Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: Jyt0sG1taLwaUosrjRo9NI6xO4oD47Z7SRErIm6uaRs=
Subject key identifier: D3:34:E5:18:18:24:04:B4:8C:4C:A5:4D:49:50:B0:62:1F:3C:0D:FB
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 0197B7EA8FCF0D920AC4AC917FFE639035EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0C0C
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: sJxk2UBmSRdJFOhDtBozPrmfO1LQnIDiaFA+p/E83xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8f:cf:0d:92:0a:c4:ac:91:7f:fe:63:90:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=d334e518182404b48c4ca54d4950b0621f3c0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:05:24:fe:c0:b5:89:b8:cd:8e:7d:63:46:
92:8a:09:ba:2c:2d:5b:1e:27:2c:3f:9f:9d:16:bc:
6f:37:da:ca:20:d1:be:a0:23:80:a0:7b:c3:5c:d5:
03:25:95:0c:7e:1f:af:6a:7b:77:bd:c1:1d:38:c5:
7f:db:f6:bf:a0:c8:12:20:d8:03:48:33:b8:53:c7:
89:5e:e4:f7:61:42:ba:1a:4a:f8:fc:ef:c9:c4:68:
3b:a6:2c:7c:e8:ab:1c:94:dc:14:bd:87:da:e8:dc:
c6:03:6d:62:7f:99:a1:37:43:eb:fc:05:eb:2f:46:
92:83:4b:a5:d4:8a:f9:2a:f1:d9:86:6a:70:22:2a:
d0:d4:bd:15:e2:1b:02:9e:52:14:f2:2d:92:2b:4f:
60:1f:91:cb:65:07:70:a7:ac:bc:73:bd:e1:82:7d:
84:16:10:a2:76:55:5e:4e:5b:e5:26:78:ef:be:8a:
a4:14:ee:2c:35:84:31:e5:98:b6:47:4c:35:86:35:
3f:20:2c:ce:6c:80:17:fa:fb:fd:5d:30:d2:64:73:
65:74:c9:06:7a:ed:36:13:10:72:f7:fb:67:f5:84:
7d:f1:c6:03:d9:f2:e4:9b:5b:ab:f2:62:71:e5:c3:
58:29:7a:2f:ce:3a:93:2a:58:c4:fd:40:e2:57:9f:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:34:E5:18:18:24:04:B4:8C:4C:A5:4D:49:50:B0:62:1F:3C:0D:FB
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:1c:0a:f2:07:7a:4f:6a:e8:07:7f:b1:9d:71:c9:18:3f:
32:8c:8c:a6:c3:9f:ed:9c:5c:5a:28:01:a1:33:d2:ea:c0:3b:
5b:06:55:ee:df:d3:a7:64:57:9c:39:ed:a6:e2:25:3f:1f:eb:
27:a7:ff:4b:a0:d1:fe:33:e1:f5:07:32:43:64:63:0f:b8:5c:
5c:11:84:bd:8a:36:78:5e:ae:69:b3:b2:2e:53:c7:39:a3:58:
52:10:55:6f:30:64:be:2f:87:10:6c:66:63:9c:f2:7e:90:f0:
82:ee:aa:a1:6a:a8:d9:97:5c:f0:07:ec:16:33:a0:97:e5:04:
d8:16:a3:73:d8:ea:f9:2d:0d:0b:ca:27:8f:a8:bb:97:98:fa:
5e:9a:7b:6f:cd:78:5c:dc:e2:ec:77:00:48:f1:3f:92:38:70:
c0:e5:34:36:2d:5a:5f:80:d5:42:0c:2d:a8:f3:1e:e5:d0:43:
02:35:ba:9a:5b:fc:8f:08:c8:05:10:42:82:13:8e:b7:aa:c8:
8b:a7:cb:89:e2:6b:78:45:2d:48:40:18:7f:46:c2:56:de:a5:
98:c3:f9:ce:0f:de:c0:4f:82:8a:10:d4:b5:32:16:30:29:c9:
20:0f:10:8d:c4:84:04:9a:c3:ad:5e:d4:d8:8a:c1:11:4d:0a:
9a:36:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:02 2025 by rpki-client