Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: Z0uraY1D+gXN8HZ4jxNV9RBi1RNwn3jk4HVBRe86IwI=
Subject key identifier: 7E:8A:B1:08:26:38:BC:09:EA:7E:BC:C9:84:A3:84:70:3B:95:A2:00
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 0199FE7DF6223A8B654542CB6C6014A436CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:31 +0000
Manifest this update: Sun 19 Oct 2025 22:01:31 +0000
Manifest next update: Mon 20 Oct 2025 22:01:31 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: SCNf5mbrqFQG4n5BuRUVgUNJ8GEOYj3QMbYieT/CMQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f6:22:3a:8b:65:45:42:cb:6c:60:14:a4:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Oct 19 22:01:31 2025 GMT
Not After : Oct 20 22:01:31 2025 GMT
Subject: CN=7e8ab1082638bc09ea7ebcc984a384703b95a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:33:b7:df:0f:01:00:11:df:23:80:e6:88:
90:44:eb:de:e7:45:c3:cd:5a:fb:f8:47:54:a5:33:
d3:d8:72:5d:90:b9:cc:d4:89:04:57:2e:ae:9e:05:
1d:04:61:33:5a:7a:b1:b3:c8:9a:d6:73:2b:67:06:
58:7c:37:ad:d6:f9:28:d1:7e:df:ec:a2:9d:d6:02:
a3:cd:4d:3c:f2:1b:5a:57:ac:03:c2:46:bf:04:57:
2e:5d:d3:37:13:1f:b4:14:50:bd:df:c6:7d:aa:0c:
d1:5a:91:5b:a2:45:d7:17:51:f1:1e:36:13:f7:cb:
44:fd:a2:e7:fe:5c:1f:d6:60:70:cc:9d:ca:88:8b:
23:a7:df:5b:11:dd:cd:56:85:da:f5:81:63:41:31:
0a:d8:c8:64:ee:19:b6:10:00:fd:a0:81:f2:21:6d:
38:bd:5a:b7:ba:9e:20:50:87:68:1f:14:88:02:97:
0c:9b:a7:da:6b:01:5c:64:6b:d1:ed:b6:8b:32:d9:
a6:91:97:40:44:9d:43:59:b8:80:77:fc:eb:3b:0e:
61:56:7b:0d:28:99:98:6c:a8:78:8d:c9:d9:cf:46:
a5:75:9c:82:fe:74:d2:37:85:58:ef:c1:cd:ed:6e:
34:7b:0c:c4:fb:78:6f:42:97:6d:f5:86:18:d4:70:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:B1:08:26:38:BC:09:EA:7E:BC:C9:84:A3:84:70:3B:95:A2:00
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6f:0b:6e:27:7c:aa:6b:c1:60:32:a7:08:b2:45:20:a1:d4:
c0:68:50:ae:28:a1:59:6f:b8:5d:0d:70:71:5b:c6:19:9e:91:
37:f7:28:6f:b8:30:1f:c3:68:c8:9c:60:3b:96:19:18:cd:3d:
ec:a3:78:0a:d4:64:8a:ee:5a:54:68:3c:d1:55:ce:31:eb:bf:
ab:d2:e2:a9:8b:23:75:73:bd:9c:d7:14:2d:5e:11:e3:c5:0e:
7a:5a:56:67:d4:d3:5f:2e:35:39:06:38:df:12:ee:76:92:ba:
1b:fa:f6:44:e1:8d:1e:17:0e:15:19:05:16:49:1a:97:5b:af:
a5:bb:3b:9f:69:32:74:07:6b:3b:ed:a5:0f:09:82:c4:83:47:
01:5f:e7:0f:40:1b:df:7a:ad:08:8b:9a:53:d7:3c:87:96:9a:
a0:a5:e4:a7:f1:4c:e5:6a:73:09:bc:61:ab:a3:51:da:d4:6d:
11:83:f0:c6:21:b6:fd:b9:17:ac:df:1f:47:93:13:db:bf:6d:
ca:ff:f2:8f:bd:30:cf:65:e4:6e:fa:8a:94:85:35:1b:a3:22:
16:21:01:29:d9:06:9b:35:4a:14:a9:b9:e1:e4:e2:3c:3e:54:
df:70:6f:01:e3:b6:44:f5:55:5d:95:5f:89:d2:2d:93:49:a0:
de:3a:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:02 2025 by rpki-client