Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: FbCweb5DXPSzC0kCEFqLgEv+wM6l9Ew3ykPdZlJgVys=
Subject key identifier: 34:5A:22:9B:7D:3D:79:B2:F2:AA:6C:14:DA:3A:E7:EC:FC:22:A5:22
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 01964CD97A03A846CCBC791FEAD189E8F81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0B50
Signing time: Sat 19 Apr 2025 07:00:42 +0000
Manifest this update: Sat 19 Apr 2025 07:00:42 +0000
Manifest next update: Sun 20 Apr 2025 07:00:42 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: LKaGlKgTrr+ZLbw3QBw+o4zUnk8nRclc2YCbIWPXTSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:7a:03:a8:46:cc:bc:79:1f:ea:d1:89:e8:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Apr 19 07:00:42 2025 GMT
Not After : Apr 20 07:00:42 2025 GMT
Subject: CN=345a229b7d3d79b2f2aa6c14da3ae7ecfc22a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:b8:33:00:cb:25:56:bb:d4:c1:d0:50:4f:
2b:6a:a2:27:07:9c:e8:0f:85:d7:53:0d:20:3a:24:
5b:aa:c3:25:c9:c5:c2:93:aa:16:e9:5f:4e:fb:d2:
18:d2:49:24:2e:2f:5b:03:6b:6f:8b:52:59:d2:b4:
bc:d6:94:78:0a:15:d8:60:67:c2:b6:bf:43:ee:ef:
b7:19:7f:e7:09:12:b6:03:e8:fd:ba:1d:ab:9a:d2:
97:d9:fb:43:e7:bc:9e:ec:ae:ff:65:76:4d:8a:42:
d0:bd:c0:bb:15:43:17:be:61:c7:31:b0:70:26:80:
c2:f7:26:8b:8f:4a:ea:b1:a8:95:12:ba:36:f9:aa:
f9:61:db:e9:c0:47:07:1e:ab:13:02:b9:df:b5:4c:
cf:48:75:14:e2:6f:5c:5c:62:11:df:a3:ae:a7:18:
73:dc:dc:11:3a:f3:9a:60:fd:d5:1f:ca:80:a8:84:
cd:75:ca:9c:a0:8d:98:1b:39:a9:94:cd:e9:dd:bf:
2b:ec:47:0e:0d:3a:64:2e:01:f8:70:31:b1:09:d1:
e2:b3:30:eb:4a:89:60:9d:56:f4:75:35:e4:09:ef:
9d:17:13:3a:e4:97:0d:f0:39:4a:bc:5c:64:f0:79:
ac:9f:c9:35:36:6f:a5:9e:eb:20:ca:2e:49:eb:1b:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:22:9B:7D:3D:79:B2:F2:AA:6C:14:DA:3A:E7:EC:FC:22:A5:22
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:fd:5a:de:c0:b2:9f:ed:62:c7:35:4a:d2:c7:a1:ed:de:
77:61:00:82:ed:24:19:29:fe:ce:e5:84:67:10:d2:f8:fd:13:
fe:c3:c0:c8:90:fc:09:02:ab:9a:fc:45:8a:05:af:e3:a3:f3:
a4:3e:6d:b9:87:fb:15:68:8b:12:39:1f:13:ee:78:87:7a:ff:
be:51:0e:84:1b:55:80:6d:66:11:07:a1:a8:74:e0:b1:46:ae:
ab:c4:c5:af:35:57:c2:f2:9c:73:cd:cb:75:d0:7e:d6:2f:91:
77:3e:a4:a7:c5:bc:22:c1:b3:01:cf:8b:00:40:7c:87:6d:21:
77:c2:9c:c9:f0:97:fe:78:5e:cb:c2:f9:f2:a2:ab:46:d7:2d:
ee:8e:84:09:2e:36:ff:5c:99:8f:64:80:2a:03:23:02:87:15:
9f:e6:62:63:57:8b:67:ee:a8:53:1f:47:64:79:e6:86:62:d4:
c7:01:bc:ba:a7:87:15:8f:1b:cc:f8:5d:56:c8:35:2b:5d:72:
db:17:be:7f:d6:d8:bd:2e:b8:8b:a7:23:48:3c:2c:f8:35:af:
a7:ee:63:fd:0f:55:29:73:03:b2:68:c1:99:c3:cc:d8:ed:48:
06:58:28:fe:62:f2:74:83:9c:cf:d5:40:0c:82:f8:30:71:d4:
da:4c:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:46:17 2025 by rpki-client