Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: uk6K2bhMo23BhqBI1Cwald5fj4NO1+2yZlM5C2MgKgU=
Subject key identifier: AD:27:E7:CB:48:D3:EA:E7:19:E6:61:6E:4D:CB:66:6C:64:99:F3:1A
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 019896A616AD3A480186C7D163795B9FC2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 092E
Signing time: Mon 11 Aug 2025 01:02:03 +0000
Manifest this update: Mon 11 Aug 2025 01:02:03 +0000
Manifest next update: Tue 12 Aug 2025 01:02:03 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: Ay6jSq/oHxuPkheGRJbZ+IXElV8jvPSlWlzVhQK7pCA=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:16:ad:3a:48:01:86:c7:d1:63:79:5b:9f:c2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Aug 11 01:02:03 2025 GMT
Not After : Aug 12 01:02:03 2025 GMT
Subject: CN=ad27e7cb48d3eae719e6616e4dcb666c6499f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:59:48:e7:ee:f0:12:30:2c:63:21:76:b7:
e7:d5:93:06:7a:3d:aa:e2:95:1b:38:cd:97:43:59:
33:b6:75:58:51:f2:db:39:29:cb:d2:ad:bc:4d:1b:
44:6b:0b:0f:91:90:97:da:23:15:23:5a:b7:97:d6:
db:10:30:b0:1b:87:2e:d7:58:03:18:ff:e9:e6:f7:
3c:43:f1:13:2c:27:41:a4:d1:a5:5a:6d:4f:f7:31:
ac:73:a4:8e:9a:24:9f:62:50:e2:b4:6b:89:eb:61:
0e:80:94:27:70:e3:51:24:dc:8d:74:1c:fa:3d:7e:
ca:da:5f:09:5b:7b:22:23:71:c9:53:34:eb:db:88:
5f:89:ec:aa:df:29:2d:53:de:57:8c:ef:42:36:f5:
64:d6:3b:ca:4e:b0:7a:9b:bc:35:a2:d0:07:61:4b:
ef:cd:65:8d:88:73:b5:61:31:cc:ac:46:6c:e2:0e:
65:3a:5e:47:15:47:e1:b8:29:e5:30:fd:a3:bf:2e:
85:92:0e:2b:75:fe:d3:17:71:0a:a9:23:ca:2c:3a:
07:48:b8:63:15:94:66:50:ac:6b:4c:16:17:a0:69:
31:12:89:96:21:4d:20:d5:85:70:b2:24:2f:8b:9f:
39:b6:94:a2:d1:bc:f6:27:a9:a6:1f:c8:db:6e:5c:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:E7:CB:48:D3:EA:E7:19:E6:61:6E:4D:CB:66:6C:64:99:F3:1A
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4d:12:47:24:16:ef:e4:c2:84:b7:45:2d:7b:0d:49:bf:02:
c2:98:8d:1e:77:1a:26:66:fe:64:fa:c2:43:df:18:a4:2d:50:
c0:1a:39:37:00:45:c0:85:6a:b1:bb:44:d3:92:6a:dd:53:41:
04:16:a8:c9:9f:93:8f:fd:d1:81:65:4c:36:fb:81:0c:01:0b:
0f:23:4c:80:91:0f:3c:3d:92:5b:48:53:de:15:3c:3a:aa:aa:
27:14:0f:a0:ff:59:97:63:ef:32:ba:6b:81:cf:21:af:37:08:
de:bc:f1:e4:d0:30:48:e3:45:f0:17:d8:c7:a9:68:c5:e1:79:
c1:ae:f4:ac:39:a7:1f:ee:94:b3:a7:aa:02:7f:4a:c3:ad:1f:
12:79:15:63:ab:e7:4e:97:20:90:15:8d:a3:fc:b4:96:56:78:
10:6e:d9:a9:d4:a5:00:6c:58:db:d1:c8:eb:0a:be:53:b9:cc:
61:91:f1:ba:cf:2f:26:67:d5:52:3d:7d:bf:db:59:0f:4a:51:
75:f0:58:ce:a2:f5:cb:01:1d:1a:01:9c:c8:c2:55:55:c8:fa:
6c:7e:6d:5e:00:b5:a3:34:27:49:db:e5:d0:92:b0:1f:d1:ff:
5c:e2:11:f9:60:20:03:c5:1f:3e:60:cf:6b:55:5e:ca:d1:ef:
12:8f:22:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWphatOkgBhsfRY3lbn8LyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTI5ZmJjYzdhZThmNWI0MDE5ZjA3YTNkNmQyZTE4NDk2
YjVlZTQwHhcNMjUwODExMDEwMjAzWhcNMjUwODEyMDEwMjAzWjAzMTEwLwYDVQQD
EyhhZDI3ZTdjYjQ4ZDNlYWU3MTllNjYxNmU0ZGNiNjY2YzY0OTlmMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZtZSOfu8BIwLGMhdrfn1ZMGej2q
4pUbOM2XQ1kztnVYUfLbOSnL0q28TRtEawsPkZCX2iMVI1q3l9bbEDCwG4cu11gD
GP/p5vc8Q/ETLCdBpNGlWm1P9zGsc6SOmiSfYlDitGuJ62EOgJQncONRJNyNdBz6
PX7K2l8JW3siI3HJUzTr24hfieyq3yktU95XjO9CNvVk1jvKTrB6m7w1otAHYUvv
zWWNiHO1YTHMrEZs4g5lOl5HFUfhuCnlMP2jvy6Fkg4rdf7TF3EKqSPKLDoHSLhj
FZRmUKxrTBYXoGkxEomWIU0g1YVwsiQvi585tpSi0bz2J6mmH8jbblyhQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0n58tI0+rnGeZhbk3LZmxkmfMaMB8GA1UdIwQY
MBaAFE4Sn7zHro9bQBnwej1tLhhJa17kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGIt
OTFkMmI0ODkwMzY5LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGItOTFkMmI0ODkwMzY5
LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMU0SRyQW
7+TChLdFLXsNSb8CwpiNHncaJmb+ZPrCQ98YpC1QwBo5NwBFwIVqsbtE05Jq3VNB
BBaoyZ+Tj/3RgWVMNvuBDAELDyNMgJEPPD2SW0hT3hU8OqqqJxQPoP9Zl2PvMrpr
gc8hrzcI3rzx5NAwSONF8BfYx6loxeF5wa70rDmnH+6Us6eqAn9Kw60fEnkVY6vn
TpcgkBWNo/y0llZ4EG7ZqdSlAGxY29HI6wq+U7nMYZHxus8vJmfVUj19v9tZD0pR
dfBYzqL1ywEdGgGcyMJVVcj6bH5tXgC1ozQnSdvl0JKwH9H/XOIR+WAgA8UfPmDP
a1VeytHvEo8i1g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:18 2025 by rpki-client