Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: uspBdxkDysqHsd5Y52Ytm6G4XrWAYyzQvXbRR6MTTY8=
Subject key identifier: 5F:4C:D3:93:78:19:15:56:F8:CD:6C:26:BC:00:E9:32:97:79:AE:3A
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0198808B85F110F67B74CE7ACB68827B8C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 18:01:24 +0000
Manifest this update: Wed 06 Aug 2025 18:01:24 +0000
Manifest next update: Thu 07 Aug 2025 18:01:24 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: D+wBkAbp1sQut3pa2o+VDhv2gcm09MW7hvRYuI257j0=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:85:f1:10:f6:7b:74:ce:7a:cb:68:82:7b:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Aug 6 18:01:24 2025 GMT
Not After : Aug 7 18:01:24 2025 GMT
Subject: CN=5f4cd39378191556f8cd6c26bc00e9329779ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:71:33:02:66:f8:75:35:68:33:57:d3:4c:4d:
24:4d:a1:9b:6f:d1:cd:c3:cf:c5:ad:77:5f:24:1a:
e5:b9:29:4c:91:4d:ac:53:fe:1d:93:bc:98:62:d4:
eb:2e:d4:eb:ea:f5:0e:95:8a:12:19:9d:81:5e:dc:
aa:7a:8e:18:41:7b:53:79:83:7d:af:88:63:bd:a3:
06:ca:f1:e1:aa:94:98:4e:d6:66:29:56:d6:58:1c:
78:8c:cd:7c:3c:9b:3b:c4:9a:35:3a:6d:ad:1c:a3:
4b:5a:60:56:42:43:35:23:a8:a6:35:b9:08:27:78:
64:26:32:cd:e3:84:96:06:bd:e8:b6:16:bd:f4:d4:
81:6a:5c:99:6f:4d:82:cf:a7:d5:a6:fe:54:7d:d6:
4f:12:1e:74:af:a4:59:48:f0:a3:16:df:eb:43:13:
3d:ab:2c:7c:96:6c:03:bc:8c:4d:83:43:6e:41:ea:
1e:86:64:ea:a1:46:ad:f5:ca:33:54:b1:56:ff:e7:
a4:22:f8:bb:e8:ea:38:f4:78:f7:49:ee:3f:ee:0b:
f7:f2:93:b0:2b:60:3c:24:6a:f3:10:7d:45:b8:b8:
24:1b:c9:7d:03:c6:60:c6:0c:ee:84:49:4d:7f:43:
0c:44:ed:70:d3:86:a2:ce:8b:fc:25:60:47:da:8c:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4C:D3:93:78:19:15:56:F8:CD:6C:26:BC:00:E9:32:97:79:AE:3A
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:d8:c1:62:69:61:62:d9:19:19:7b:b3:bf:a9:75:00:27:
af:5f:f8:2a:ee:0c:f2:91:23:6b:80:04:cb:dd:40:f5:7e:ec:
b6:64:dd:4f:ce:32:3b:c8:b9:c1:22:5c:c0:77:1d:ed:bf:16:
9e:82:2b:b2:61:97:8b:66:f0:0b:4d:5c:ac:51:9e:77:e5:56:
84:ca:be:1b:8e:37:50:d6:35:32:7c:78:fc:c2:8f:26:92:76:
48:2f:22:2f:33:31:b5:ae:0d:59:64:7e:ef:44:ad:59:3a:76:
05:1c:34:a8:80:ec:24:ef:1b:7a:5a:ee:13:5b:5a:28:0b:20:
b6:45:08:be:ce:3a:fd:12:3c:a9:74:4b:3b:f5:52:33:c1:33:
3e:78:c0:70:d1:71:77:68:0f:4b:f0:37:23:38:dd:2d:1a:ab:
e2:5d:34:cc:17:e6:9b:0d:7e:85:99:b0:7f:42:b2:51:5e:2d:
c3:ef:5f:ab:e3:cf:07:d1:a5:8c:4d:22:2b:c6:7b:91:48:de:
ce:b0:0b:81:3f:c0:0f:20:a9:3f:10:bc:df:60:81:02:d3:03:
58:ac:71:b1:64:03:de:74:a6:f2:c6:82:99:26:77:45:cf:dd:
7e:02:91:b5:40:77:6c:8f:be:4d:c9:db:ad:91:38:6e:b8:9a:
55:f9:42:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAi4XxEPZ7dM56y2iCe4yTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTY3ZWU1ZjhkMmFjMGQ5Y2MwMTM3YjQxOTEyZjE4MWIw
NDg5YjAwHhcNMjUwODA2MTgwMTI0WhcNMjUwODA3MTgwMTI0WjAzMTEwLwYDVQQD
Eyg1ZjRjZDM5Mzc4MTkxNTU2ZjhjZDZjMjZiYzAwZTkzMjk3NzlhZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73EzAmb4dTVoM1fTTE0kTaGbb9HN
w8/FrXdfJBrluSlMkU2sU/4dk7yYYtTrLtTr6vUOlYoSGZ2BXtyqeo4YQXtTeYN9
r4hjvaMGyvHhqpSYTtZmKVbWWBx4jM18PJs7xJo1Om2tHKNLWmBWQkM1I6imNbkI
J3hkJjLN44SWBr3otha99NSBalyZb02Cz6fVpv5UfdZPEh50r6RZSPCjFt/rQxM9
qyx8lmwDvIxNg0NuQeoehmTqoUat9cozVLFW/+ekIvi76Oo49Hj3Se4/7gv38pOw
K2A8JGrzEH1FuLgkG8l9A8ZgxgzuhElNf0MMRO1w04aizov8JWBH2oyBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9M05N4GRVW+M1sJrwA6TKXea46MB8GA1UdIwQY
MBaAFE4WfuX40qwNnMATe0GRLxgbBImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2Et
ZjY2MmIwYTY1ZThlLzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2EtZjY2MmIwYTY1ZThl
LzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXbYwWJp
YWLZGRl7s7+pdQAnr1/4Ku4M8pEja4AEy91A9X7stmTdT84yO8i5wSJcwHcd7b8W
noIrsmGXi2bwC01crFGed+VWhMq+G443UNY1Mnx4/MKPJpJ2SC8iLzMxta4NWWR+
70StWTp2BRw0qIDsJO8belruE1taKAsgtkUIvs46/RI8qXRLO/VSM8EzPnjAcNFx
d2gPS/A3IzjdLRqr4l00zBfmmw1+hZmwf0KyUV4tw+9fq+PPB9GljE0iK8Z7kUje
zrALgT/ADyCpPxC832CBAtMDWKxxsWQD3nSm8saCmSZ3Rc/dfgKRtUB3bI++Tcnb
rZE4briaVflCeg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:43 2025 by rpki-client