Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: /IDGEY2vdlTk058UujN1UUTpqf7UeV5r1NhjDOaxx5A=
Subject key identifier: 00:D2:BF:86:37:03:9D:D2:82:20:82:51:E9:98:CA:50:E4:37:B2:28
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0197C049821076629A76D26A35B885444B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 1502
Signing time: Mon 30 Jun 2025 10:02:12 +0000
Manifest this update: Mon 30 Jun 2025 10:02:12 +0000
Manifest next update: Tue 01 Jul 2025 10:02:12 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: pHfyNI/deKMUJDH+2k0LQ7dyIJobPFG9q9Q6hbqCNII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:82:10:76:62:9a:76:d2:6a:35:b8:85:44:4b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jun 30 10:02:12 2025 GMT
Not After : Jul 1 10:02:12 2025 GMT
Subject: CN=00d2bf8637039dd282208251e998ca50e437b228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:30:67:18:bc:5c:4a:d0:12:d1:0f:f2:b2:
0d:0e:32:d0:90:17:05:13:cc:e1:60:4c:cf:6a:02:
d1:06:01:2f:87:1f:d3:d3:21:ad:3f:11:57:63:84:
49:28:9c:a3:2e:85:e8:47:c8:11:45:df:14:af:4e:
26:ba:b1:5b:3a:20:9e:fa:23:82:fb:b3:12:af:8a:
4b:15:39:e7:0e:db:0f:90:4c:7d:fb:c7:51:a2:0f:
66:e6:b7:31:16:57:cd:29:45:41:d2:2d:fe:9b:d5:
d0:ce:04:3c:ef:4f:67:bc:a6:9f:5e:a2:c5:ff:a3:
a7:93:8e:b7:b4:68:f7:0e:6c:2c:ab:d2:de:02:3a:
39:b4:ff:0c:71:7c:c2:db:ad:bb:4c:af:e0:1c:f7:
e4:0a:04:88:c5:a9:0b:85:dd:26:15:a0:fe:4f:1b:
ac:5b:37:0c:dd:76:07:6d:37:8f:f5:f8:8f:da:8b:
e8:cd:a9:f2:57:5e:09:fa:e7:f0:dc:af:61:ab:42:
8e:b3:91:d7:b2:a0:50:20:f3:4a:e7:cb:bd:30:5e:
53:f5:37:ee:c3:1e:1e:80:4c:cd:c1:cd:4b:a7:77:
bc:54:5c:a4:f6:2d:b0:f8:de:41:c7:b8:6e:de:13:
2b:45:88:84:ce:0f:01:00:39:69:3f:b6:b5:71:23:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:BF:86:37:03:9D:D2:82:20:82:51:E9:98:CA:50:E4:37:B2:28
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:84:ce:d5:2e:82:d4:f7:1d:db:9a:ac:57:5c:32:72:bf:3f:
9e:2c:af:b7:fe:87:3d:52:df:d5:e6:64:47:6d:e1:92:de:29:
52:90:5e:fd:ca:4a:6c:10:8e:90:a2:cd:59:5b:74:49:51:96:
99:f4:78:04:7d:39:02:30:6c:47:a7:fa:47:59:2f:fc:ee:30:
ed:40:40:2a:61:0d:11:f6:88:e3:95:86:cc:ec:25:d2:a2:11:
21:0b:1a:62:8b:7b:1f:46:07:e4:3d:45:33:35:aa:cb:4f:e6:
84:a6:40:dd:9b:75:ef:c4:22:eb:1a:a8:99:ec:34:9b:3d:c0:
53:77:2e:24:1a:91:24:d5:ef:eb:0c:d8:b9:ff:82:4c:25:1d:
c1:8f:c7:b2:2e:d9:d7:31:97:2e:36:c7:77:5f:21:ee:f1:b9:
41:8a:53:7c:cc:5a:0a:6b:f5:a3:29:84:fd:8a:8e:c8:fb:f0:
02:aa:06:0a:49:36:f9:ce:b7:c5:be:49:90:03:6c:52:26:d5:
fd:2f:db:8e:bc:ab:20:cf:8c:7e:a0:23:c2:13:8f:32:18:80:
6c:93:f8:ad:07:1d:91:cf:46:13:3a:62:d1:e7:d6:3a:3c:82:
66:df:f1:5f:9f:5a:27:56:8d:db:81:e1:7e:41:84:e5:90:cc:
f0:a7:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:52:39 2025 by rpki-client