Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: 8g4FoaY8EVp1ZDISVvmrlgtl1ZkFTdxNxmlRpgz0mcg=
Subject key identifier: 39:30:11:96:2F:E4:F8:BE:8E:E0:84:A7:D4:DB:C6:66:3F:A3:8A:2F
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 019885E8CC079F3C75FFB18B21536A56C667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 19:01:22 +0000
Manifest this update: Thu 07 Aug 2025 19:01:22 +0000
Manifest next update: Fri 08 Aug 2025 19:01:22 +0000
Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: sxVsMncpep1CzVfkBs3cXiJeJPmOvW9ugxuYsKWQD3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:cc:07:9f:3c:75:ff:b1:8b:21:53:6a:56:c6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Aug 7 19:01:22 2025 GMT
Not After : Aug 8 19:01:22 2025 GMT
Subject: CN=393011962fe4f8be8ee084a7d4dbc6663fa38a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:b1:d5:c6:9d:36:eb:cb:6a:cf:d0:08:46:
85:30:16:7f:f3:63:a1:04:af:23:36:ac:33:3a:ff:
c3:a3:31:23:c4:40:f9:a0:0e:aa:9a:e5:05:77:87:
bd:2d:06:4a:75:c3:ea:d8:44:cd:44:e5:d8:db:1b:
e7:d3:cf:8f:1d:78:58:3b:cf:36:4d:f3:62:ef:c6:
ed:91:b6:17:12:fd:32:ca:2c:90:d4:ea:b7:a7:d8:
03:7a:98:a6:89:1b:f7:b8:42:5f:24:e5:8e:84:83:
05:9f:39:51:bc:12:94:38:f7:48:76:46:a8:66:d6:
62:7a:9d:17:85:94:f2:da:94:6d:24:49:52:31:2d:
90:1e:cf:9f:bc:f9:94:30:9f:75:6d:30:e5:c3:35:
b4:67:d9:9c:a1:92:27:52:91:da:1e:30:f2:5e:9e:
e4:b3:ef:00:3b:0b:f2:52:37:36:42:53:86:52:97:
7e:3a:e7:53:53:91:1d:65:6b:7f:c7:77:07:41:c5:
21:30:d5:4c:3d:5f:a4:2b:f8:9b:09:d0:b0:ba:c3:
d5:71:3b:44:b1:aa:3b:7a:22:6e:0e:16:17:39:d1:
19:30:b3:12:e7:c5:8d:d0:aa:68:d4:54:92:3b:3e:
38:8c:5a:9c:e2:d3:c4:b1:09:7f:c1:9a:e5:f4:9b:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:11:96:2F:E4:F8:BE:8E:E0:84:A7:D4:DB:C6:66:3F:A3:8A:2F
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c7:32:ba:09:cc:69:3e:0b:e8:eb:99:72:38:82:8b:6e:d2:
bd:8d:4c:f5:67:9c:cb:53:fe:df:ec:d1:36:9f:20:6b:bc:47:
5f:b3:8d:3a:79:61:f4:95:44:48:97:05:d3:62:44:b2:bf:aa:
78:53:13:d2:3a:25:db:ab:44:bc:0a:70:ed:78:18:6a:66:ed:
fa:d2:84:53:85:b9:84:dc:38:9b:31:8f:f8:e6:c0:33:70:bd:
f8:f8:9e:96:6c:cd:aa:f8:d5:f2:5b:e6:52:9d:58:f3:18:7c:
f4:f0:c3:70:31:24:f1:21:bf:57:82:d6:e7:6b:f1:51:14:68:
42:b3:a9:38:4a:1d:dd:27:30:15:f8:41:97:aa:f3:55:3f:6b:
e3:fb:ce:d7:e3:ec:fe:49:e9:02:22:bd:f9:ca:60:03:71:74:
7f:ef:b3:a0:3a:0f:a0:56:81:10:34:dd:9f:32:bb:df:64:ee:
e7:bc:ba:44:fb:67:9f:04:de:f0:71:4a:c7:59:71:54:60:9f:
7c:0c:00:3e:4d:97:54:5c:53:a1:31:16:87:bb:3c:ee:7a:06:
83:7c:31:03:db:54:bd:80:9d:17:0d:e1:c0:6b:f5:b6:8a:28:
d4:f1:0d:ee:d8:5e:28:bd:8e:43:8e:3d:b0:b6:89:0f:00:d4:
3f:1f:f1:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiF6MwHnzx1/7GLIVNqVsZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzU5NGIwMjE0MjY0ZjA2Njc3NjA5YmI0YWE0Nzc5ZWIx
ZWVjYWQwHhcNMjUwODA3MTkwMTIyWhcNMjUwODA4MTkwMTIyWjAzMTEwLwYDVQQD
EygzOTMwMTE5NjJmZTRmOGJlOGVlMDg0YTdkNGRiYzY2NjNmYTM4YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrOx1cadNuvLas/QCEaFMBZ/82Oh
BK8jNqwzOv/DozEjxED5oA6qmuUFd4e9LQZKdcPq2ETNROXY2xvn08+PHXhYO882
TfNi78btkbYXEv0yyiyQ1Oq3p9gDepimiRv3uEJfJOWOhIMFnzlRvBKUOPdIdkao
ZtZiep0XhZTy2pRtJElSMS2QHs+fvPmUMJ91bTDlwzW0Z9mcoZInUpHaHjDyXp7k
s+8AOwvyUjc2QlOGUpd+OudTU5EdZWt/x3cHQcUhMNVMPV+kK/ibCdCwusPVcTtE
sao7eiJuDhYXOdEZMLMS58WN0Kpo1FSSOz44jFqc4tPEsQl/wZrl9JssTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkwEZYv5Pi+juCEp9TbxmY/o4ovMB8GA1UdIwQY
MBaAFEx1lLAhQmTwZndgm7SqR3nrHuytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYt
YjEzMGJmNzZmZTEwLzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYtYjEzMGJmNzZmZTEw
LzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJscyugnM
aT4L6OuZcjiCi27SvY1M9Wecy1P+3+zRNp8ga7xHX7ONOnlh9JVESJcF02JEsr+q
eFMT0jol26tEvApw7XgYambt+tKEU4W5hNw4mzGP+ObAM3C9+PielmzNqvjV8lvm
Up1Y8xh89PDDcDEk8SG/V4LW52vxURRoQrOpOEod3ScwFfhBl6rzVT9r4/vO1+Ps
/knpAiK9+cpgA3F0f++zoDoPoFaBEDTdnzK732Tu57y6RPtnnwTe8HFKx1lxVGCf
fAwAPk2XVFxToTEWh7s87noGg3wxA9tUvYCdFw3hwGv1tooo1PEN7theKL2OQ449
sLaJDwDUPx/xLQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:06 2025 by rpki-client