
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: 0zLykIH+mYKIJk4KUutBucvpG3A04/vs/J6km+LAfFg=
Subject key identifier: 46:07:5E:BD:E7:D9:72:D0:E0:04:B7:8D:1F:AF:76:96:D3:85:8E:AD
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 0198733D816FDE4D287194A783776E2B543B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0C6D
Signing time: Mon 04 Aug 2025 04:01:07 +0000
Manifest this update: Mon 04 Aug 2025 04:01:07 +0000
Manifest next update: Tue 05 Aug 2025 04:01:07 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: X282e8/6A83oVb4yc/yDduLJ42919RmREJhmB1Q+H1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:81:6f:de:4d:28:71:94:a7:83:77:6e:2b:54:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Aug 4 04:01:07 2025 GMT
Not After : Aug 5 04:01:07 2025 GMT
Subject: CN=46075ebde7d972d0e004b78d1faf7696d3858ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:91:d7:85:04:ba:e8:5f:fb:b1:c5:51:c4:
55:24:8d:84:5f:79:00:3f:39:79:09:42:28:b2:ea:
da:d1:6d:14:2d:96:f7:b8:fd:5a:39:91:94:29:b5:
95:a3:31:b7:a1:9e:81:6e:da:c0:91:e8:f2:d4:9a:
72:89:e3:c8:32:75:69:29:6e:6d:98:0f:87:ff:60:
4e:3f:52:75:68:e3:f9:8a:58:c6:89:07:f3:76:1d:
aa:11:8d:4a:ca:1d:37:c2:cc:7d:7e:81:97:b9:d3:
e3:a3:d8:52:fc:12:89:3d:73:9b:d3:e8:a9:58:b3:
4c:da:a4:76:b5:72:b7:8f:ad:d7:a8:6a:3e:fe:d4:
b9:b9:db:70:02:b6:ea:ed:2a:d4:70:d0:41:b4:1d:
82:a7:38:3b:41:91:7a:00:b0:44:ad:32:48:64:91:
eb:21:7c:f6:df:fe:07:45:7a:92:9d:27:4c:00:56:
f0:49:de:90:26:3a:93:4f:2a:4f:6d:e7:a5:c7:c4:
52:76:37:07:3f:ad:b3:45:fa:72:fb:cd:aa:1e:46:
c5:f2:60:62:8e:6d:16:44:df:90:22:0e:40:23:2f:
48:e6:49:0d:36:dc:13:97:31:a0:40:b2:d0:06:d2:
32:9e:e2:ac:87:ca:b0:c7:67:e2:db:45:84:65:cb:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:5E:BD:E7:D9:72:D0:E0:04:B7:8D:1F:AF:76:96:D3:85:8E:AD
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6a:a6:d8:2f:73:51:76:85:07:4d:2d:b9:ab:76:2b:28:ed:
b8:2f:6f:21:bf:3d:32:43:3d:ec:51:3e:e6:d3:b5:02:af:d6:
fa:0e:b0:94:57:f8:0f:ad:78:11:0b:33:ca:50:7c:ca:15:3f:
04:83:01:57:b7:9e:a8:5a:95:66:bf:0c:8f:7e:af:d6:20:cc:
d5:eb:dd:78:f3:30:06:84:1b:83:3c:71:e6:09:ba:55:8d:b3:
8d:d8:15:fa:92:64:e5:f5:36:ef:6b:17:fa:92:34:be:4f:ed:
79:00:90:d7:c6:2f:4b:94:e9:92:e6:22:11:3d:45:83:09:c0:
16:73:6a:cb:c8:fb:85:6a:7f:67:93:8e:7c:02:87:1c:4f:eb:
c1:18:01:08:10:97:3e:7e:20:96:2f:ef:77:31:31:41:67:c0:
95:9a:e4:37:a2:e4:e3:62:32:0e:79:ea:0f:29:d9:bb:f6:60:
40:b2:80:b8:0b:85:7b:ee:43:67:94:c8:52:49:33:39:b0:d9:
3a:50:99:3e:2f:5e:e5:4a:36:1b:e0:01:2d:6a:62:7d:af:53:
c1:db:b7:e1:30:32:83:96:92:f2:e8:6c:75:1b:3d:6d:ac:ac:
4a:54:28:47:e7:87:2c:e0:50:18:b5:5a:61:b8:0b:5e:ee:07:
95:98:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:26 2025 by rpki-client