Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: R08FR9/eCyc/4rWaOkVUOF1caK/TMWQPKiEkaG5F0Eo=
Subject key identifier: 0E:F2:F5:F4:7A:20:A1:9A:7D:23:9C:AC:D0:92:C1:E6:AB:DB:5B:B1
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019872CF536F5508935CAC4A79CFDBCE31EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 1069
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: jjaEBQNPW89OUfxXDukTo1kCS+SgP9JiD71gvkSKGys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:53:6f:55:08:93:5c:ac:4a:79:cf:db:ce:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=0ef2f5f47a20a19a7d239cacd092c1e6abdb5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:64:fc:35:70:35:d2:09:17:7c:37:e8:7f:
ef:19:ed:f8:99:b8:58:af:06:f3:ce:f1:5f:c3:48:
52:a8:97:cc:5c:56:6e:d9:49:77:27:3a:7f:82:d5:
8c:96:f3:c8:80:20:6b:b9:04:59:25:f1:a9:9e:32:
3d:44:4c:94:37:74:ed:45:0c:82:07:e4:04:11:83:
32:93:ca:33:6c:43:80:ab:87:14:d5:32:c2:d2:6b:
e2:48:72:99:be:40:2e:4b:97:d4:56:03:28:f3:1a:
78:3c:6d:28:63:45:3a:e2:db:af:8a:af:5b:f2:de:
d4:66:72:d2:81:53:81:57:a8:c5:52:01:ba:65:bc:
e2:65:54:36:08:3a:3b:f8:a7:61:8a:4d:85:2b:6e:
5b:43:20:eb:1d:3d:a3:e4:5c:3d:3e:2a:ea:5f:1c:
ef:95:da:01:dd:0e:f2:80:d2:12:a4:a9:b1:5d:64:
6e:04:48:b6:7a:c0:2d:3f:e1:72:81:6f:27:30:c3:
d7:47:5f:f7:94:ae:be:a6:49:51:b2:c0:34:b5:7e:
e3:df:84:ab:4d:90:79:f9:76:cc:ab:75:0d:84:13:
b2:65:0a:ae:e9:68:0a:a2:c5:93:72:8a:da:42:ab:
10:a1:8c:5b:e8:2b:c5:f2:cd:ec:20:f3:8e:78:03:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F2:F5:F4:7A:20:A1:9A:7D:23:9C:AC:D0:92:C1:E6:AB:DB:5B:B1
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9d:71:26:7d:b1:d4:74:a4:94:05:f6:43:a2:90:ea:1d:92:
38:e8:6f:88:f0:c4:5a:73:08:6f:9b:34:8b:75:d5:95:a6:72:
2f:0a:95:83:4b:c7:fa:46:54:6b:97:2a:78:65:c4:bd:05:de:
e4:f5:25:fc:59:ea:cb:43:08:3f:23:ad:2b:8f:89:67:e6:13:
bf:ef:53:94:9a:b4:c5:09:8f:78:f5:f5:a4:cb:63:26:21:d4:
cd:53:74:fc:a8:87:21:47:a9:5f:fb:18:6a:5b:ca:19:65:e8:
bb:61:79:8d:c5:cf:d4:d2:b9:1d:2f:b4:4d:d2:1a:99:f4:0d:
89:7d:7e:33:00:83:e5:21:73:2f:ca:ed:ab:bc:c7:b1:d4:34:
e9:e6:4f:e8:a1:62:e2:08:54:f1:f8:70:48:72:05:11:3c:fd:
83:7f:bb:b0:a8:50:71:e1:18:27:8c:1b:5a:9d:af:86:1a:88:
ee:9f:6f:7d:dc:24:81:de:19:f1:2d:a1:7b:05:7c:66:48:c5:
4a:e3:ab:77:d2:22:83:6b:d7:b1:59:a3:89:6f:fe:7f:86:f9:
a5:cb:24:34:48:7b:31:94:f2:07:09:41:19:8e:ca:df:17:5e:
4e:d3:af:55:20:8b:68:12:d5:bd:eb:b8:62:87:27:56:7f:65:
30:93:1c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz1NvVQiTXKxKec/bzjHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MWI3OTc0ZTk3YWI5Mzc5MTI0MDczNGExOWZiOWFlNzQ0
NWNiZDkwHhcNMjUwODA0MDIwMDQ2WhcNMjUwODA1MDIwMDQ2WjAzMTEwLwYDVQQD
EygwZWYyZjVmNDdhMjBhMTlhN2QyMzljYWNkMDkyYzFlNmFiZGI1YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwtk/DVwNdIJF3w36H/vGe34mbhY
rwbzzvFfw0hSqJfMXFZu2Ul3Jzp/gtWMlvPIgCBruQRZJfGpnjI9REyUN3TtRQyC
B+QEEYMyk8ozbEOAq4cU1TLC0mviSHKZvkAuS5fUVgMo8xp4PG0oY0U64tuviq9b
8t7UZnLSgVOBV6jFUgG6ZbziZVQ2CDo7+Kdhik2FK25bQyDrHT2j5Fw9PirqXxzv
ldoB3Q7ygNISpKmxXWRuBEi2esAtP+FygW8nMMPXR1/3lK6+pklRssA0tX7j34Sr
TZB5+XbMq3UNhBOyZQqu6WgKosWTcoraQqsQoYxb6CvF8s3sIPOOeAM5IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7y9fR6IKGafSOcrNCSwear21uxMB8GA1UdIwQY
MBaAFLYbeXTperk3kSQHNKGfua50RcvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2Mt
ZTcyNjM3NDMzMGNlLzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2MtZTcyNjM3NDMzMGNl
LzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ1xJn2x
1HSklAX2Q6KQ6h2SOOhviPDEWnMIb5s0i3XVlaZyLwqVg0vH+kZUa5cqeGXEvQXe
5PUl/Fnqy0MIPyOtK4+JZ+YTv+9TlJq0xQmPePX1pMtjJiHUzVN0/KiHIUepX/sY
alvKGWXou2F5jcXP1NK5HS+0TdIamfQNiX1+MwCD5SFzL8rtq7zHsdQ06eZP6KFi
4ghU8fhwSHIFETz9g3+7sKhQceEYJ4wbWp2vhhqI7p9vfdwkgd4Z8S2hewV8ZkjF
SuOrd9Iig2vXsVmjiW/+f4b5pcskNEh7MZTyBwlBGY7K3xdeTtOvVSCLaBLVveu4
YocnVn9lMJMccQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:32 2025 by rpki-client