Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: dqufcDexQ++OUh2x4FhoWZAZI6UPvLYUSJ5DvQt7eRY=
Subject key identifier: 72:9B:4E:AB:83:49:D1:25:EF:C3:2E:39:EC:4C:81:9C:03:FA:CA:E3
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 01984AAF06E4815D233FF0B23D7535C8AD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0C58
Signing time: Sun 27 Jul 2025 07:00:41 +0000
Manifest this update: Sun 27 Jul 2025 07:00:41 +0000
Manifest next update: Mon 28 Jul 2025 07:00:41 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: x7hvv7YX6zp0tS7DkPML4KCicjntT19i53AVKN1bfHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:06:e4:81:5d:23:3f:f0:b2:3d:75:35:c8:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Jul 27 07:00:41 2025 GMT
Not After : Jul 28 07:00:41 2025 GMT
Subject: CN=729b4eab8349d125efc32e39ec4c819c03facae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:f2:61:0a:ba:4e:91:b2:cf:8b:84:28:d5:
60:9a:fb:4f:57:eb:cd:00:5c:d2:0f:21:72:12:3a:
77:54:17:f5:63:84:39:fd:ff:6e:aa:e0:42:7f:cc:
57:db:d9:43:8a:57:f9:18:ca:bb:db:1f:74:d7:df:
d7:3b:4b:a6:f4:a6:0c:05:24:a1:94:d6:73:80:9a:
38:7a:e9:6e:42:23:ca:dc:fa:36:5d:ad:3f:1e:67:
5e:d3:2f:c5:f7:41:8c:a0:e5:b5:a3:dc:5b:3b:af:
7a:23:90:9b:a0:c5:f7:b4:fa:67:18:2e:58:4b:1b:
ca:a0:cd:99:89:6d:55:b0:80:79:0e:7c:d4:21:96:
d5:57:38:2d:00:83:1e:73:08:33:98:91:df:4e:10:
58:e4:58:52:9e:71:0b:df:ce:18:41:61:44:bb:38:
7d:34:14:69:36:44:94:5b:02:8a:9b:82:cf:a5:af:
81:9b:c8:21:15:b2:d3:ee:2f:99:fe:bc:21:39:17:
91:2d:a7:13:ca:bb:cb:23:64:c5:36:24:3e:2d:05:
2f:2a:a4:53:51:c8:49:98:19:e1:03:9f:e2:02:e2:
65:69:d8:ed:da:fb:dd:df:cd:ae:0b:46:3b:8a:88:
78:6c:6f:55:ac:a9:08:53:de:51:1a:87:91:c6:18:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:4E:AB:83:49:D1:25:EF:C3:2E:39:EC:4C:81:9C:03:FA:CA:E3
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b6:d0:41:28:e2:0e:d3:be:ae:a9:eb:a8:13:2f:68:e8:dc:
10:7f:bf:8d:35:ce:a8:16:53:4b:14:f0:38:82:e8:1e:33:a5:
27:1c:3f:3a:52:83:fd:61:3d:4b:cb:33:b4:8e:58:be:d2:cb:
2f:2e:4e:1a:ba:6e:2b:8d:59:69:19:3a:8e:5f:09:c1:c3:e4:
40:34:b7:65:76:51:65:4d:52:66:90:0b:60:73:77:06:03:f6:
bf:c0:87:fb:1b:8a:ed:fe:ce:6e:74:c6:ad:7d:a6:c2:95:a7:
e3:2b:a8:f3:1e:f5:aa:ee:50:ec:97:00:f1:55:c7:f7:a2:59:
60:d4:59:eb:47:be:fb:41:c2:6a:2d:6c:34:ee:39:c9:06:86:
18:e5:64:8b:50:22:a9:15:a4:87:c6:58:66:87:7d:a0:15:41:
89:15:a3:98:52:63:60:37:98:23:69:ea:71:3f:80:b9:75:48:
6d:f0:ae:a7:84:8a:94:06:3e:62:9d:39:38:80:67:91:59:d3:
a1:aa:a7:89:d9:68:11:c5:42:32:ec:d9:c0:b2:30:ca:2a:85:
24:bc:f9:32:45:07:06:11:07:c1:77:93:68:36:8c:5c:f7:f7:
69:95:e6:8c:04:25:44:d8:6b:6c:69:49:32:40:f1:82:88:b5:
47:d8:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:35 2025 by rpki-client