Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json)
Hash identifier: XxXjLrDx15KRkqprgYhGPd57znKJ2PElwZwTBFLRO9Q=
Subject key identifier: 9A:30:9B:34:94:6F:0C:94:92:C3:0E:5C:C5:5B:17:71:58:A6:FF:5B
Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Certificate serial: 0198D515ABC657C8D8A12FBD816B00758283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
Manifest number: 0D81
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: qxqx7fqP8Hx1ZpBBLyQryzhf+Budbil6+5FKvh+LXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ab:c6:57:c8:d8:a1:2f:bd:81:6b:00:75:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=9a309b34946f0c9492c30e5cc55b177158a6ff5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:61:da:96:5c:16:fe:1d:b2:85:fc:d2:50:
9b:d5:b1:da:c4:c1:e6:cb:b1:b4:83:bc:f7:57:36:
db:cd:9d:cb:99:61:78:90:e1:fd:21:37:56:de:25:
f5:2a:f4:72:2d:b5:3c:ed:04:8e:08:23:17:08:c3:
48:60:c0:96:3b:9f:cc:bb:88:de:18:e1:78:67:aa:
0c:e3:70:f7:fc:7f:0b:40:63:63:0e:0e:c3:65:79:
73:fe:10:5e:89:47:72:cd:fe:22:d8:67:bf:52:0b:
3c:e7:1d:95:79:67:8b:4d:fd:5a:2c:4d:c0:18:bf:
73:36:01:bc:d1:f3:fc:5f:fb:9b:7f:8e:8d:64:c6:
b9:bf:fa:fa:f5:55:cb:a8:76:55:ff:e6:ef:1e:6f:
7b:49:43:69:00:e0:15:b2:6c:ee:bb:d8:ba:de:0c:
6c:bc:f3:32:69:cb:36:b8:ca:c6:1c:8d:f7:83:9c:
52:cd:ac:e2:4c:2b:b2:82:c5:1f:67:d5:67:cc:9b:
89:08:1f:72:a5:6e:1e:f4:40:98:cb:b3:fe:32:b2:
46:27:aa:3f:c8:47:b0:1a:5b:3a:f8:56:ed:3a:0e:
4b:c5:6d:ed:c5:10:2d:0d:e1:53:3e:1a:c3:2f:67:
6c:64:0a:9e:cd:f3:60:3c:93:cb:30:37:f5:56:74:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:9B:34:94:6F:0C:94:92:C3:0E:5C:C5:5B:17:71:58:A6:FF:5B
X509v3 Authority Key Identifier:
keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:80:25:a7:46:25:95:c2:b3:94:c5:16:be:38:5f:8c:84:a0:
34:a4:9d:e7:f5:90:56:ec:ed:2c:ef:98:7e:af:fa:06:14:7f:
ef:17:e1:43:03:19:21:79:d0:ff:1d:35:d1:46:51:b6:72:93:
74:ce:dd:1f:90:09:c3:36:ea:2d:3f:8f:71:0d:48:3b:eb:fa:
b0:6a:da:3c:13:3a:4f:18:71:40:07:63:d6:8f:dc:b8:60:af:
fd:98:6d:67:36:54:e2:ec:a2:14:0a:c6:d5:2c:8b:db:20:c6:
dd:39:ac:ea:46:df:3b:7f:a3:2f:13:51:d9:3a:d3:22:1a:7b:
48:33:e0:1e:29:d9:4c:2b:41:90:a8:1c:d6:36:38:3f:5f:e1:
69:de:0a:0a:a0:39:07:26:d9:10:c5:91:1d:cf:17:fb:e3:27:
9d:22:7c:32:27:39:09:c1:3e:a9:ca:0d:b9:77:cd:bf:45:d4:
9b:09:3a:ed:96:00:98:64:a0:b3:13:e1:2b:4e:b0:68:51:d5:
d6:b2:50:f7:36:46:e1:2d:f3:9b:8a:82:3a:7f:10:93:2e:2c:
93:05:c4:3e:40:a9:4c:d0:02:3b:d9:49:a3:5e:5a:f1:f1:fc:
79:ab:4a:3e:5b:97:6e:16:c7:4f:1d:78:55:4b:69:8b:0a:5e:
c5:09:32:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFavGV8jYoS+9gWsAdYKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMWQ1YzIxMmIyODE3NDdjOGMzZWM2ZTg2NmUxNWIzOTRj
NWJiZGYwHhcNMjUwODIzMDQwMDIzWhcNMjUwODI0MDQwMDIzWjAzMTEwLwYDVQQD
Eyg5YTMwOWIzNDk0NmYwYzk0OTJjMzBlNWNjNTViMTc3MTU4YTZmZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dh2pZcFv4dsoX80lCb1bHaxMHm
y7G0g7z3VzbbzZ3LmWF4kOH9ITdW3iX1KvRyLbU87QSOCCMXCMNIYMCWO5/Mu4je
GOF4Z6oM43D3/H8LQGNjDg7DZXlz/hBeiUdyzf4i2Ge/Ugs85x2VeWeLTf1aLE3A
GL9zNgG80fP8X/ubf46NZMa5v/r69VXLqHZV/+bvHm97SUNpAOAVsmzuu9i63gxs
vPMyacs2uMrGHI33g5xSzaziTCuygsUfZ9VnzJuJCB9ypW4e9ECYy7P+MrJGJ6o/
yEewGls6+FbtOg5LxW3txRAtDeFTPhrDL2dsZAqezfNgPJPLMDf1VnTLuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJowmzSUbwyUksMOXMVbF3FYpv9bMB8GA1UdIwQY
MBaAFE4dXCErKBdHyMPsboZuFbOUxbvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGgxY0lTc29GMGZJdy14dWhtNFZzNVRGdTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNzc1MDMtODJlMy00YzE3LTk2OTkt
NzEyZTI3NjFkYWY1LzEvVGgxY0lTc29GMGZJdy14dWhtNFZzNVRGdTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yNzc1MDMtODJlMy00YzE3LTk2OTktNzEyZTI3NjFkYWY1
LzEvVGgxY0lTc29GMGZJdy14dWhtNFZzNVRGdTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4Alp0Yl
lcKzlMUWvjhfjISgNKSd5/WQVuztLO+Yfq/6BhR/7xfhQwMZIXnQ/x010UZRtnKT
dM7dH5AJwzbqLT+PcQ1IO+v6sGraPBM6TxhxQAdj1o/cuGCv/ZhtZzZU4uyiFArG
1SyL2yDG3Tms6kbfO3+jLxNR2TrTIhp7SDPgHinZTCtBkKgc1jY4P1/had4KCqA5
BybZEMWRHc8X++MnnSJ8Mic5CcE+qcoNuXfNv0XUmwk67ZYAmGSgsxPhK06waFHV
1rJQ9zZG4S3zm4qCOn8Qky4skwXEPkCpTNACO9lJo15a8fH8eatKPluXbhbHTx14
VUtpiwpexQky8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:59:50 2025 by rpki-client