Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: v4m8kv57fDN8ho8CftcYbH6ciiwAnPpkecHHXlnbbpM=
Subject key identifier: A2:A7:F3:0A:04:ED:70:87:E0:40:42:D1:4C:07:B6:4C:8C:97:E2:50
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 01976D070860893DB4B4A4B2964D70A2229E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 14D7
Signing time: Sat 14 Jun 2025 06:01:06 +0000
Manifest this update: Sat 14 Jun 2025 06:01:06 +0000
Manifest next update: Sun 15 Jun 2025 06:01:06 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: Z4xdHUbxM4ceHxS27cxst3GimjcJktedVwLBDrlWTFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:07:08:60:89:3d:b4:b4:a4:b2:96:4d:70:a2:22:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jun 14 06:01:06 2025 GMT
Not After : Jun 15 06:01:06 2025 GMT
Subject: CN=a2a7f30a04ed7087e04042d14c07b64c8c97e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:dc:1b:de:36:93:c0:6b:36:3d:0d:db:32:
01:fa:79:4d:57:32:10:5e:e5:4a:90:da:9a:fb:7b:
88:9e:32:f7:5d:aa:dc:7e:02:37:cc:50:c8:71:3a:
48:07:7f:ee:92:5b:18:7b:6c:28:ab:bc:1b:6f:94:
6e:00:46:8a:78:6a:f9:8e:49:17:3b:68:11:d3:0d:
8e:eb:92:d0:85:e8:79:f3:49:82:5e:09:14:53:26:
48:ed:1d:b0:23:c5:61:87:62:1a:5f:86:35:ce:31:
75:c8:f5:47:18:8e:a8:61:97:ca:6c:da:ee:9f:80:
3d:db:16:20:d2:35:65:15:47:58:1a:af:05:fc:54:
f6:87:d3:fe:4b:e1:1a:90:ee:d7:7d:88:68:9e:83:
29:28:37:45:e0:ce:a3:08:61:68:7f:0a:88:1a:1f:
69:d8:ea:f1:f9:46:f7:46:2b:cd:79:28:25:75:bb:
4e:29:51:cd:07:de:e3:d1:d7:99:5c:69:c7:ef:ff:
25:ea:ff:e3:78:f4:d5:72:0e:5b:e4:70:1c:1a:34:
46:29:31:0e:40:b1:30:0b:ef:fb:cb:0d:cd:26:ff:
8a:44:c6:cb:1b:4c:bb:db:73:0f:19:02:13:8b:37:
9f:f4:f8:df:f2:bd:74:1b:72:b4:d6:82:de:d5:e3:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:F3:0A:04:ED:70:87:E0:40:42:D1:4C:07:B6:4C:8C:97:E2:50
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ff:10:45:9f:4b:7d:81:86:6f:20:aa:94:8b:66:19:99:bf:
8e:aa:8b:91:22:66:58:c5:a1:c7:1a:e8:1b:88:2e:2e:4a:23:
d4:3d:34:e3:96:0e:7e:6c:0a:f8:d5:73:64:41:1d:d3:01:12:
2e:c0:b4:87:ea:79:7f:13:e7:01:db:55:0d:17:96:98:0e:17:
45:61:86:42:d1:11:41:35:ef:6d:0a:20:e3:fc:7f:85:07:65:
61:db:01:07:a7:48:21:72:9a:cb:ad:b1:7c:06:02:71:b8:1a:
bd:0f:d5:50:32:f9:be:f9:7f:d1:56:81:e8:4c:ba:8c:5e:bf:
a2:e8:c3:b2:a0:c7:2f:d8:ab:0b:7c:61:82:3c:6d:6d:a1:08:
b5:ab:7a:c9:7b:e3:6c:d2:47:b2:1c:0a:8a:a5:57:4b:bb:21:
4e:fb:c7:90:4c:39:84:d5:3f:34:88:bf:58:39:bd:92:d8:6f:
7b:f5:73:d4:1d:98:52:ae:5d:1e:7d:85:25:2d:57:8f:92:5b:
93:57:6d:a5:0a:3e:8a:3c:37:94:c1:a4:ff:97:07:27:6a:23:
d0:63:b3:c7:55:bf:24:f1:c5:b7:13:19:2d:a7:2a:de:b0:fc:
d1:84:f5:96:44:4d:e7:6e:38:cc:ac:2b:f7:a6:7c:27:23:a8:
48:77:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:23 2025 by rpki-client