Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: xLUsS+QzV7V8bt1+PvvcOpE5ufugm/XG32m/G4V/F6I=
Subject key identifier: 4E:13:B2:4C:1D:68:EF:31:1F:30:E1:B1:D6:F7:21:C5:7A:14:A7:F9
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0197B9A192A9DB20C52C455D35B1FFEA1555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 09FB
Signing time: Sun 29 Jun 2025 03:01:03 +0000
Manifest this update: Sun 29 Jun 2025 03:01:03 +0000
Manifest next update: Mon 30 Jun 2025 03:01:03 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: 6XBEgzdo3wJo8mXHKtrSFtO2mWilgQVua0cXwRDocVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:92:a9:db:20:c5:2c:45:5d:35:b1:ff:ea:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Jun 29 03:01:03 2025 GMT
Not After : Jun 30 03:01:03 2025 GMT
Subject: CN=4e13b24c1d68ef311f30e1b1d6f721c57a14a7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:60:e3:c4:23:d3:15:05:dd:64:08:32:53:
7f:7b:b9:da:5f:36:37:a7:99:97:46:0b:de:e0:43:
15:b4:5f:da:6a:89:23:a3:6e:7e:0d:ca:c0:1a:2e:
a1:6e:ba:c5:74:06:b8:35:20:8b:84:78:a9:9f:fd:
c3:03:91:66:03:37:93:3f:3d:6d:86:5f:c8:f1:07:
64:a6:fb:27:95:7d:fe:d7:7d:2d:01:50:56:b3:3e:
a0:15:6f:a6:16:97:07:42:f5:18:da:7f:44:d8:95:
de:08:0d:a8:75:29:12:9f:56:36:1c:fa:48:49:a8:
9f:76:3f:6f:64:73:ce:b2:69:3f:f9:dd:be:da:c4:
ef:9b:17:b0:ba:c9:bb:3f:aa:a2:4d:cb:b4:81:13:
6d:a5:c9:8c:a5:18:72:f6:33:7e:4d:76:6a:5a:e9:
1e:bd:31:8e:a6:32:97:71:dc:5e:dd:53:7e:e9:80:
48:d1:33:bf:f8:ab:29:de:3d:98:7b:3a:37:3a:a1:
35:71:4e:44:a2:4b:34:a6:2d:73:13:71:a2:ef:b1:
28:41:35:ee:7f:d6:2e:3f:9d:21:58:42:1d:e4:df:
8b:a0:06:1b:37:8d:a4:7a:d7:3c:a1:7f:ef:7c:d3:
5b:fb:9e:80:68:7b:26:0e:39:22:af:d0:7e:d2:56:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:B2:4C:1D:68:EF:31:1F:30:E1:B1:D6:F7:21:C5:7A:14:A7:F9
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f9:49:3c:be:3b:e7:72:d7:da:94:5e:3e:70:e4:87:1c:92:
5f:c1:65:47:5c:55:6a:63:08:1f:0b:3a:3c:a5:74:2c:32:3f:
55:b5:12:19:83:27:f1:c7:52:10:67:93:bb:02:82:57:8e:3b:
c3:54:45:16:99:3a:06:f0:eb:70:8b:40:3c:ee:91:22:60:76:
9a:1a:87:33:91:c3:77:1b:c6:3f:5d:77:64:f6:94:1e:78:f9:
bc:c3:81:35:85:69:ac:e2:76:02:e4:16:70:2a:c6:a8:c5:81:
8f:55:d8:46:5d:f4:b3:5c:d2:cf:58:96:8c:ec:7b:18:29:3e:
ed:21:4a:3f:4c:39:87:e5:f9:c0:92:72:91:c5:08:bd:f8:eb:
9b:7e:77:85:11:c4:da:29:7c:56:d8:3d:46:fa:7c:77:52:42:
8f:dd:c3:ee:e1:b8:6c:43:26:07:45:a6:3a:f4:54:f9:f8:73:
0f:37:82:36:ca:fc:71:8c:1b:93:96:ce:15:2f:d2:24:e0:13:
cb:e2:5b:17:a5:74:98:bf:9c:38:21:ad:05:99:d5:55:2d:4c:
9f:f1:32:06:0c:a0:0f:b7:05:08:42:5d:3f:26:ef:3b:11:e6:
a8:75:cb:1d:33:20:b7:19:d2:33:44:91:4d:14:dd:b8:27:38:
2e:5d:4e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oZKp2yDFLEVdNbH/6hVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjUwNjI5MDMwMTAzWhcNMjUwNjMwMDMwMTAzWjAzMTEwLwYDVQQD
Eyg0ZTEzYjI0YzFkNjhlZjMxMWYzMGUxYjFkNmY3MjFjNTdhMTRhN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyClg48Qj0xUF3WQIMlN/e7naXzY3
p5mXRgve4EMVtF/aaokjo25+DcrAGi6hbrrFdAa4NSCLhHipn/3DA5FmAzeTPz1t
hl/I8QdkpvsnlX3+130tAVBWsz6gFW+mFpcHQvUY2n9E2JXeCA2odSkSn1Y2HPpI
Saifdj9vZHPOsmk/+d2+2sTvmxewusm7P6qiTcu0gRNtpcmMpRhy9jN+TXZqWuke
vTGOpjKXcdxe3VN+6YBI0TO/+Ksp3j2Yezo3OqE1cU5Eoks0pi1zE3Gi77EoQTXu
f9YuP50hWEId5N+LoAYbN42ketc8oX/vfNNb+56AaHsmDjkir9B+0lZkEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4TskwdaO8xHzDhsdb3IcV6FKf5MB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvlJPL47
53LX2pRePnDkhxySX8FlR1xVamMIHws6PKV0LDI/VbUSGYMn8cdSEGeTuwKCV447
w1RFFpk6BvDrcItAPO6RImB2mhqHM5HDdxvGP113ZPaUHnj5vMOBNYVprOJ2AuQW
cCrGqMWBj1XYRl30s1zSz1iWjOx7GCk+7SFKP0w5h+X5wJJykcUIvfjrm353hRHE
2il8Vtg9Rvp8d1JCj93D7uG4bEMmB0WmOvRU+fhzDzeCNsr8cYwbk5bOFS/SJOAT
y+JbF6V0mL+cOCGtBZnVVS1Mn/EyBgygD7cFCEJdPybvOxHmqHXLHTMgtxnSM0SR
TRTduCc4Ll1OeA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:21:17 2025 by rpki-client