Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: 9ar2FHB+kzdDt+5Ur6I0ddf1CnyLHNReWrjWr71C8Vw=
Subject key identifier: 8F:6C:EB:43:5B:61:9D:33:65:95:43:40:4F:3F:71:93:5D:22:C7:E7
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0199FEEC215ABBDD7F9E8A0ADC88AB84F91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0B28
Signing time: Mon 20 Oct 2025 00:01:51 +0000
Manifest this update: Mon 20 Oct 2025 00:01:51 +0000
Manifest next update: Tue 21 Oct 2025 00:01:51 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: 7Fsjnh6akp6uKF3pA6LE1Yv+152P2ckF6O3aNbZoIYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:21:5a:bb:dd:7f:9e:8a:0a:dc:88:ab:84:f9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Oct 20 00:01:51 2025 GMT
Not After : Oct 21 00:01:51 2025 GMT
Subject: CN=8f6ceb435b619d33659543404f3f71935d22c7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:60:dd:e8:c7:38:41:fd:60:f7:4c:b0:93:
b2:b6:fe:06:e3:99:6b:6f:53:a0:4f:4f:e7:5b:f6:
9b:17:f5:c2:59:1e:2c:4c:e4:b8:48:14:ff:ef:d7:
9e:9a:5b:20:2e:8b:c9:7b:23:8b:cb:c1:f6:19:2f:
81:e3:77:a9:b8:5a:20:b2:00:78:47:41:1a:e5:d1:
3b:db:48:7b:bf:31:17:1c:6b:04:af:5f:a8:fe:7e:
bd:91:18:e6:4a:d5:23:c9:dc:ab:29:02:25:a9:48:
91:05:b9:f5:c0:d9:49:3a:f8:9f:08:55:49:9c:0a:
51:97:d7:20:b3:e9:27:7e:8e:8c:0d:af:79:84:8b:
09:0f:0d:38:b9:fa:85:3b:4c:43:49:41:71:28:e4:
2d:1e:8b:9a:9f:76:71:09:e7:65:6b:a8:af:d0:67:
2d:1b:b5:93:76:22:bf:71:c9:77:21:89:67:19:3d:
91:71:f4:9c:07:55:4b:d7:c8:02:52:24:27:81:a8:
a8:68:43:44:80:ff:83:53:4a:24:b9:c2:61:39:b7:
13:27:07:e7:41:11:82:61:d2:55:93:43:e2:e0:ff:
a9:72:f5:31:20:1b:5e:4c:b3:27:97:33:7f:1f:19:
5b:c4:c5:57:f9:bf:01:41:94:76:a6:ee:4f:ca:b2:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:EB:43:5B:61:9D:33:65:95:43:40:4F:3F:71:93:5D:22:C7:E7
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:de:80:e4:59:ef:ad:b2:a4:64:d4:1f:ab:7e:fc:74:b3:0f:
bf:a7:f5:18:4e:42:a9:c6:13:48:70:4e:ce:41:51:8b:0d:26:
6c:c6:09:db:d1:ea:5b:3a:96:17:4c:e4:77:4d:ac:ad:cc:02:
e3:e5:1c:52:0f:25:8f:4a:bf:b6:63:48:8c:dc:57:0e:1c:53:
ad:0b:d5:58:0c:7c:36:2c:68:62:8a:5a:29:37:87:c9:b2:7b:
23:a5:9f:80:af:03:f5:06:a1:53:3f:4c:0f:63:d0:54:90:d6:
5c:0b:f7:b7:c4:7b:1c:15:44:c6:21:e3:77:24:f5:4e:b1:f2:
1b:4b:df:2a:c7:47:c6:4f:fa:89:b3:67:cd:32:a7:29:48:a3:
e2:14:17:8b:5a:39:b9:a2:25:ed:79:c7:ab:bb:2d:8a:15:d8:
3b:6a:b1:b4:21:93:62:56:12:c9:c1:de:78:73:f1:81:19:a9:
f4:82:8a:59:6d:0e:cd:6f:dc:81:66:d7:86:31:cb:63:db:ea:
7b:a7:de:2f:55:a6:f9:dc:55:b8:81:e8:3b:49:58:ae:cd:57:
1f:88:7c:d3:c5:df:0e:cd:15:4a:95:cb:8d:f7:2f:74:3d:5b:
4d:aa:bd:36:cb:17:38:75:9c:c3:9d:56:2e:ae:08:db:d1:7d:
c5:62:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:53 2025 by rpki-client