Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: +LrDVPFraEznpcTXjXsdr/mmXaP2d90RKVTTlojEpYg=
Subject key identifier: 41:D0:3D:D5:E0:5A:22:B8:8D:FB:16:E4:97:A1:F9:BC:F1:82:89:FF
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0198D583E4297ED6D4649819A268FB18A713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0A8E
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: eWjWqv5SbHNE6UZQIMyHaNu6KVF+j2uOkY/jJuLIk6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e4:29:7e:d6:d4:64:98:19:a2:68:fb:18:a7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=41d03dd5e05a22b88dfb16e497a1f9bcf18289ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:4f:37:7e:21:f6:96:f4:6b:19:ae:62:72:
96:17:d8:41:34:6b:6d:bc:1c:fb:5e:48:2b:17:11:
ec:32:88:11:2e:98:e9:bf:e1:e1:96:cc:c9:c0:5a:
0f:57:bf:f5:4d:a2:42:20:84:33:17:5d:31:6b:4f:
99:7c:25:e6:b3:46:23:4d:27:a9:b0:2f:bd:b8:55:
a2:7a:98:56:98:85:65:4f:ec:ae:7d:5a:9e:4d:fe:
29:8d:5c:07:3f:53:f4:ea:1e:a6:b3:8f:80:f1:0d:
c7:58:be:52:46:84:9e:21:94:f0:b6:85:4a:52:a1:
dc:43:8c:e9:2c:c1:c3:5a:64:e4:5f:dc:c3:d4:12:
f5:37:c9:a0:89:5f:0c:8c:74:94:ab:3a:e6:5f:b4:
ae:79:dd:e6:e2:1b:89:cc:c9:09:11:8b:40:ce:5c:
2f:42:15:e1:5f:40:4a:fd:e6:e9:ff:af:39:8b:af:
49:fa:f6:9c:70:87:4c:de:db:7d:55:f1:d7:6d:d1:
eb:99:6a:b9:f9:34:ab:d5:9a:8a:7a:ff:31:1f:da:
b9:b2:f7:f8:10:7a:d1:59:b6:74:13:24:f1:7b:e1:
8f:b9:42:63:59:81:40:3b:35:a5:ad:e9:6a:99:d5:
2f:d2:0b:8a:11:9b:af:47:10:2e:0e:64:e0:fd:7b:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:3D:D5:E0:5A:22:B8:8D:FB:16:E4:97:A1:F9:BC:F1:82:89:FF
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:37:7a:9b:01:0b:b1:ef:1b:b2:9d:86:17:ee:0e:0b:df:
0b:f5:a5:0d:01:c0:b4:eb:5b:36:3b:41:7c:5e:6b:5d:7d:62:
34:97:d3:c0:fd:a1:f0:50:a8:5d:c5:1f:96:fc:7f:e2:be:f7:
ae:cf:b0:d2:ee:47:96:e0:09:2a:60:4a:fc:0c:43:7e:11:b3:
f5:01:c9:66:a2:de:d9:01:3b:8e:09:c1:e4:b4:ff:41:d3:fc:
ee:1b:f8:3e:b4:5b:ee:e1:d5:37:78:12:27:ec:32:8a:62:12:
05:b5:c8:4f:9d:b4:6c:78:50:b5:e1:8b:c0:f2:ff:90:b5:bd:
79:5d:56:84:ca:31:71:ae:75:42:54:ac:19:64:3d:79:49:e1:
fe:b7:a5:97:15:cc:77:ec:ee:15:66:52:a5:da:a7:88:ec:72:
0c:c1:91:10:9b:45:76:1f:87:70:b9:fa:37:87:eb:6e:44:91:
82:98:a2:5c:0e:26:18:c6:8d:04:1f:14:6f:9e:af:01:0d:7b:
28:56:2c:70:52:19:ef:05:7f:ea:8b:7e:73:87:5b:2c:e8:27:
9b:e6:77:cc:f1:29:f5:32:57:22:59:d7:a8:85:8c:1c:01:fe:
1d:4a:f1:64:5d:0e:d1:6a:02:4d:6a:b8:0a:53:0b:ff:c6:67:
0c:8f:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:14 2025 by rpki-client