Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: VrHlxplwUqjPHls0i0hFNG28XB0GBjOVAbmxKhOLyAk=
Subject key identifier: 37:47:E9:F2:69:B3:A0:E6:6A:4F:5E:AC:48:92:00:72:88:5B:08:C6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0199FD3FC99724FC923F3DAD30F06FEC1D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 184A
Signing time: Sun 19 Oct 2025 16:13:59 +0000
Manifest this update: Sun 19 Oct 2025 16:13:59 +0000
Manifest next update: Mon 20 Oct 2025 16:13:59 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: /91zLrH4zR512URH6tzVff+VniYlCRyw0QcdhuAGYJQ=)
2: bP9YCiL7gx2Z8MVZVFj3wJB7AqI.roa (hash: PRmhtrzq+Gry0i/4xlKviIXjzcqRWvh127nRbWaclk0=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:3f:c9:97:24:fc:92:3f:3d:ad:30:f0:6f:ec:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Oct 19 16:13:59 2025 GMT
Not After : Oct 20 16:13:59 2025 GMT
Subject: CN=3747e9f269b3a0e66a4f5eac48920072885b08c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:35:44:14:9e:4e:d0:cf:10:df:38:0f:96:
62:0e:6d:3c:79:ad:c5:68:25:98:4e:59:1c:cc:bc:
09:f4:1a:68:9b:2a:ac:17:b6:0e:b9:c6:2b:4f:1d:
8a:cd:f5:ae:bf:5d:96:e9:38:27:c9:fc:1d:6d:71:
4f:8b:73:b2:35:c0:fc:84:5b:33:3f:4b:5b:44:dc:
32:33:f4:28:39:a8:21:26:6a:e5:02:36:fe:9c:07:
ca:e1:40:fe:18:e5:49:d3:bf:64:2a:b4:f2:16:cc:
70:99:e5:f5:df:86:8f:6e:30:5e:4b:7b:f5:d0:b9:
d3:fc:82:f2:6c:4c:18:7e:76:46:cc:8c:f7:08:12:
9a:f6:70:cc:23:13:ef:8c:88:dc:97:e4:8d:a6:a4:
96:ae:63:26:d4:7e:9a:88:98:05:01:a9:78:f6:8e:
20:ec:0b:23:b3:73:a6:ee:14:cb:3e:5b:5f:79:f9:
1b:dc:e8:0c:36:40:0f:8d:ac:2a:bf:f7:55:f5:dd:
53:f0:d1:45:73:ef:01:1e:f3:a4:43:c7:a1:36:e9:
67:d1:f4:31:2e:7c:9b:b8:aa:99:d4:2c:43:25:ad:
58:b5:79:41:7b:63:e3:77:ca:4a:eb:c7:15:61:53:
19:d6:78:a7:61:56:37:7f:09:06:ea:27:f5:36:26:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:E9:F2:69:B3:A0:E6:6A:4F:5E:AC:48:92:00:72:88:5B:08:C6
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:81:85:13:a7:e1:e0:05:ad:51:27:6c:ae:f5:70:36:f4:
d7:27:8a:fe:43:3d:09:18:98:39:5e:4d:ba:e0:16:34:13:1e:
1a:57:29:c7:16:9a:18:c9:47:72:5e:d2:0e:ae:29:de:6f:cc:
b8:50:4f:29:6c:cd:c1:9e:6c:6b:df:37:8e:2e:72:27:fe:09:
cc:6b:ce:09:8b:19:87:26:39:78:cb:12:a1:48:15:58:2d:da:
2c:a3:b2:05:20:e3:9c:ba:70:04:02:5a:34:48:c9:a4:c4:8c:
8d:4f:5e:9a:41:5b:fd:29:c2:52:d9:2d:96:f8:c9:e4:7e:b1:
e9:f6:4d:ee:b5:ed:f7:16:a7:9a:03:46:1a:11:2d:64:a3:79:
c4:f1:13:da:ec:d6:be:79:fc:28:7e:80:d2:d9:52:42:f5:43:
2e:1e:31:c9:c3:67:ab:fb:8d:23:71:ca:c9:e7:d2:d9:dd:f1:
26:a1:d6:f8:c6:eb:7f:ac:a1:b0:74:ef:09:9a:90:13:ad:39:
0d:18:f2:f5:91:ee:d6:0d:80:32:b2:ad:68:33:ba:cf:d9:e2:
9a:04:fa:11:7f:99:91:69:af:e0:02:87:18:5c:42:0b:c2:63:
d8:a8:f9:77:aa:7c:15:f0:66:fe:fa:75:e7:11:b2:c5:b1:5c:
1d:13:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:16 2025 by rpki-client