Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: 6TQr6ud/o6t3KFEwMz/+Gp2wH7XPJV89PEqKvmW/qwc=
Subject key identifier: 26:B5:05:48:C2:3A:94:AF:E3:53:48:2C:CA:1C:38:CF:48:98:A9:94
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019A4FD06B65970A6EEF250EF1201E1AAD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 1160
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: x0a6V0kexqYFdKm5f5FgExZZN7m2otT4GitBOfevsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6b:65:97:0a:6e:ef:25:0e:f1:20:1e:1a:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=26b50548c23a94afe353482cca1c38cf4898a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:26:72:47:9f:a0:c9:4e:c4:f2:fb:a5:46:
0f:5e:ce:de:64:a6:bc:3d:85:18:2c:45:4b:ed:bc:
3e:59:72:75:bc:3b:61:d9:0a:f6:1e:30:47:40:d3:
e7:74:1a:52:91:46:2e:87:8d:af:d5:6e:89:87:b9:
de:64:a2:42:7d:b1:60:61:18:a4:8c:be:5b:ae:b7:
f6:87:aa:63:8c:53:47:4c:fb:43:0b:7f:99:6f:16:
dc:04:18:36:36:45:b5:b4:2f:13:4f:ca:63:23:b2:
46:e2:df:c8:13:ae:2c:19:b9:5d:3c:6b:27:44:c5:
41:0c:39:fd:eb:af:e2:fd:40:f1:92:d7:51:2e:e3:
ab:5a:86:a4:55:4b:ec:fb:94:e5:9f:56:b2:ca:93:
c2:77:ef:57:42:e0:01:70:9a:ec:e0:4a:d8:8f:df:
76:99:0b:08:83:7b:9c:db:51:1b:7e:18:df:36:ca:
62:2c:ab:4a:b5:1b:75:da:53:ae:e9:1c:7b:0c:06:
24:50:a6:77:19:9a:e3:a8:27:aa:4e:1b:55:17:af:
6e:8b:86:cc:84:af:0e:36:a0:c3:26:cc:eb:db:e8:
a1:1b:c4:33:f3:e9:fc:1a:95:98:7a:4f:0f:f0:54:
ce:d0:a0:cc:4e:71:2e:de:97:71:91:30:9e:56:a8:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:05:48:C2:3A:94:AF:E3:53:48:2C:CA:1C:38:CF:48:98:A9:94
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:2f:d5:63:58:2a:00:37:af:63:be:a9:01:4a:19:04:4d:
14:3f:84:43:9b:0d:1c:5f:24:31:ae:5b:0e:1b:4b:f2:16:80:
24:f3:a1:ac:b0:38:b2:85:c0:58:49:ca:a8:31:16:9f:69:42:
5b:aa:ed:0e:c6:e7:ad:6a:4e:bc:a6:96:fe:a9:cc:0e:3f:76:
cc:13:4a:c3:79:81:95:b4:9d:71:0d:94:23:57:ea:aa:3f:14:
b7:81:eb:ca:52:87:46:71:77:e3:60:4d:a2:80:93:12:d9:b8:
97:65:a8:d9:7b:b2:68:9a:fd:2d:a4:f6:30:b2:94:f0:1b:99:
07:d9:f4:92:fd:c8:ad:9a:63:4f:76:73:69:fe:c0:2b:28:1b:
c7:5f:8b:3e:cd:f7:05:3d:02:7b:8a:ad:26:77:32:54:1d:32:
10:15:84:9c:b8:09:ff:43:68:59:e6:c2:6c:4e:8a:15:a6:6e:
dc:8b:0f:ac:56:72:f6:f4:52:66:af:ff:56:9f:7f:a8:07:91:
9c:9b:94:c4:f1:a3:52:2b:59:04:1c:0b:fa:5b:7b:0e:18:c6:
25:1d:86:6f:12:d9:82:23:88:aa:a7:30:fd:1a:01:fd:b0:0c:
a3:20:91:bf:12:5c:cf:ed:f6:56:86:8a:a8:e4:05:4c:3b:db:
9b:79:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:00 2025 by rpki-client