Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: DwGuwIdfV65wASDt4j9PXXZrFeRT01Z8Yv9iCG7d7mg=
Subject key identifier: 54:1C:58:30:A1:E2:35:B2:6C:80:EE:47:29:EE:1B:71:27:86:30:FA
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 0198D7A93B8A372E5C2392B255919D140590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0CA1
Signing time: Sat 23 Aug 2025 16:00:48 +0000
Manifest this update: Sat 23 Aug 2025 16:00:48 +0000
Manifest next update: Sun 24 Aug 2025 16:00:48 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: T29knu7FetNzQ5QoG2eY3rVWDGyra9mv8qiesuxSCIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:3b:8a:37:2e:5c:23:92:b2:55:91:9d:14:05:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Aug 23 16:00:48 2025 GMT
Not After : Aug 24 16:00:48 2025 GMT
Subject: CN=541c5830a1e235b26c80ee4729ee1b71278630fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:5f:b6:56:90:b1:13:65:ff:6d:ed:58:33:
ec:3a:15:d2:df:7e:9b:f9:ac:52:9a:53:df:0a:16:
1a:fb:b0:7e:5d:eb:27:5a:b9:e3:72:d2:00:bc:65:
6a:3a:4c:e7:cd:80:32:90:b0:45:ce:39:c9:78:9f:
97:9e:ef:a7:81:a0:bc:b3:7d:7e:13:4c:92:14:43:
58:08:12:6b:75:ac:ba:f6:8c:2e:53:4d:2f:7f:ad:
b7:4e:d3:7b:24:ea:11:d5:b4:65:55:2e:bb:cf:47:
d7:f9:6d:d3:17:d3:29:70:45:7b:86:cf:73:10:13:
b5:cd:37:f5:ca:0b:fe:3c:06:a1:65:c5:20:2c:e5:
3b:0c:06:3c:b8:97:3b:b7:d2:ae:8a:34:cd:02:f6:
33:c7:53:f3:d7:83:6f:3b:d1:bd:a6:3a:20:0a:8f:
c9:8b:17:04:71:0b:0d:1c:76:b1:3d:bb:43:41:5e:
80:e5:6b:61:c5:93:e6:37:27:29:7d:aa:5d:4c:9a:
11:98:38:6a:a6:ff:7d:3c:d5:76:d9:17:f4:26:68:
70:f5:1c:88:3f:db:21:f1:e1:ef:1f:0b:94:10:78:
df:5a:e8:92:cb:85:ed:bf:41:e5:0f:bf:0f:3a:85:
a6:6e:76:87:e4:5c:7a:ad:0f:ae:f7:a9:aa:11:d1:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:58:30:A1:E2:35:B2:6C:80:EE:47:29:EE:1B:71:27:86:30:FA
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:57:de:c0:b8:18:bf:d5:34:47:50:7d:df:db:ec:0c:a2:7c:
80:10:d1:d0:9f:fa:48:99:62:c1:d9:29:4b:55:c3:30:e3:8b:
3e:8b:6b:0a:59:c1:d1:ee:4c:38:43:c1:cf:14:17:ed:cf:62:
25:06:b7:fd:b2:e4:36:f4:49:53:97:cb:49:38:23:01:d0:97:
2f:79:69:97:27:18:0e:2f:87:4e:c0:78:59:0e:7b:34:b7:fe:
ac:92:4c:4e:97:e3:ff:28:cd:25:da:0a:38:a1:5f:53:a0:5d:
0f:8a:ac:c6:1f:4d:99:4f:dc:11:d9:15:eb:5f:56:38:8e:b1:
46:d6:21:ec:e6:46:90:30:1a:88:83:9a:be:9c:79:2d:f4:8d:
ae:16:56:0c:6f:af:43:de:e6:74:d7:1c:f7:61:83:92:97:ba:
1d:47:6d:1f:32:b5:bf:0c:fe:b3:ff:c4:20:ee:37:60:a7:2a:
e6:95:bd:d1:f7:d8:58:60:da:18:e6:28:e9:39:0d:0e:1a:d8:
b0:02:6a:af:94:7f:09:79:19:bc:43:50:84:c5:2a:94:dc:ab:
4b:37:94:bc:55:54:01:3d:3e:7c:17:56:4e:2f:81:a5:43:81:
d3:47:a1:2c:ee:2a:9c:7f:b0:b6:65:d0:12:fb:67:9f:19:a2:
ce:31:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:38 2025 by rpki-client