Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: VW+sHlIMHMsOZ0qSYkCRlUh4/3jyEVn4hTOn+aSu4ZU=
Subject key identifier: 4F:0F:86:67:C3:DA:57:1D:A8:DE:5A:83:16:92:60:D7:14:D6:27:2B
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 0198D705C3DD978657BA07B5429D40782EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:15 +0000
Manifest this update: Sat 23 Aug 2025 13:02:15 +0000
Manifest next update: Sun 24 Aug 2025 13:02:15 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: NyD7Jq0CJddkOGGUGYG6mMd0wrGLE1xZ0wqYQ87mVMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c3:dd:97:86:57:ba:07:b5:42:9d:40:78:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Aug 23 13:02:15 2025 GMT
Not After : Aug 24 13:02:15 2025 GMT
Subject: CN=4f0f8667c3da571da8de5a83169260d714d6272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:92:5a:76:0c:71:51:d4:51:3b:80:7b:03:
9f:e0:30:53:1c:d0:24:40:b9:cb:5f:96:ae:05:fc:
09:bb:2e:76:92:f3:c0:5a:7f:d6:69:a7:9e:ac:38:
46:38:91:e9:83:9a:71:43:0e:6a:a7:1b:f0:2a:45:
d0:3c:d9:bc:e0:28:33:b0:f3:bc:0d:0f:64:23:7b:
6b:a5:7d:b5:46:20:b4:5d:87:bb:71:97:be:2e:cf:
86:68:1f:65:ff:a0:2d:0f:70:fa:ed:4e:ce:f2:b0:
a6:9b:2c:ef:1c:c1:ac:3b:55:11:83:af:e0:f2:f8:
65:06:d8:08:7a:8b:5b:19:cf:6d:44:57:f2:25:c9:
f5:03:a1:c0:7b:b4:fc:1d:32:63:70:81:ed:8d:b6:
d9:62:cd:ec:04:b4:e5:54:5a:4b:81:2b:ed:ab:66:
cb:1f:27:31:44:7d:25:de:54:9d:a4:78:14:ad:f4:
15:52:eb:09:51:56:3a:8e:3e:c3:18:8e:7c:0b:a3:
b7:ef:67:61:f7:0f:65:5f:98:84:70:99:b7:91:79:
1b:5c:a9:96:41:df:72:d8:37:be:b0:8e:c9:74:35:
20:c3:26:78:ca:f4:ce:a6:55:de:97:96:9d:77:d7:
d1:df:c2:05:46:f8:00:74:ca:c2:e3:8a:c4:58:b3:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:86:67:C3:DA:57:1D:A8:DE:5A:83:16:92:60:D7:14:D6:27:2B
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:47:cb:56:48:db:ea:97:6e:2a:de:12:22:0e:c0:2e:18:ba:
e3:02:63:03:f5:83:26:57:7a:34:42:f0:7d:4c:93:cb:09:9a:
c2:a3:ee:97:1d:e3:9f:24:27:16:0f:da:f6:d5:46:c4:12:6e:
cd:a6:ce:e2:d2:22:6d:13:25:79:c4:d1:e1:28:17:ca:39:a7:
3c:5a:1a:34:26:2f:6f:45:20:60:d7:a5:12:b1:e6:b8:e9:36:
8c:4a:d5:71:8e:95:3b:d7:53:28:c3:49:de:4c:37:5f:e3:e8:
fc:7f:7c:47:d0:4f:9f:ba:1c:1c:01:4a:5d:6d:7f:fc:84:6a:
60:4b:ef:9c:55:9a:c4:c5:f4:85:d6:a7:90:db:78:a0:1f:35:
90:7f:4a:78:3e:a4:61:e6:fc:f0:79:aa:7b:38:ea:30:0e:ec:
c9:78:55:61:a0:e2:a5:6b:7a:0c:db:c2:0d:15:80:27:36:0d:
39:32:78:bc:35:f9:ab:f8:b1:48:4e:12:69:a1:36:26:59:ee:
04:7a:0f:28:57:1a:d2:eb:f4:bb:82:83:f5:ff:a6:82:80:06:
c4:0e:25:ff:9d:b1:28:64:14:ad:dc:c3:96:15:43:ac:84:a8:
c9:3e:55:34:4d:6d:40:eb:0e:77:7e:8c:99:a0:2b:98:40:bd:
54:21:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:06 2025 by rpki-client