Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: LE8YCh/UcfqBnvB/1BIaSkxCQyIH6OppsK1DNPNpVfQ=
Subject key identifier: E8:D8:87:7C:0F:FF:CC:90:2E:F3:E4:8F:15:0D:7A:9F:67:AB:5C:20
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0199FBEB90EBDD274CDD35BE01602F7CCA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 162A
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: FzHvYE7Gz1LaFEMT7o5eTMqwe3u5dYT6f57DsO0YVoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:90:eb:dd:27:4c:dd:35:be:01:60:2f:7c:ca:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=e8d8877c0fffcc902ef3e48f150d7a9f67ab5c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:7c:bc:6e:7b:eb:02:3d:92:3c:71:44:b7:
a0:c2:b3:3d:5a:f1:d5:eb:e6:bb:0e:37:92:22:82:
a8:52:4b:df:8a:64:37:f8:a0:fa:4a:5a:33:c0:90:
a4:3b:b5:0b:61:57:06:a7:36:f4:21:0b:3a:42:50:
ac:45:72:b2:9e:11:0d:54:59:a7:e3:39:8f:81:a3:
c9:d1:1b:68:e6:2e:0e:88:45:73:ea:17:b1:1e:9a:
5b:35:23:ae:cf:1b:9d:8a:67:a7:0d:57:32:22:06:
ae:2a:50:8f:80:ab:44:73:9d:82:27:50:30:ee:e5:
b7:aa:0c:2d:14:46:60:a6:88:6a:55:8c:cd:04:8d:
ed:78:3a:68:ea:fa:23:91:0a:11:7f:4c:44:40:07:
a9:14:58:cf:ff:fd:8f:13:cc:76:8e:f3:1a:89:40:
5d:52:0c:ab:5f:70:9c:3c:b0:5b:16:67:be:f6:52:
bb:81:a9:a1:7c:8a:28:2f:c4:6d:88:c4:00:d9:b0:
99:eb:e3:69:8e:e2:a8:ce:ff:2a:09:26:05:c9:d2:
88:3c:6f:69:12:8f:03:40:18:83:60:8a:e6:f5:60:
8b:49:4e:e8:e3:ea:f4:78:78:41:97:8b:d4:b7:2c:
75:1a:2b:65:46:1a:79:3b:d8:cc:76:31:b3:c1:8a:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:87:7C:0F:FF:CC:90:2E:F3:E4:8F:15:0D:7A:9F:67:AB:5C:20
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:42:83:2f:b8:ab:1e:7a:c7:70:12:d4:7d:d2:6d:64:65:cc:
7e:79:01:34:ff:5f:68:c3:e0:c7:f8:7a:25:fa:42:e7:fa:44:
c4:6d:02:35:ef:9d:34:0c:cf:d2:3a:40:16:f4:c9:c7:95:e2:
06:b0:d4:1b:76:1d:60:fc:ef:38:99:79:8e:b5:85:ad:4b:d3:
9c:e9:15:37:d5:01:ae:4e:e7:ab:6f:3b:9e:51:8f:fd:0d:8d:
83:8b:fe:96:b2:40:be:9a:1c:30:2f:a4:b8:18:45:c7:71:55:
dc:72:e6:4a:a6:11:83:b9:62:ea:0f:31:0d:00:2b:71:36:1f:
3a:04:07:2b:b1:7a:e2:32:9d:18:da:9b:a3:17:f8:02:bb:c5:
22:41:ba:3b:d0:b5:87:3b:bf:f0:b9:ac:3a:76:cf:97:ec:26:
b0:34:55:84:fa:b6:f6:4e:0a:74:d4:0b:82:60:fd:3f:f2:6a:
26:82:5b:c8:ba:8a:6e:bb:e8:75:ea:fd:8c:1b:e0:7f:88:2a:
d8:1a:cc:7d:1c:21:4f:2a:ad:31:88:59:c8:6a:0a:0e:ca:f9:
fa:42:0a:80:ef:0d:a1:b8:31:dd:3a:3b:7d:08:a3:6c:df:1d:
e0:51:d5:52:a3:d3:b1:c1:f2:22:96:24:ec:9e:2c:12:0c:81:
b3:b1:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:06 2025 by rpki-client