
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: PsVR604iK+Troftz/Q7eFjaB01FKvutOtKl986okyUs=
Subject key identifier: 5E:2E:9D:8B:07:7B:94:17:37:EF:A6:7C:0B:AB:BD:03:0A:13:57:9C
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 0197BA7D7D852567541F153E661934CEF5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 044B
Signing time: Sun 29 Jun 2025 07:01:15 +0000
Manifest this update: Sun 29 Jun 2025 07:01:15 +0000
Manifest next update: Mon 30 Jun 2025 07:01:15 +0000
Files and hashes: 1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: cNXui5y6KQmK9hjvGuFztpxMe4uuc7yhnZtzEKJnr2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:7d:85:25:67:54:1f:15:3e:66:19:34:ce:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Jun 29 07:01:15 2025 GMT
Not After : Jun 30 07:01:15 2025 GMT
Subject: CN=5e2e9d8b077b941737efa67c0babbd030a13579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:80:bb:3e:09:fd:28:15:36:0d:67:4a:95:
9a:17:ee:5b:ca:02:5f:b8:38:24:9f:77:a5:16:b7:
c2:45:67:b8:42:6b:20:58:e1:36:8c:15:8b:ed:30:
38:68:c4:8a:c4:3e:48:3f:a6:44:fe:20:5a:fc:6a:
52:c1:a3:b6:88:f2:0a:b4:03:ef:bb:b9:93:30:18:
fd:f9:2d:1d:95:7c:15:5f:c2:a3:1b:8b:94:90:82:
92:7e:86:ff:53:e0:ea:e7:27:9a:51:7c:67:46:e8:
6f:7e:7d:0b:5c:cb:40:15:1e:b5:72:24:2e:03:a7:
d1:a0:e1:e2:b0:10:7f:3b:00:ee:a4:c6:33:8b:69:
f1:4a:08:6d:83:49:06:4b:1f:af:d9:a8:53:1f:eb:
f3:38:ae:35:a8:24:c8:b1:5b:19:06:5b:1d:93:97:
2b:7a:99:ed:fa:b3:92:c9:81:9f:f3:b2:6a:3e:29:
be:72:e7:13:e8:48:ee:97:03:e7:5f:09:98:68:1f:
43:06:c7:40:70:6b:01:cb:5c:55:c1:06:4d:f5:fe:
57:d8:90:78:cc:40:45:79:a8:d7:aa:a8:98:97:d7:
4a:ca:71:52:66:82:17:6b:44:25:59:d7:35:1d:ff:
e3:65:a6:6d:cd:9f:b5:07:41:47:ad:13:8c:01:c8:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2E:9D:8B:07:7B:94:17:37:EF:A6:7C:0B:AB:BD:03:0A:13:57:9C
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:a6:43:1b:f7:4d:04:6d:a4:56:ac:ec:1b:13:d7:9e:ac:
90:1a:39:d0:d4:fc:6e:62:84:4b:33:53:84:43:73:5b:57:c1:
64:0d:ee:a8:84:ea:48:c4:a7:66:83:a3:ff:f8:e8:a9:d7:a0:
d8:d6:81:43:8b:81:fc:b0:06:ae:c5:a2:05:e9:33:4f:85:52:
e4:74:b9:58:a0:5e:d1:bf:21:54:7d:e9:3d:4e:b4:ee:7d:93:
63:e4:03:3b:bb:1b:30:5c:6d:38:77:2c:3e:23:aa:ff:93:fb:
c4:39:f4:b7:f2:14:d7:be:f5:d5:06:78:41:c2:f0:1e:4b:b5:
65:b7:88:62:df:d3:40:6d:2e:04:62:42:76:74:d4:33:7b:5a:
1c:39:30:3f:2d:e0:da:e8:90:2c:cc:fd:e4:ae:54:a3:b7:13:
55:75:44:77:91:9e:18:1e:31:b8:ad:94:18:ce:d8:fc:10:3c:
25:5d:b7:2c:51:25:f4:78:c7:b3:c8:38:f5:af:ce:46:58:fc:
a2:e5:d2:cd:a1:20:0c:72:1f:70:31:bc:16:b9:61:fe:92:40:
28:20:65:92:6e:0b:ad:9e:dc:b8:de:3e:00:a4:67:37:c2:44:
a0:ad:ca:5d:f3:58:32:11:3b:1f:7e:41:0e:1e:6b:f6:f8:80:
09:d1:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:16:42 2025 by rpki-client