FAB8D038F9869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number: 129D
Signing time: Tue 11 Nov 2025 04:00:48 +0000
Manifest this update: Tue 11 Nov 2025 04:00:48 +0000
Manifest next update: Wed 12 Nov 2025 04:00:48 +0000
Files and hashes: 1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: qQFRfvJ8Ee5MJXaVaRf7TtbATiMJLWwu2LpmBrLAa4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cb:fd:77:1d:f1:e4:d0:1f:ab:8d:03:8f:98:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Validity
Not Before: Nov 11 04:00:48 2025 GMT
Not After : Nov 12 04:00:48 2025 GMT
Subject: CN=7b15cea3d515c8b2ae508acbb59d3177b0edb711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:3d:5f:b2:3b:62:4f:26:c1:e7:1d:f8:2a:
19:25:63:b8:26:fd:d2:02:8b:78:64:2e:cc:2a:36:
05:bb:f9:19:b5:4d:9a:35:eb:2e:07:45:b9:0a:c4:
55:7f:5e:ae:e0:96:f1:db:40:94:67:bf:35:94:5f:
c4:fc:67:81:c3:75:0a:e5:b8:b8:ed:e6:20:b6:ab:
c3:b8:a5:fc:07:ec:2c:8d:b0:e6:71:3c:96:fb:81:
d9:fb:e4:e6:73:12:3b:1d:97:c2:83:5b:9b:4a:84:
5c:56:6b:53:08:ef:50:ce:f2:4e:21:e7:29:9c:33:
b0:b3:42:28:62:1f:fd:1d:33:fd:4f:f3:4f:91:dc:
1b:4e:cb:43:7a:0b:48:de:50:5a:27:66:ab:a1:f1:
59:c1:24:d8:28:b3:af:c9:26:42:33:2d:43:ce:9d:
c8:cd:40:6a:dc:6d:d7:d6:97:89:52:80:88:7d:67:
69:6f:a9:71:bc:9e:82:8e:39:e4:7a:d3:45:13:64:
06:34:b7:04:45:5e:d9:40:6b:d1:8d:0f:4b:c8:af:
c3:81:b0:db:9b:f0:82:63:c7:39:3c:9f:f0:d3:db:
8e:5b:0c:af:51:58:12:a4:3d:1b:92:dd:52:10:c1:
9c:5e:dc:95:80:69:ed:e5:aa:3c:23:d2:12:1a:c4:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:CE:A3:D5:15:C8:B2:AE:50:8A:CB:B5:9D:31:77:B0:ED:B7:11
X509v3 Authority Key Identifier:
keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:70:c5:02:16:34:95:11:10:15:14:75:1b:ac:41:c0:12:1b:
83:fd:af:58:33:99:02:36:f2:fa:3b:76:25:a1:e6:b8:a6:45:
d0:74:b7:15:33:b0:67:6a:87:70:b4:4e:9a:91:39:c6:14:b5:
ef:d1:6f:23:58:81:6f:df:a9:d4:7c:73:f9:4f:28:61:6b:f7:
ee:86:60:d4:02:5a:82:16:5f:02:bf:a6:49:f8:41:c2:cb:40:
73:2f:bb:e6:61:1b:df:ef:e6:59:bc:c8:13:84:2e:24:ea:e4:
d9:0a:92:68:5f:6b:bf:22:41:aa:83:08:78:5d:e1:69:fa:29:
0c:c1:10:a4:57:7c:d9:54:13:c2:98:44:45:5e:cd:5c:3b:79:
e2:9d:fa:43:cc:24:80:c5:f2:01:99:83:89:37:5c:70:2c:ea:
fb:5b:17:ae:95:e6:2b:ba:1c:67:d9:55:19:1b:ca:d3:d5:ef:
fc:88:77:d5:0c:b4:29:09:f4:fa:fb:9e:7e:28:18:78:1a:28:
da:24:35:27:5e:2c:e1:dd:84:9c:5f:fd:96:47:87:d0:ed:74:
0d:dc:d7:94:28:61:a9:fb:c2:4a:74:c5:60:f4:b9:63:25:50:
ca:fe:42:f9:e6:3a:40:04:1d:0a:e3:2a:0a:06:1d:e9:01:5b:
02:6a:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:13 2025 by rpki-client