Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: npzkba6icykivag1VUZSf5VheUk4BpBAiF2u3EUMLNk=
Subject key identifier: 48:A3:61:EF:05:52:53:C7:2C:4D:94:87:98:64:A8:3F:14:99:19:40
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 019747E7BF123046781E4B00E8F907CA9AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0BD2
Signing time: Sat 07 Jun 2025 01:00:59 +0000
Manifest this update: Sat 07 Jun 2025 01:00:59 +0000
Manifest next update: Sun 08 Jun 2025 01:00:59 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: LHWsls3j/m/n/7Z7cLAzPlzCraAvDlFuRmxLWdavWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:bf:12:30:46:78:1e:4b:00:e8:f9:07:ca:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Jun 7 01:00:59 2025 GMT
Not After : Jun 8 01:00:59 2025 GMT
Subject: CN=48a361ef055253c72c4d94879864a83f14991940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:30:2b:77:12:47:70:46:d8:6d:91:a0:c2:
6b:79:be:cf:21:fb:5e:f3:94:b4:30:b6:df:3b:51:
82:cf:3e:7f:e7:fc:e9:ba:2c:77:ad:60:a6:9a:11:
ad:f1:33:ca:2d:61:e9:61:c6:56:80:e4:ae:3f:4e:
11:31:72:c0:38:83:68:82:60:bf:d1:e7:a9:6f:52:
33:a9:21:c9:ba:f9:d3:21:ec:71:a0:7f:2f:ad:08:
a7:fc:a6:7e:94:ee:64:51:0b:eb:cf:25:2e:0c:08:
5e:5b:58:e0:d1:31:fa:a5:5a:a0:66:46:12:76:62:
eb:f1:e0:0b:f6:b6:90:3f:a9:92:3d:11:d4:ee:6b:
75:9a:0e:f7:32:42:84:8d:a1:de:41:f4:04:78:3f:
9a:22:b9:62:5b:87:45:f3:bf:87:9b:e1:54:28:44:
1f:4e:40:65:74:0c:52:f1:14:93:8f:e5:4c:1e:11:
b2:06:b5:22:3a:94:d0:7d:b8:d6:c4:50:b8:01:08:
6d:79:db:7b:f2:b8:26:ef:7f:3a:81:8e:47:71:6c:
db:48:56:d9:66:a9:ce:13:45:73:93:2e:e0:30:92:
6e:a5:7e:52:5b:11:5e:d8:3a:d6:87:47:7e:36:47:
6e:6a:ef:29:9b:08:1e:07:4b:65:f6:ed:7c:05:c0:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:61:EF:05:52:53:C7:2C:4D:94:87:98:64:A8:3F:14:99:19:40
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b9:1f:6f:fe:dd:aa:1b:84:bf:36:0f:ef:a0:11:ca:13:1c:
64:a8:0e:39:70:9c:45:55:fb:b0:c0:07:ba:4d:18:3a:95:7c:
36:85:db:70:78:8a:f3:79:f4:80:5d:7e:cd:78:21:42:5f:ea:
bd:87:88:ec:24:49:63:30:53:ba:aa:b8:9e:49:3f:d0:e6:65:
a0:8e:15:b3:ac:4f:26:c9:e3:a4:ca:78:0f:40:bc:a9:bf:a3:
cd:c5:b8:26:e7:81:e2:38:0d:95:c0:79:39:34:7b:06:61:d6:
7b:f2:85:54:f7:60:5e:23:51:ee:f6:b4:44:b2:a1:8c:7d:21:
d7:84:00:df:77:f1:88:58:ca:2a:ba:0d:1b:69:aa:6d:05:06:
ce:25:f5:db:35:c3:0f:60:03:fa:26:e9:a2:69:20:e6:31:09:
3d:01:73:d8:cb:52:9f:b7:63:bf:35:f9:7c:2c:07:45:d7:76:
38:26:dc:63:1f:1f:db:18:db:8c:9c:6f:a7:10:9f:85:db:5d:
12:c5:4c:24:b2:d9:f6:7c:80:b6:65:ec:fe:8a:53:59:74:f3:
f4:b1:d1:9d:5b:09:fb:9d:2d:a1:90:92:23:33:56:4b:8e:5d:
8b:0d:e8:c7:f3:03:0b:d6:c1:0e:77:25:a2:0d:6a:78:74:b5:
cb:f3:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:24 2025 by rpki-client