Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: HwqKgYi1CPAdy7JxSDxkHhdnKNYe/Fj0TgTbwPej7zE=
Subject key identifier: 1F:A5:52:C5:9B:5B:3D:BD:D7:45:9F:6C:EC:90:2A:80:E3:E8:ED:2B
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 0198D6612EF4FA38FD309AEA901E2DE05660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 04DE
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: BksQaqX0zQ8PD8YOuSU9qVg8zybmnLud/0wT6ylQxAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2e:f4:fa:38:fd:30:9a:ea:90:1e:2d:e0:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=1fa552c59b5b3dbdd7459f6cec902a80e3e8ed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:0f:c9:50:31:6e:76:1a:44:4f:fb:5a:5d:
12:a3:eb:4e:be:03:dd:5c:6c:09:c3:d0:e6:8f:e1:
05:0d:9a:ee:72:6e:be:e0:88:7e:f1:03:50:1e:9a:
a3:9b:3f:44:d5:10:ea:f7:3b:7f:8e:d6:70:94:84:
85:e6:21:e2:c6:cb:d1:a8:f8:46:cd:ff:26:d5:fe:
1c:55:fc:17:c9:9c:81:2d:d8:0a:bd:c1:59:c4:83:
59:6a:26:54:a6:d2:a7:37:8c:3b:5f:b0:1a:be:20:
a0:05:65:08:f2:6f:4a:55:9a:7c:b4:cf:aa:bf:64:
fb:da:34:7e:2c:b7:80:53:06:d0:de:c2:ad:d1:5e:
3b:9c:bd:a1:80:d7:3d:82:5e:0a:e8:53:96:9a:5b:
7c:99:74:d2:a5:f7:57:4a:5d:f5:54:22:3b:37:a1:
f5:c2:c1:09:e7:74:4f:98:8a:8c:17:66:15:42:f6:
33:67:39:e0:ac:59:fc:6b:78:5d:fe:28:01:58:2b:
72:ed:89:15:c0:84:f2:b9:21:e3:ae:05:a7:33:d1:
15:11:0f:cb:be:42:f5:70:af:66:a7:dc:fd:a9:39:
fc:50:a4:e9:a9:b1:44:85:ee:3f:61:fb:99:79:25:
dc:97:fe:8b:e9:9e:eb:e4:98:92:72:8c:02:31:cb:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:52:C5:9B:5B:3D:BD:D7:45:9F:6C:EC:90:2A:80:E3:E8:ED:2B
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:be:b4:fe:7c:b8:06:ca:eb:39:91:7c:14:b8:ac:de:e4:
ab:4b:b3:ef:0c:29:60:bd:f5:36:1b:f3:0e:5a:81:ed:d1:93:
92:f8:b9:ef:fe:21:d9:80:79:63:ae:a3:28:f0:c0:3a:93:3e:
7f:28:57:22:fe:0b:69:b7:83:71:af:21:09:10:e6:32:55:8b:
50:19:27:80:c1:aa:ca:54:69:aa:7e:4d:76:fa:36:0d:00:42:
ce:28:b2:27:7a:96:10:e2:29:e4:ca:dd:77:31:89:c1:cf:42:
b0:83:8a:e2:b2:2a:1a:cb:42:f2:88:6f:e4:a0:0c:c5:9e:41:
c0:a1:4c:6f:a5:0d:62:17:a3:1d:96:34:1e:d0:d8:72:65:23:
7a:ea:93:2d:26:00:e3:c5:30:d3:a6:42:d6:18:13:8d:08:c1:
34:e6:46:a2:47:73:f5:06:9b:d4:cf:bd:f6:5c:b8:cd:47:8a:
e9:57:4c:3c:fc:57:3b:5b:89:32:2c:af:ca:c3:4d:1d:c4:89:
13:87:b8:66:c8:92:81:a4:16:ac:f8:6d:6b:97:27:65:de:35:
a3:c6:17:2e:e5:b1:e6:80:f3:5b:6b:7a:66:08:4e:b1:95:2c:
16:a8:b7:a7:78:3e:85:d7:0f:fd:99:0f:90:b8:57:c2:f7:6e:
17:82:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:40 2025 by rpki-client