Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: xVv5C4yBIvDa7r/FLl72ktoHzzr2aUj9NZzGKnR/RpY=
Subject key identifier: 69:70:96:CF:72:CA:84:A8:24:25:3A:89:3B:F1:30:2F:46:85:20:7E
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 0196A5AF9D867D6AF8A7A9326C166BC17C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0B7E
Signing time: Tue 06 May 2025 13:01:10 +0000
Manifest this update: Tue 06 May 2025 13:01:10 +0000
Manifest next update: Wed 07 May 2025 13:01:10 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: LVXEtVGR+bi9XiPw03ajZXoNRQhAtMJme347LNtVBZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:9d:86:7d:6a:f8:a7:a9:32:6c:16:6b:c1:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: May 6 13:01:10 2025 GMT
Not After : May 7 13:01:10 2025 GMT
Subject: CN=697096cf72ca84a824253a893bf1302f4685207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:0f:d1:d5:9b:8f:06:db:67:fc:7b:88:4a:
9a:5f:f7:e9:4d:ea:fa:18:83:48:18:81:93:0b:32:
30:96:a8:a9:1a:92:7e:d9:74:d6:c4:b3:3f:3a:95:
eb:be:9a:47:b9:ed:68:ca:c7:5c:54:3f:6e:e0:f4:
09:da:0f:05:4c:e0:4e:14:41:31:05:d3:7e:3f:ee:
53:8a:78:65:96:57:28:18:51:7d:dc:78:7f:41:66:
db:03:1c:c4:1f:41:22:a8:00:59:e2:5e:d0:36:8f:
43:83:88:ba:70:28:8b:8d:64:0e:99:fc:c1:ac:40:
ec:cb:7c:1a:12:c0:aa:8c:3a:50:2d:7b:9f:82:19:
9e:16:d9:bd:11:87:47:ca:03:30:ae:a4:aa:a4:69:
61:71:b6:8c:fe:ad:13:51:55:09:26:85:fc:65:81:
d1:d1:3d:72:51:36:e9:6b:4c:1a:11:3e:39:e2:d4:
20:f5:56:28:38:b1:f8:11:b3:f9:bc:a9:a3:ea:2d:
37:78:91:c0:ea:b4:ad:20:7e:1d:3e:1f:2a:09:56:
00:fd:6e:9e:3a:b8:d8:e7:f3:07:fb:6b:0e:8b:d2:
7e:57:16:a9:fb:41:ae:06:d2:1b:30:52:36:00:6e:
14:25:cc:7a:ec:3b:ca:02:b0:e7:c5:d4:ec:6b:de:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:96:CF:72:CA:84:A8:24:25:3A:89:3B:F1:30:2F:46:85:20:7E
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:1e:ac:86:3c:55:eb:07:16:58:12:48:ef:fc:c6:19:49:
d5:97:6c:53:a5:4e:61:69:1d:7e:b8:69:9b:22:9e:1e:65:42:
f8:77:31:4b:a9:e4:4b:94:89:cc:e6:89:3e:36:ae:84:ef:7e:
44:2d:c4:ec:ed:1f:9e:fd:e3:52:ee:e0:f7:e6:63:2b:37:0a:
55:ea:13:33:8a:9e:66:ff:de:d4:9f:33:2a:27:4b:38:a9:9e:
de:d5:05:bd:2d:48:dc:62:83:95:ca:61:bf:1a:b5:30:bb:46:
fb:73:0b:01:05:21:55:77:4f:84:de:07:49:38:fe:22:e0:f2:
e0:5c:52:4b:95:d8:bc:7d:e6:d8:e1:ae:6f:96:be:69:04:d7:
07:c0:8b:06:e3:a8:ab:e0:04:7d:d3:85:0b:d3:8c:8b:60:56:
d1:76:85:11:d7:2e:c7:4c:b4:80:da:92:e6:d8:e1:80:69:58:
a5:8b:0e:e0:73:e4:88:f6:c3:9b:12:6d:9a:a5:94:53:1f:89:
41:18:5e:61:82:24:ca:25:eb:76:73:81:33:c8:0d:ab:e9:f1:
23:e8:c9:df:78:64:a1:4f:56:6c:de:70:f1:e7:5c:05:b2:8b:
18:19:13:8a:28:1c:47:d0:33:9f:fa:71:ba:87:22:09:37:af:
25:87:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:20:41 2025 by rpki-client