Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: ZVSdJeaQ3jADjQTYcMe2/bzfgLbwSgEQ9J5TQWxbzqY=
Subject key identifier: B0:FD:88:65:5D:D0:E3:35:BB:C7:8F:4C:BB:75:22:06:CA:23:60:96
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0198D54E4883D10489762779C547B9571FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0BF3
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa (hash: GYazD0XUED0Lzoqp0JRsmv1Wdv3MWiNL0orAYJkGs0s=)
2: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (hash: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=)
3: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (hash: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=)
4: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (hash: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: FrZIoyLAqBOhn3k9BuW4EosgdhRdD3RDzJWyxI2MkPc=)
6: o0qUAT_TgmtKEJ1FtjKHFmcq_g8.roa (hash: jAvBf+l4Sh8bF638zbQb1GW8ZMXk7btIZOLQzFqdpZg=)
7: r34i9MogSBxeDWHyGIhH_hkNvH0.roa (hash: /LsOtQwuG5S1pPv/GDxv95WqbubjE7D9iX5jL74tvxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:48:83:d1:04:89:76:27:79:c5:47:b9:57:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=b0fd88655dd0e335bbc78f4cbb752206ca236096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:46:c1:39:02:6e:cb:1b:1f:15:b7:8a:ed:
15:1f:a0:36:30:bf:cb:54:55:52:87:5f:68:15:a0:
93:35:26:3f:c7:b1:b3:67:ed:ad:60:b3:b2:ae:77:
64:13:55:3d:df:c9:50:fb:5d:49:9d:a4:e8:bc:25:
06:b9:18:bc:81:6c:6c:6f:c1:ab:45:60:0a:2d:d5:
1b:b6:d7:44:57:3a:4c:44:0c:0e:34:95:c6:4d:b1:
e0:0d:71:93:fc:d6:c3:a2:6f:df:db:59:e6:be:cc:
40:a8:55:e5:e0:fa:ce:32:66:86:74:d5:9e:3b:bf:
a8:86:c1:27:f6:58:aa:df:69:fc:3a:e3:6d:f2:07:
34:95:67:d1:10:e1:02:b7:6a:28:7e:3b:24:e9:0f:
0e:2b:53:b6:03:dc:db:ec:aa:bd:10:34:13:fe:37:
d2:12:aa:b1:fb:0e:fb:ba:2a:70:1b:9f:fd:b2:e4:
c3:0e:8f:01:6e:5c:e6:8d:de:04:66:fe:61:cc:82:
ee:55:e9:a6:92:3b:7d:0e:4f:f7:26:50:25:11:17:
b5:45:20:e8:4a:39:08:00:27:92:f3:45:02:92:76:
c6:9c:1c:cf:6c:e6:f1:c9:05:06:93:b8:37:b7:8d:
43:03:42:fb:1b:e4:43:fc:c0:93:cc:22:3e:77:e0:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:88:65:5D:D0:E3:35:BB:C7:8F:4C:BB:75:22:06:CA:23:60:96
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:48:85:d2:69:d3:a2:18:71:be:79:61:22:9e:d2:a2:c5:
07:68:6c:4a:c9:85:27:14:22:b4:0a:71:46:fe:02:83:4f:9b:
3d:e5:c1:9d:97:f2:a4:e5:04:15:a0:58:9a:03:19:9c:bc:0b:
19:29:b2:99:01:fc:00:2e:30:c6:72:00:ca:fb:06:8e:8a:93:
20:c8:54:62:34:e4:20:c7:99:c2:dc:f8:7d:b0:9d:37:2c:d1:
07:31:90:16:fe:4a:9f:e0:9b:c3:c2:7c:78:6d:25:82:65:d2:
19:2c:d6:4b:de:3e:ad:51:af:58:c9:80:37:87:e8:a9:81:2c:
77:0b:5f:45:1a:7a:51:5d:fa:2b:81:0d:19:2b:ea:a8:c1:df:
25:a6:06:2b:e4:0a:8c:f8:ba:80:77:42:b1:e1:ae:af:39:13:
55:93:6f:f7:eb:07:ef:8b:e3:72:3e:ea:2e:6f:bf:32:ae:35:
87:7b:c4:dc:25:d8:4e:9e:2f:91:72:3f:eb:3d:52:0c:34:63:
54:37:1c:cb:01:8f:5a:c3:a6:0b:39:21:7d:1f:c9:ce:38:0d:
61:4c:b8:b7:4b:1b:72:8b:24:dc:37:a8:4d:4d:63:48:2a:70:
44:c7:3b:08:ce:df:b3:37:81:3b:65:56:55:73:1e:a7:74:6d:
9a:9b:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:45 2025 by rpki-client