Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: /mGWZoz//kkDBlMb6vXsVpT4A46a1gPKvn0FqerMs98=
Subject key identifier: 3A:25:54:94:CB:19:52:62:26:A9:BD:87:24:9B:30:96:A5:30:56:25
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 01995BA1107DBC9E0184E464DA02720C609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 15D7
Signing time: Thu 18 Sep 2025 07:01:46 +0000
Manifest this update: Thu 18 Sep 2025 07:01:46 +0000
Manifest next update: Fri 19 Sep 2025 07:01:46 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: VGjCOYK9J/FIjON+/Q2eg0w8SWhI2fs0B2wUBKuVSiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:a1:10:7d:bc:9e:01:84:e4:64:da:02:72:0c:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Sep 18 07:01:46 2025 GMT
Not After : Sep 19 07:01:46 2025 GMT
Subject: CN=3a255494cb19526226a9bd87249b3096a5305625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:72:c8:fb:18:9d:a9:89:33:c7:7b:ac:d5:
5d:81:fd:a6:84:da:d1:1c:64:39:4e:e1:95:3c:83:
10:53:58:99:4e:05:72:6c:60:c2:37:86:b6:9b:35:
e1:4e:cc:f1:57:8b:79:8f:69:74:7d:7c:84:4f:ee:
e6:ca:56:cb:fe:bf:aa:81:ca:93:e5:b4:98:6e:5e:
96:b2:e4:0a:ba:b2:50:89:db:81:d1:18:b8:c7:6c:
02:49:f2:8b:4a:ff:ec:d7:50:90:1e:60:da:cc:23:
87:42:2c:bc:a6:ae:c4:0d:8c:2b:49:d3:ca:2e:23:
86:70:88:98:2e:9a:e5:81:5e:6c:e0:9a:68:4b:ed:
a1:3e:e4:b1:6b:26:a0:4f:ec:d3:62:c1:27:a6:3a:
c5:a9:a3:cf:22:7a:e6:35:9f:74:85:0a:42:d5:02:
73:c1:2a:7f:36:85:e3:96:cc:ab:96:59:a7:84:bb:
71:71:29:60:fd:a4:11:67:aa:ba:8a:12:12:d0:58:
c8:c7:77:ec:d0:11:04:2e:7c:44:72:b0:60:e7:fc:
bc:cc:af:24:58:75:fa:f9:f8:8e:38:a1:e6:f0:b4:
85:5f:67:08:7e:12:e9:c6:45:c3:e1:1c:9f:de:28:
00:cc:7a:e8:8e:6a:01:42:c1:1e:bd:9b:6e:33:34:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:25:54:94:CB:19:52:62:26:A9:BD:87:24:9B:30:96:A5:30:56:25
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0f:83:f0:a2:26:a6:3f:1c:c6:59:78:ab:f8:ec:26:24:a5:
1a:cd:b7:a1:f3:67:54:23:46:e7:6e:0a:8c:e6:e4:5b:88:cd:
03:5f:07:a6:ef:94:04:7a:9c:61:dd:02:25:7a:4a:02:8a:de:
76:62:b2:e5:50:7a:45:ce:19:ba:8a:07:5e:99:30:ab:46:02:
85:4f:b3:67:40:2a:eb:ae:8e:7b:b8:3a:22:d0:ca:5e:f1:1b:
06:ce:35:16:f3:fa:e3:76:d3:c8:ed:e4:ef:79:f5:15:b3:f1:
6b:da:e0:31:2f:7b:cd:12:8b:7b:ee:8e:7d:b7:83:f1:4a:e7:
0b:4c:b8:87:7d:51:e2:af:de:7d:5e:af:d3:31:5e:0f:72:12:
7f:b2:51:16:58:42:c6:8e:a9:58:d2:40:fe:2a:b0:02:b1:b7:
62:c3:7f:68:3c:7b:00:bd:cf:58:23:dd:af:0c:2e:1d:90:27:
1c:a9:9a:fd:a1:d3:a3:e4:e7:97:c8:fa:68:08:fc:e4:31:07:
dd:bb:a9:e1:36:ef:e2:2e:40:5e:5e:9a:cd:fe:01:8c:92:3c:
31:9d:2f:37:c9:10:26:ac:8c:ae:33:ef:4c:ce:42:4b:05:20:
0a:a4:88:f8:29:af:17:e7:7c:13:e1:83:f2:ff:e1:e9:a3:e3:
69:ab:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:16:07 2025 by rpki-client