Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: tLJKglgipytNHHlNTOqrSrMQpy3UktcVh5NwsUPGfr4=
Subject key identifier: 46:5F:B6:CB:41:3E:88:87:CE:99:95:8C:75:7B:33:31:A2:AC:A3:3C
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0199FFC8BBFCF36AC9E24B4FFC577D5BF508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0C90
Signing time: Mon 20 Oct 2025 04:02:49 +0000
Manifest this update: Mon 20 Oct 2025 04:02:49 +0000
Manifest next update: Tue 21 Oct 2025 04:02:49 +0000
Files and hashes: 1: B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa (hash: GYazD0XUED0Lzoqp0JRsmv1Wdv3MWiNL0orAYJkGs0s=)
2: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (hash: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=)
3: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (hash: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=)
4: O3hDDk3KVwYQ27PzrJrQnkhzm2c.roa (hash: 26ASWYXIYWl4pMgLslZt4gAIOookNy9gQcidU1izy+I=)
5: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (hash: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=)
6: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: A9OPSUzKW5M6Ao0Ic30ZfAlMxukmJhIbcM6LptL+qSI=)
7: VP-hz1rx2nlz5DLyKObO4ZVhOpM.roa (hash: OfQxpz1wsxm2W2m9x0OXY3aGOD+jsnKHtfm8qwqJi4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:bb:fc:f3:6a:c9:e2:4b:4f:fc:57:7d:5b:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Oct 20 04:02:49 2025 GMT
Not After : Oct 21 04:02:49 2025 GMT
Subject: CN=465fb6cb413e8887ce99958c757b3331a2aca33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:db:dc:66:97:19:1d:9c:c3:ca:20:92:cf:
9f:04:0f:10:5f:b9:3b:8a:06:ea:95:f1:ed:2d:42:
76:39:53:bf:44:2a:25:31:f3:25:e4:a2:08:0b:90:
1c:e7:9e:56:66:40:eb:6f:4f:b2:d6:60:72:09:c1:
ed:f6:65:ea:98:48:c7:60:ea:4d:f9:57:cb:48:eb:
66:c7:55:74:00:ec:36:38:8d:40:da:00:f0:ca:c5:
1e:b7:f4:94:c0:e5:be:a3:3d:fe:6f:ae:ab:4f:1e:
fb:09:82:80:fd:13:44:94:37:3c:f8:c7:6a:d5:9f:
ee:93:fe:c6:df:b3:e8:55:53:5c:c8:66:7d:f6:ab:
b9:fe:6b:a3:0e:a0:be:4f:be:ec:fa:c8:0e:30:89:
47:ea:2b:8e:de:3d:1a:65:b2:d7:0a:50:26:8d:59:
57:7d:f1:83:f5:29:98:22:bf:7f:cc:86:d0:07:b4:
e7:47:66:7c:0a:3b:01:46:00:a6:9e:73:1c:af:18:
ee:6e:de:20:8c:6e:61:7a:91:c2:cf:e6:5c:c5:fd:
a3:29:5a:bc:66:08:22:7d:11:41:e4:25:ec:31:82:
48:5a:18:e1:8f:08:fc:3e:b5:a7:6c:ce:20:6b:ab:
db:ff:be:e0:91:96:2d:6e:4f:e7:e0:ff:a9:c7:d3:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:B6:CB:41:3E:88:87:CE:99:95:8C:75:7B:33:31:A2:AC:A3:3C
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f9:43:2e:12:3f:46:d7:a8:87:e8:e0:b3:04:4b:20:9e:03:
36:53:3f:1c:19:a1:89:db:37:56:21:c4:67:2a:64:9a:df:be:
6e:c9:70:08:55:13:11:52:de:8d:15:73:3e:77:3b:c3:c1:30:
1f:ff:4d:8b:03:e3:81:1d:9b:3a:d0:7f:09:56:31:68:de:d0:
d0:70:9d:69:ac:1c:71:9d:0e:28:88:9b:a8:96:38:fc:a9:e4:
6a:ec:ca:31:e4:6a:f6:2d:a5:40:74:42:2a:53:5b:1c:93:af:
c8:57:9b:0a:5e:4b:70:9b:72:08:38:c8:8a:c1:ee:5b:8c:ff:
1a:a6:96:09:e6:8d:a8:03:9a:54:1d:9d:33:56:69:b9:bf:2b:
5b:11:bf:fc:17:8f:0b:fb:46:fb:8d:cc:8f:62:92:1b:72:a5:
c3:23:7b:c3:22:b4:6f:25:02:8b:a9:d1:8f:82:c6:f3:18:2a:
cc:55:3e:20:f1:2a:6b:c0:9c:3c:68:e3:92:74:1d:59:1b:d8:
27:54:47:7f:46:49:96:9e:98:7c:50:38:4c:78:5f:1e:99:ee:
d5:40:7f:f1:ae:af:b5:b0:c0:e5:8d:ad:9b:77:67:17:a9:eb:
3b:80:c9:d0:63:bd:b4:3c:96:a7:5a:e6:72:8f:e0:11:ac:71:
28:59:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:51 2025 by rpki-client