Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: Lkn7DFjoKo4C9t3N5NsMJAyYIEf60OTqqXDoNBe+ucE=
Subject key identifier: AE:C0:27:F1:42:BF:CD:19:D4:11:5D:3A:A2:C3:8A:D1:4B:FB:10:F8
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 01984B5429357E33AAB2959C564F57A548FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 154A
Signing time: Sun 27 Jul 2025 10:01:03 +0000
Manifest this update: Sun 27 Jul 2025 10:01:03 +0000
Manifest next update: Mon 28 Jul 2025 10:01:03 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: DTs/XVDU+5aMUL+TaViI+uBmsnwSveoZMTumZauFgSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:29:35:7e:33:aa:b2:95:9c:56:4f:57:a5:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jul 27 10:01:03 2025 GMT
Not After : Jul 28 10:01:03 2025 GMT
Subject: CN=aec027f142bfcd19d4115d3aa2c38ad14bfb10f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:b7:79:de:f5:89:ae:04:4c:27:c9:d2:76:
3c:95:ae:da:23:de:d9:2d:5f:b7:48:29:b1:37:99:
5f:f1:75:8e:1e:e3:ef:ff:29:88:3e:65:9c:a0:0e:
8a:90:da:f5:40:74:7f:73:dd:34:da:c3:d0:97:68:
1c:db:11:a6:d9:20:49:53:16:1e:89:a0:d3:0b:87:
5d:46:da:03:25:59:b1:10:d4:a9:db:7c:25:7c:46:
2b:f0:07:67:08:fb:b6:f2:3c:71:2e:bb:30:b2:3c:
8f:b7:80:9b:9a:4a:e0:d0:3a:1e:10:80:67:9b:f7:
cd:8e:72:d9:da:12:83:cd:c7:d3:fe:be:2a:aa:19:
3f:1f:bb:f1:18:8d:de:1e:84:d7:b1:98:a4:48:f9:
1c:13:f7:a4:9d:f1:8c:07:b0:48:d2:b2:81:96:2a:
14:cf:7c:1d:fe:67:8b:20:0f:d3:2c:65:32:18:68:
a8:fe:70:8a:3c:25:fa:48:18:8c:b4:e8:dc:b7:1d:
72:90:a8:90:a4:6b:17:33:be:39:b3:f7:26:90:17:
5b:99:96:5f:5a:a6:4e:f1:80:ba:26:ec:6f:76:2d:
98:85:ca:0c:75:db:3f:10:dc:c9:ca:f7:c4:eb:03:
4f:76:fb:30:a1:23:e8:3a:52:d3:2a:ec:5f:8e:d5:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:27:F1:42:BF:CD:19:D4:11:5D:3A:A2:C3:8A:D1:4B:FB:10:F8
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d0:76:83:e5:2c:2e:5d:1c:7f:d8:cf:f5:9a:18:d7:ff:47:
9b:80:d8:e2:a3:c8:b1:10:ba:5f:24:b4:25:5c:b9:7c:b5:44:
8e:3b:36:87:6c:4d:fb:06:12:10:ea:80:2d:15:3d:cb:d6:6e:
d5:06:48:17:f2:09:6c:c3:79:30:83:80:84:f1:43:05:ea:8d:
0c:e5:81:7d:79:42:da:5a:2e:9d:f7:b4:0f:2a:ce:e4:05:14:
0d:7b:9b:94:f8:08:f3:bc:e5:1c:67:a0:2f:16:0e:4b:b9:41:
83:9b:ee:f1:46:f6:28:35:19:89:77:25:84:f9:74:ef:ad:e7:
49:e2:df:11:96:b6:06:8d:7b:9f:cd:1f:18:1e:bf:fb:e9:46:
f3:6a:b1:1c:f9:38:43:45:eb:a8:95:1f:4f:ab:6a:33:3f:ab:
24:a2:73:ab:65:cb:16:bb:38:82:8f:5a:60:b7:2d:7a:6b:65:
eb:84:1c:b2:99:7b:5c:83:e8:f0:7f:b4:a3:6a:21:51:21:63:
bb:26:44:d5:bf:22:d7:fb:bc:4d:fa:9b:ed:a5:b6:fb:4f:be:
12:35:7a:b8:18:90:30:a3:a4:e8:f8:ba:c6:10:43:bf:58:d9:
a2:7d:7a:eb:27:96:22:d7:a5:fd:ab:5a:06:6c:de:64:e3:f6:
6a:33:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:36:24 2025 by rpki-client