Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: iIariDpYG+GuRDBSntVTwhGkw3uXehZ9GA75wputyJw=
Subject key identifier: 08:AA:BD:BA:CA:58:74:66:DD:1B:B0:B4:30:17:BE:3D:AC:75:2B:0D
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0198D6608A2ECCC09841B9B38AF40F0FAA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 1592
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: 2k3L0e13hvUkY0wC8HIr8jTIzqtvJoRQdtcyRUDH3nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8a:2e:cc:c0:98:41:b9:b3:8a:f4:0f:0f:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=08aabdbaca587466dd1bb0b43017be3dac752b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:43:ac:21:60:b9:e9:ad:88:d3:8b:44:5f:
85:09:b9:eb:e3:b5:16:d7:e5:e9:04:22:24:2c:e5:
41:f0:ba:ba:3f:f6:1c:b8:ce:7c:82:6d:58:c8:c0:
91:59:41:11:3f:4f:d3:e9:67:b9:65:27:2f:48:02:
b6:cd:a5:55:ea:dd:fc:e4:b3:cf:59:67:73:90:28:
c7:30:e3:ee:97:a8:97:25:5b:29:8b:23:05:83:9d:
e0:5b:20:51:73:15:6e:a0:8f:11:86:c3:26:46:49:
a9:2e:d6:42:1d:7c:65:82:a8:7f:06:63:63:4d:ef:
cb:29:9f:48:38:e4:f0:3c:c1:65:2b:71:eb:bf:bf:
03:d5:57:f2:f0:c7:60:89:b8:c6:9a:0f:e1:29:60:
89:6c:be:f0:57:95:e4:3f:b5:2e:10:2d:b4:04:40:
8e:7f:25:f1:da:ed:80:fc:a1:af:d5:07:e4:57:61:
d6:6a:b4:df:fa:83:3b:00:41:1d:36:ab:d1:97:b8:
7a:e8:21:aa:1d:a6:ac:a6:e0:73:89:4b:1e:a0:08:
02:dc:87:53:fe:c9:62:51:90:cd:6b:bf:52:c2:08:
61:4f:f0:f1:ea:c0:d5:6e:f7:a4:e5:be:0d:64:19:
0d:82:da:9d:83:40:a0:87:62:d1:a2:6c:69:8e:0c:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:BD:BA:CA:58:74:66:DD:1B:B0:B4:30:17:BE:3D:AC:75:2B:0D
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:32:62:9d:30:80:59:66:d6:1b:ee:8b:d6:4f:52:65:7e:ef:
bf:9a:05:a6:e9:26:ee:09:0d:19:47:a7:44:ca:87:b8:f6:5f:
1a:32:38:65:2b:f0:1c:45:0a:57:5e:5c:b7:f5:92:24:46:e0:
7d:de:73:72:2a:31:89:85:15:41:f6:94:c6:dc:9f:65:51:e3:
6d:4e:b7:07:7e:6a:34:68:04:39:88:fb:55:2a:f0:25:35:3b:
13:bc:14:a1:6a:33:bb:3e:3f:ec:5b:95:93:da:fd:40:cf:7a:
14:8e:ba:74:77:a0:94:c7:e1:49:99:c1:2a:8a:bd:a2:9b:20:
74:c1:de:c1:21:fb:65:b8:f6:9c:ba:aa:6d:76:81:31:a4:fa:
78:f3:9f:fc:d3:b4:f6:3f:59:e3:c2:96:f2:02:78:3b:61:53:
79:9b:3e:e9:37:9f:be:5b:ec:87:f0:da:5f:6f:2e:30:25:cc:
ee:36:7b:72:82:03:db:a7:8f:f6:c3:4a:ca:b2:ee:2e:b1:85:
51:92:7d:1f:78:dd:ea:9d:50:46:1b:fa:c3:24:2e:f0:96:f8:
8e:7f:89:76:28:e7:00:8f:64:49:34:fb:c4:56:a7:d4:89:4e:
1f:f7:3c:ce:63:f6:a8:9f:27:a4:b8:01:8c:24:7e:4c:c1:c9:
4c:d9:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:34 2025 by rpki-client