Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: snWBA93Jz0Ep0pMEzQ8gXtcaC5MQsY4+CcSG2sMoC08=
Subject key identifier: 32:34:BA:15:ED:42:78:19:79:64:5F:55:B2:6F:5B:7B:D8:B4:04:5F
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 019A503E2D642A40C03E0E378BD94DDDA8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0D64
Signing time: Tue 04 Nov 2025 19:00:43 +0000
Manifest this update: Tue 04 Nov 2025 19:00:43 +0000
Manifest next update: Wed 05 Nov 2025 19:00:43 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: KsLv3x0gMIlai9sQbGSiQBnbhpkWNsT80O+GoaEQ4PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:2d:64:2a:40:c0:3e:0e:37:8b:d9:4d:dd:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Nov 4 19:00:43 2025 GMT
Not After : Nov 5 19:00:43 2025 GMT
Subject: CN=3234ba15ed42781979645f55b26f5b7bd8b4045f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:95:b5:76:05:75:99:b7:f5:47:f1:b5:10:
9e:7a:dd:1a:42:be:b7:d9:4b:79:35:9c:90:3f:4a:
bf:c5:21:18:32:9b:8f:5b:fc:aa:ad:40:58:e6:f5:
48:35:64:13:b0:07:eb:6c:31:16:0b:9a:80:c6:1d:
93:1e:bb:69:bc:6c:7b:7c:47:f8:24:91:fa:59:7b:
12:c1:1d:1e:65:ed:1b:72:f6:9a:44:f4:6e:b0:bc:
ba:fe:29:5a:e4:5c:a0:ed:b9:d3:7d:1f:2d:73:64:
f1:06:e7:6b:a9:78:f1:01:fb:75:2b:80:df:7e:3a:
67:d6:5e:49:92:da:f7:39:a7:44:26:37:63:9b:ba:
bd:f6:ec:83:3c:e8:dc:57:b3:d9:83:6c:b3:73:e5:
01:07:c3:fe:bf:c3:f4:e3:d7:ee:a3:ed:2b:5b:fa:
3a:fb:d5:b1:3a:e5:2e:89:9c:f1:15:19:b8:0a:d8:
8f:7e:15:10:15:42:09:c8:92:05:d5:49:e6:e4:32:
f7:81:77:82:b5:cf:1a:11:57:c3:d3:51:35:7b:15:
51:e1:5d:72:97:17:e1:2a:3c:e3:96:c3:4a:0a:ca:
98:6f:4b:4e:84:77:87:20:af:16:4b:5d:aa:ec:33:
4c:20:cf:c1:0f:a7:cc:be:5d:1a:eb:6e:9c:77:6f:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:BA:15:ED:42:78:19:79:64:5F:55:B2:6F:5B:7B:D8:B4:04:5F
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:16:8f:d7:24:28:cc:f7:bf:6b:23:cd:18:9f:b4:3d:c7:02:
3b:75:c8:a5:ed:8e:93:82:aa:d7:e6:e9:d0:01:02:39:6a:df:
de:77:ef:3b:c1:36:a5:c8:ac:eb:5e:9a:10:53:81:c4:c3:69:
db:43:d1:e6:2f:99:0a:b8:b5:a1:8e:4d:6f:6d:d2:65:68:b7:
46:64:a9:1e:74:c8:16:d4:11:23:b1:e2:5c:f8:69:08:bf:d8:
58:d4:e4:b1:1c:93:2f:76:80:01:a0:ca:1e:79:0e:c0:1c:b3:
9b:b7:ee:a6:cc:58:5f:08:a7:3f:ff:40:ea:6a:58:a4:ac:2f:
61:81:6a:fc:41:8d:37:00:39:f4:b9:08:57:ea:5d:13:72:52:
a7:36:9c:c4:5b:d6:83:ea:c0:87:9f:00:42:48:d2:5b:13:33:
c4:c1:f0:15:89:18:27:3f:87:86:72:df:28:7e:93:72:4e:ae:
d6:21:57:53:39:50:e8:3e:e1:b1:9e:9c:52:c6:0e:21:2f:9d:
00:77:ec:b3:53:e8:18:95:3a:ce:4b:05:1e:91:ae:f4:f6:60:
31:dc:4e:0a:87:c4:77:d1:ae:b3:86:8d:04:7c:fb:92:7d:b5:
a3:e0:92:70:cc:29:54:6b:15:3a:ba:8e:59:5d:ae:2f:d3:3f:
53:68:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:53 2025 by rpki-client