Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: Z5cdziKnSLqh6FVbjFy33g10S9uT/44UQDUv/JoFvEs=
Subject key identifier: 4A:5C:4C:0A:05:8E:22:29:76:98:42:65:92:2F:5A:A3:2C:C6:82:94
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0199FCFDAD2422775F0F5D733FDF7733A376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: fJgbpwhEPnib2/orajreoWMK9w+BAiqCZpjWD1jyyPk=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ad:24:22:77:5f:0f:5d:73:3f:df:77:33:a3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=4a5c4c0a058e222976984265922f5aa32cc68294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:37:03:81:bc:c3:bc:c9:e5:6f:a7:77:39:
be:be:91:dd:f2:e6:06:0b:86:0c:27:8e:ce:bf:c3:
53:09:13:7c:97:e5:40:0b:d8:bc:f7:c2:51:37:64:
43:a1:7f:19:85:6b:6a:d1:2f:01:f7:1d:d5:06:7e:
17:31:81:cc:e0:e6:0e:51:d5:dd:5c:74:3b:ae:02:
c4:46:b3:c6:86:b2:f1:94:9a:e2:4c:4a:3b:45:0a:
9a:c9:db:86:a8:cd:a0:1e:5c:62:44:db:34:38:11:
e1:5f:7c:a3:56:d3:58:e9:f0:3a:8b:e2:70:52:94:
cd:a4:78:84:bc:bb:54:32:24:47:a1:3f:b3:57:c7:
5e:23:f8:37:dc:5a:51:e3:f7:0c:cf:db:c9:c1:fc:
d2:4a:8c:cb:e1:62:42:36:47:e7:43:50:41:72:36:
33:79:a6:0a:74:28:5e:8f:a5:53:a4:42:6e:e1:98:
f7:44:85:70:67:3f:a9:c6:74:8f:03:9a:65:f7:3a:
ad:0e:a2:73:02:00:8d:ae:8d:65:24:3c:cc:9d:2e:
3b:ca:83:0c:fe:a7:31:b0:9e:8f:9c:33:9f:6b:28:
c5:cc:46:05:cd:f4:ea:2d:a6:52:a0:42:c7:b7:fd:
ad:27:59:6a:f0:c9:63:7d:74:fd:75:23:36:b3:8d:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:4C:0A:05:8E:22:29:76:98:42:65:92:2F:5A:A3:2C:C6:82:94
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:51:33:c7:9a:0d:05:90:95:d8:05:05:a3:a1:e2:88:a7:ad:
4b:eb:06:22:b7:2a:cb:e3:fc:6b:cc:fa:99:a9:c9:8e:a5:88:
6d:a9:03:cd:6b:0c:59:ef:c2:60:43:38:ae:90:0d:3f:a7:ac:
08:10:a8:8a:47:dc:17:86:0b:37:18:b3:4e:4a:6e:bf:96:57:
cf:4d:1f:a6:b3:e9:52:12:33:85:7d:1f:17:97:ae:57:f0:8b:
0e:54:e9:cc:da:5a:b3:1a:e8:9c:6a:3d:7a:8c:95:87:e1:3e:
1c:e6:01:08:18:6a:2d:5a:52:7d:38:e1:6d:88:32:2e:c8:0e:
6c:73:46:3c:73:94:bf:a6:23:cc:73:9e:c5:7a:00:4e:b1:7b:
d2:8d:9f:52:f5:7d:45:a5:3b:09:50:2e:2e:a9:d7:71:5d:5d:
81:43:12:62:eb:e8:ae:dc:a2:a3:a9:42:a8:c5:0a:44:4d:b6:
40:a9:18:6e:bd:47:9f:e5:2c:a1:50:73:cb:dc:40:b5:6a:e6:
dd:ac:d6:27:ef:80:2c:b7:07:5c:68:ac:35:c0:62:d4:bd:e8:
c1:00:7d:6a:8c:5d:cf:43:a9:d1:f1:47:f1:71:9d:dc:86:38:
68:7e:16:31:56:8b:3f:01:5b:0c:45:94:92:ba:24:c2:78:21:
2e:bc:4f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/a0kIndfD11zP993M6N2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTY3ZWU1ZjhkMmFjMGQ5Y2MwMTM3YjQxOTEyZjE4MWIw
NDg5YjAwHhcNMjUxMDE5MTUwMTQ3WhcNMjUxMDIwMTUwMTQ3WjAzMTEwLwYDVQQD
Eyg0YTVjNGMwYTA1OGUyMjI5NzY5ODQyNjU5MjJmNWFhMzJjYzY4Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i03A4G8w7zJ5W+ndzm+vpHd8uYG
C4YMJ47Ov8NTCRN8l+VAC9i898JRN2RDoX8ZhWtq0S8B9x3VBn4XMYHM4OYOUdXd
XHQ7rgLERrPGhrLxlJriTEo7RQqayduGqM2gHlxiRNs0OBHhX3yjVtNY6fA6i+Jw
UpTNpHiEvLtUMiRHoT+zV8deI/g33FpR4/cMz9vJwfzSSozL4WJCNkfnQ1BBcjYz
eaYKdChej6VTpEJu4Zj3RIVwZz+pxnSPA5pl9zqtDqJzAgCNro1lJDzMnS47yoMM
/qcxsJ6PnDOfayjFzEYFzfTqLaZSoELHt/2tJ1lq8MljfXT9dSM2s42W5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpcTAoFjiIpdphCZZIvWqMsxoKUMB8GA1UdIwQY
MBaAFE4WfuX40qwNnMATe0GRLxgbBImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2Et
ZjY2MmIwYTY1ZThlLzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2EtZjY2MmIwYTY1ZThl
LzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVEzx5oN
BZCV2AUFo6HiiKetS+sGIrcqy+P8a8z6manJjqWIbakDzWsMWe/CYEM4rpANP6es
CBCoikfcF4YLNxizTkpuv5ZXz00fprPpUhIzhX0fF5euV/CLDlTpzNpasxronGo9
eoyVh+E+HOYBCBhqLVpSfTjhbYgyLsgObHNGPHOUv6YjzHOexXoATrF70o2fUvV9
RaU7CVAuLqnXcV1dgUMSYuvortyio6lCqMUKRE22QKkYbr1Hn+UsoVBzy9xAtWrm
3azWJ++ALLcHXGisNcBi1L3owQB9aoxdz0Op0fFH8XGd3IY4aH4WMVaLPwFbDEWU
krokwnghLrxPzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:24 2025 by rpki-client