Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: aUr/ZLPQZ/zAta6c18MjDKbQeDeyNqf+KY7JxqJaAjw=
Subject key identifier: 93:CE:0F:47:4E:8B:4C:2B:8D:5B:B1:47:88:C9:96:5F:59:4C:17:50
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 0199FF22E203A0D0B9DB93C4FCF2CE5EBE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0D3A
Signing time: Mon 20 Oct 2025 01:01:40 +0000
Manifest this update: Mon 20 Oct 2025 01:01:40 +0000
Manifest next update: Tue 21 Oct 2025 01:01:40 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: haREVRJUjOC35Gg6Uzpmf9ZWs+cpSwER0MqapI5C07g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e2:03:a0:d0:b9:db:93:c4:fc:f2:ce:5e:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Oct 20 01:01:40 2025 GMT
Not After : Oct 21 01:01:40 2025 GMT
Subject: CN=93ce0f474e8b4c2b8d5bb14788c9965f594c1750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:76:23:af:4d:14:2d:80:29:1e:d0:6e:df:
ae:96:4e:9e:4e:27:39:1e:6c:ad:81:35:e8:8c:da:
24:56:2b:30:a9:89:2a:90:8a:70:5e:9d:a9:94:3c:
f4:98:df:3e:86:20:bb:08:3c:85:db:1d:fe:89:10:
ab:3a:be:3b:e9:1a:c4:51:00:0a:d3:7d:97:75:9c:
73:4d:2c:d9:c6:93:10:e3:b9:bc:ce:d0:a5:5a:4a:
d3:1d:bf:60:58:df:b3:12:99:25:20:9c:fd:b6:13:
21:39:f3:4e:b9:e0:0b:e9:d8:09:eb:32:ca:7e:1a:
9b:18:27:ea:ad:ae:6b:9a:95:8d:52:ad:f7:1f:5b:
b6:b0:61:b5:eb:31:ad:90:78:d2:05:26:c0:4a:4c:
06:08:fa:c7:0c:57:79:93:fb:4f:56:bb:13:47:a3:
a7:dd:26:0f:e8:d7:af:51:db:9d:94:4c:d0:2e:11:
be:5f:7a:87:ee:2f:14:75:02:54:f2:c4:e4:81:dd:
11:f7:13:a2:a7:41:81:b8:cb:d0:be:9a:ea:de:88:
61:ad:36:69:f4:33:27:1f:64:3f:e7:ea:90:8b:76:
11:93:82:12:99:e8:9a:94:b4:6d:6b:aa:20:d8:cd:
c0:ee:d5:77:ea:44:b9:af:59:70:fd:14:91:00:cf:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:0F:47:4E:8B:4C:2B:8D:5B:B1:47:88:C9:96:5F:59:4C:17:50
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:74:8f:71:61:71:c7:7a:1d:75:5f:53:46:73:da:a0:f7:
48:1f:37:0a:4c:23:9d:5d:e5:22:96:75:64:1d:cc:b4:e2:75:
b2:a9:e3:d8:e1:e8:2d:78:5a:99:e1:7d:7e:05:e3:76:a5:36:
74:ee:5d:99:3e:c9:e8:e1:58:45:44:3d:df:5f:0a:d7:d7:e2:
d0:10:e4:8a:2c:2d:1e:62:63:c2:b0:1d:d1:0a:a0:27:28:c3:
7c:85:58:19:2c:51:c2:b2:12:8a:e5:7c:18:29:91:00:08:cf:
e4:2d:05:ee:2d:b3:64:54:3b:e8:f9:2d:03:b6:c5:55:28:90:
ab:c7:60:bc:0f:27:47:97:09:a7:fa:41:19:fd:d8:4f:3e:7d:
cd:74:c5:04:fb:53:92:07:b8:e8:31:88:67:9b:3d:a3:65:4b:
5f:65:cd:07:34:4a:03:69:75:e8:a3:e2:ec:42:db:63:9f:b1:
20:f6:aa:dd:97:cc:d3:32:8f:e5:0a:5a:8e:3c:c0:15:c2:a7:
b3:66:ff:34:78:51:94:01:df:79:1e:30:b5:ac:88:dc:22:a1:
a5:89:c9:49:21:98:15:ef:8f:7f:4f:a0:f1:0b:64:88:67:a2:
6e:19:f4:55:69:d0:30:4e:3f:83:b3:10:c5:0e:76:2f:08:12:
96:82:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:49 2025 by rpki-client