Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: 74G5lJEfVFexjV6LvCSGCH97MS84+GTJBZCIrNG90a8=
Subject key identifier: 76:32:D1:8D:13:AD:0D:C2:CE:87:16:C1:B1:0D:E1:A4:BB:D4:2E:61
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0198D888DC67A3F603716D20B8DACD2743C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 0DB2
Signing time: Sat 23 Aug 2025 20:05:04 +0000
Manifest this update: Sat 23 Aug 2025 20:05:04 +0000
Manifest next update: Sun 24 Aug 2025 20:05:04 +0000
Files and hashes: 1: Mn1TvtopFj6bB5iPDf_ER3RBO5U.roa (hash: V29vbEU+T4mdSD6Njnmwp9Xib+vDJNE47xXRk25kXXU=)
2: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: S8ntAh4vlvZlwloXtyfqObzmBBQAABVgCCAmUdulDoY=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:88:dc:67:a3:f6:03:71:6d:20:b8:da:cd:27:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Aug 23 20:05:04 2025 GMT
Not After : Aug 24 20:05:04 2025 GMT
Subject: CN=7632d18d13ad0dc2ce8716c1b10de1a4bbd42e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:c5:72:b4:f5:29:20:c1:12:61:fd:0b:ec:
3c:f7:12:63:7b:0f:43:e8:7e:e8:70:03:41:0f:d9:
2f:5d:44:a7:41:11:4d:e6:27:3f:25:cb:e9:2c:d2:
4c:d2:40:32:78:d0:5f:46:ad:ef:97:7e:71:39:79:
da:54:32:1c:1c:5d:dd:1a:11:09:a9:3c:55:26:22:
25:5e:46:72:dc:8b:0f:d3:5b:2f:78:27:84:ac:02:
de:39:57:33:61:7c:a9:9e:33:d3:8e:d4:af:dc:50:
11:d4:33:78:06:92:2b:2e:e6:75:1f:f8:c9:df:2d:
4b:7b:ea:b7:07:6a:4b:b5:b5:75:47:5d:f2:3a:eb:
9a:71:a5:bf:ee:32:40:b3:aa:1c:da:a4:0c:b3:b4:
a7:44:c0:23:6c:3f:d7:c7:3e:19:79:dc:cb:0e:f3:
d7:c2:93:36:43:94:62:45:05:d9:17:30:36:dd:73:
3c:13:2f:e1:98:c4:92:bd:38:5c:20:a6:5f:1f:2c:
68:5a:e2:0d:ac:39:45:70:d7:ca:32:f6:1d:be:f0:
65:09:73:db:a4:db:0c:83:39:82:79:fd:cd:18:9d:
32:fd:62:3b:18:c1:98:5f:e4:ab:ca:bb:18:8b:11:
d6:2a:cf:df:09:66:f9:4c:9e:84:7d:d8:a3:fa:6f:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:D1:8D:13:AD:0D:C2:CE:87:16:C1:B1:0D:E1:A4:BB:D4:2E:61
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e0:56:49:c6:ec:7d:76:2c:8f:99:11:92:6c:d0:8f:00:e4:
c0:b7:ce:f5:01:2a:b0:a5:34:bd:e9:1d:52:ad:1f:cd:a3:af:
ee:3e:fa:70:fc:6d:75:92:a4:1b:0f:51:e9:c2:4a:f0:0f:4a:
0c:8a:09:5e:d1:14:3f:31:7d:50:ff:32:52:56:7e:88:d5:b2:
1d:61:aa:2d:4f:76:1c:90:2a:32:cc:36:ec:69:13:cb:2c:b3:
45:3a:f1:53:73:a0:aa:fa:f0:08:55:77:38:a1:1c:42:78:aa:
ed:27:e9:34:31:9f:ff:67:77:be:6f:3b:e2:25:48:73:38:18:
fd:d0:c2:84:c6:e4:37:e5:fe:1a:5e:67:90:40:9e:c5:f1:2c:
49:1b:3a:8a:84:3f:a8:9e:d7:0f:c1:c1:4f:f5:10:cd:ae:ce:
b4:10:c5:41:ad:41:71:50:95:e9:e9:28:a6:bd:72:7f:1b:39:
24:64:bd:8f:77:df:bd:27:21:18:4e:f0:52:f4:2c:b5:9b:d0:
b0:de:65:c6:f5:e6:57:ae:19:50:93:18:5d:62:8d:46:78:8c:
87:8a:68:91:4b:b2:a8:31:58:02:64:6c:69:db:07:15:32:eb:
b3:24:52:b0:9a:a6:c6:b9:6c:72:9c:67:a4:b6:ac:aa:32:6e:
f7:1f:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:52 2025 by rpki-client