Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: vS/NrCfB1zd8oyY36v+z6IVf7Zi1mnfijle0s4IHmTM=
Subject key identifier: 58:44:66:D4:B3:9C:2B:CA:74:A1:0F:67:C1:D5:04:11:3C:CA:3F:5F
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 019675D558FD263886BA36579CFB67841784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 1457
Signing time: Sun 27 Apr 2025 06:00:38 +0000
Manifest this update: Sun 27 Apr 2025 06:00:38 +0000
Manifest next update: Mon 28 Apr 2025 06:00:38 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: Rm6rj4BBdhQ2frphbS2YQNdmseZG35gKwmb0BwAouys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:58:fd:26:38:86:ba:36:57:9c:fb:67:84:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Apr 27 06:00:38 2025 GMT
Not After : Apr 28 06:00:38 2025 GMT
Subject: CN=584466d4b39c2bca74a10f67c1d504113cca3f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:df:e0:8d:7d:44:ac:79:8c:7e:b5:3b:28:
0c:45:b2:58:6f:63:18:c3:8b:7d:ea:36:6b:6a:2e:
bc:8f:70:7c:43:7b:8f:51:bf:92:be:ee:b8:90:a1:
60:20:36:81:1d:5a:27:c1:bd:1f:c9:7e:f1:79:1c:
f6:78:0a:b3:71:5a:50:40:e5:44:83:4e:7a:47:96:
2a:83:89:93:88:75:77:b1:06:b6:65:30:6e:c3:34:
e7:a4:8d:c0:d4:04:bc:b7:1f:4e:78:8e:63:00:d1:
88:4b:dc:b5:80:7b:a5:05:79:f7:f7:b5:ee:9f:e0:
3a:9d:84:c9:ea:c7:a3:5b:c4:36:ce:6a:0a:6f:16:
0e:3a:30:20:34:ca:90:37:28:5a:0a:14:f5:d7:d6:
33:bd:98:bf:6b:39:3e:33:92:4d:fa:90:12:eb:03:
28:6e:09:3c:32:20:53:56:40:12:59:6e:d1:0a:70:
73:5a:fc:6a:df:0b:40:76:87:ff:a9:76:be:b1:4e:
18:b4:05:fd:95:74:82:f9:12:d8:b5:53:e0:d3:44:
cb:94:31:af:51:e3:53:e5:0c:9b:2c:aa:d1:f3:8f:
83:62:e9:1c:39:eb:fc:9e:aa:88:38:e7:47:2f:1f:
99:c3:e2:15:d7:83:f9:b5:f7:3a:ee:00:80:1c:8b:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:66:D4:B3:9C:2B:CA:74:A1:0F:67:C1:D5:04:11:3C:CA:3F:5F
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:8b:b5:32:ac:c1:6a:ce:05:23:11:dc:c0:d4:b4:9c:5a:4b:
c7:da:10:3b:9a:7f:14:5a:35:89:ed:7d:5a:dc:9a:46:1c:ff:
52:e3:9f:80:d6:be:97:b2:91:3f:c8:06:a4:7e:aa:da:0c:e4:
7c:04:d6:95:e9:07:e1:b8:ec:3e:c4:da:32:bc:55:52:f6:80:
71:e8:0c:20:3d:2d:27:3d:89:dc:eb:a7:94:e7:42:db:be:3d:
c7:9b:f7:69:1f:f1:be:94:33:49:9c:8f:68:37:9e:bb:01:c4:
65:83:89:fc:9f:b4:88:d2:0f:28:5a:2b:e0:80:9e:34:36:05:
b3:5f:1d:3a:b6:de:02:3a:67:f1:ac:1a:a1:03:7d:18:7f:78:
5c:16:39:d0:b4:18:9c:a4:fb:1b:bc:93:40:a8:77:d2:0b:4d:
28:5f:3b:c7:fa:23:9f:2d:84:90:79:7c:e0:aa:ac:c5:68:bc:
e6:be:38:f5:58:74:71:61:37:65:9a:a5:da:f9:74:f9:9e:28:
43:cd:19:ed:be:34:6b:32:97:ad:27:bd:9e:57:e1:c3:ac:89:
60:10:88:b7:4e:51:dd:02:72:43:fb:66:78:cf:f4:07:1c:90:
fa:25:f2:93:9d:d3:e9:ee:b7:0a:98:1c:33:be:92:c3:f4:ba:
76:1a:58:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11Vj9JjiGujZXnPtnhBeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy
YTNjZTgwHhcNMjUwNDI3MDYwMDM4WhcNMjUwNDI4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg1ODQ0NjZkNGIzOWMyYmNhNzRhMTBmNjdjMWQ1MDQxMTNjY2EzZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvTf4I19RKx5jH61OygMRbJYb2MY
w4t96jZrai68j3B8Q3uPUb+Svu64kKFgIDaBHVonwb0fyX7xeRz2eAqzcVpQQOVE
g056R5Yqg4mTiHV3sQa2ZTBuwzTnpI3A1AS8tx9OeI5jANGIS9y1gHulBXn397Xu
n+A6nYTJ6sejW8Q2zmoKbxYOOjAgNMqQNyhaChT119YzvZi/azk+M5JN+pAS6wMo
bgk8MiBTVkASWW7RCnBzWvxq3wtAdof/qXa+sU4YtAX9lXSC+RLYtVPg00TLlDGv
UeNT5QybLKrR84+DYukcOev8nqqIOOdHLx+Zw+IV14P5tfc67gCAHIsqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhEZtSznCvKdKEPZ8HVBBE8yj9fMB8GA1UdIwQY
MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Iu1MqzB
as4FIxHcwNS0nFpLx9oQO5p/FFo1ie19WtyaRhz/UuOfgNa+l7KRP8gGpH6q2gzk
fATWlekH4bjsPsTaMrxVUvaAcegMID0tJz2J3OunlOdC2749x5v3aR/xvpQzSZyP
aDeeuwHEZYOJ/J+0iNIPKFor4ICeNDYFs18dOrbeAjpn8awaoQN9GH94XBY50LQY
nKT7G7yTQKh30gtNKF87x/ojny2EkHl84KqsxWi85r449Vh0cWE3ZZql2vl0+Z4o
Q80Z7b40azKXrSe9nlfhw6yJYBCIt05R3QJyQ/tmeM/0BxyQ+iXyk53T6e63Cpgc
M76Sw/S6dhpY5w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:27 2025 by rpki-client