Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: 0UPvRXBw7AN5Ay1cEMwCg//aeuhMQvGxVFd0eY53B9o=
Subject key identifier: 09:F0:C5:2C:7F:54:1E:CB:FD:0F:55:87:5C:BC:9F:D4:1F:4B:76:4A
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0196BD49313D3CADC1C0B8F60B29622D7820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 147C
Signing time: Sun 11 May 2025 03:00:12 +0000
Manifest this update: Sun 11 May 2025 03:00:12 +0000
Manifest next update: Mon 12 May 2025 03:00:12 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: ZV4JTK9atX7xN9Tx+xMQEKGROg/jU10aMhP8RxvWgaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:31:3d:3c:ad:c1:c0:b8:f6:0b:29:62:2d:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: May 11 03:00:12 2025 GMT
Not After : May 12 03:00:12 2025 GMT
Subject: CN=09f0c52c7f541ecbfd0f55875cbc9fd41f4b764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:38:d7:00:3d:31:37:ca:a3:3b:d4:8c:db:
c6:9f:5a:73:20:5d:ba:16:a5:48:88:6a:30:7c:6c:
ab:60:8e:b8:4a:7a:fc:17:18:b3:11:a4:3f:c8:8f:
60:a4:62:84:24:64:9f:32:d3:93:a6:74:b8:34:5f:
f5:90:b1:cf:83:8b:b6:eb:a8:95:73:59:0e:40:56:
29:fe:61:e4:28:59:12:77:cb:b0:7e:93:2d:a8:86:
54:1d:5b:79:dd:26:50:30:e5:86:31:b7:ee:55:8b:
e2:65:ef:8a:b5:f0:b5:42:a0:d4:08:35:58:45:2f:
17:2f:89:ef:fd:a3:41:f6:bc:90:0b:69:e4:69:8c:
de:99:ab:02:9f:0c:92:f3:81:74:1b:b8:ed:eb:f9:
68:e1:c8:15:f2:4d:95:72:f7:72:7f:2d:35:fd:8f:
02:2f:41:81:a7:33:07:d9:bd:6d:08:f4:72:87:54:
56:24:7b:6e:bb:84:9c:34:a5:7a:c6:d1:f0:84:02:
24:2e:28:cc:b4:36:aa:ef:ed:ab:54:9e:d4:af:e7:
57:24:8d:89:a8:ee:d0:21:0d:28:10:61:4b:0c:49:
2d:0f:81:b9:75:21:49:36:e7:f0:df:8f:0f:9b:e9:
ff:8a:54:fa:99:ba:99:c0:6f:10:44:65:07:84:6e:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:C5:2C:7F:54:1E:CB:FD:0F:55:87:5C:BC:9F:D4:1F:4B:76:4A
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:e9:af:c3:c5:aa:ad:1b:f8:74:5e:96:51:c8:fc:78:d1:
ac:8b:7b:6f:c3:f6:f9:88:5c:76:5d:ae:f8:91:4a:c2:48:41:
ed:bf:4d:a8:bd:67:08:8d:fc:e2:bb:7e:74:2e:c2:b2:17:f0:
c3:4d:fe:cf:3f:62:8b:b7:1f:c0:d9:85:b0:46:6c:b8:7a:a4:
4c:ec:17:c3:b4:4c:67:9c:c6:b5:49:d3:58:73:0b:95:76:69:
07:98:86:cc:bb:ab:5f:5b:0f:eb:ea:6e:97:5b:8e:64:7b:d2:
13:79:9b:80:df:42:e2:6e:77:00:4e:58:c7:a4:39:b8:c2:ae:
38:50:81:78:2a:a8:a8:f5:36:e8:09:b0:0a:e3:bc:17:43:08:
99:77:1e:b3:4c:6e:fa:c2:7a:b2:57:b3:21:2a:2e:0f:0d:c6:
2d:b3:0f:0d:a9:9e:91:c8:ab:cd:90:2a:52:a5:07:f1:31:1a:
be:a9:ce:dc:a6:6c:1e:f0:11:23:d4:6f:9e:89:7b:80:a3:69:
58:85:e2:11:8f:fb:a9:95:cb:5c:ad:66:f0:e7:14:0a:6d:b7:
d1:45:18:41:c9:50:97:ed:a1:ed:40:55:71:87:bc:a4:a8:9a:
d8:bb:37:02:c1:16:83:e4:10:fe:0b:9c:ca:38:d2:c0:31:5b:
53:3f:c3:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9STE9PK3BwLj2CyliLXggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy
YTNjZTgwHhcNMjUwNTExMDMwMDEyWhcNMjUwNTEyMDMwMDEyWjAzMTEwLwYDVQQD
EygwOWYwYzUyYzdmNTQxZWNiZmQwZjU1ODc1Y2JjOWZkNDFmNGI3NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyw41wA9MTfKozvUjNvGn1pzIF26
FqVIiGowfGyrYI64Snr8FxizEaQ/yI9gpGKEJGSfMtOTpnS4NF/1kLHPg4u266iV
c1kOQFYp/mHkKFkSd8uwfpMtqIZUHVt53SZQMOWGMbfuVYviZe+KtfC1QqDUCDVY
RS8XL4nv/aNB9ryQC2nkaYzemasCnwyS84F0G7jt6/lo4cgV8k2Vcvdyfy01/Y8C
L0GBpzMH2b1tCPRyh1RWJHtuu4ScNKV6xtHwhAIkLijMtDaq7+2rVJ7Ur+dXJI2J
qO7QIQ0oEGFLDEktD4G5dSFJNufw348Pm+n/ilT6mbqZwG8QRGUHhG69LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnwxSx/VB7L/Q9Vh1y8n9QfS3ZKMB8GA1UdIwQY
MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAHpr8PF
qq0b+HRellHI/HjRrIt7b8P2+Yhcdl2u+JFKwkhB7b9NqL1nCI384rt+dC7Cshfw
w03+zz9ii7cfwNmFsEZsuHqkTOwXw7RMZ5zGtUnTWHMLlXZpB5iGzLurX1sP6+pu
l1uOZHvSE3mbgN9C4m53AE5Yx6Q5uMKuOFCBeCqoqPU26AmwCuO8F0MImXces0xu
+sJ6slezISouDw3GLbMPDamekcirzZAqUqUH8TEavqnO3KZsHvARI9Rvnol7gKNp
WIXiEY/7qZXLXK1m8OcUCm230UUYQclQl+2h7UBVcYe8pKia2Ls3AsEWg+QQ/guc
yjjSwDFbUz/DoQ==
-----END CERTIFICATE-----
Generated at Sun May 11 06:23:57 2025 by rpki-client