Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: pJGWRoX/s6rNzKA3k/L/K2BtvZFJ0ae36nt34fBkx+U=
Subject key identifier: BA:A7:C8:4A:0D:E4:E0:D3:9A:39:6D:45:BA:1E:15:B0:E4:38:0E:C1
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 01987B9CC80D7C296A7C9A1F6229B220AD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 04AF
Signing time: Tue 05 Aug 2025 19:02:08 +0000
Manifest this update: Tue 05 Aug 2025 19:02:08 +0000
Manifest next update: Wed 06 Aug 2025 19:02:08 +0000
Files and hashes: 1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: hdkexH/pqglM4Cshn9caasuw+EVZ+dlpu3/lmr+mdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:c8:0d:7c:29:6a:7c:9a:1f:62:29:b2:20:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Aug 5 19:02:08 2025 GMT
Not After : Aug 6 19:02:08 2025 GMT
Subject: CN=baa7c84a0de4e0d39a396d45ba1e15b0e4380ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:e8:31:ff:4c:0b:10:b0:d2:07:3a:7e:6f:
e3:fc:74:f1:12:40:87:51:02:b6:26:9f:86:ca:d7:
3e:cb:c5:be:56:24:bc:a7:c5:95:b2:9c:91:6a:06:
63:d3:e6:3b:0b:4e:53:e3:8a:a9:54:3d:05:b2:fd:
e3:49:65:2c:08:94:80:f6:a7:50:92:91:53:58:f7:
0d:3b:4f:5a:3c:f6:a0:56:65:8c:c2:34:36:29:10:
a3:02:d1:1e:96:b4:4a:71:f8:89:6c:fa:7f:7f:b3:
d9:44:3a:7c:e5:34:d8:b0:ca:4a:7e:c7:a4:49:21:
f1:73:d1:a7:97:7e:fd:3c:4e:a4:05:8d:fa:85:67:
fe:13:1d:7e:e6:26:e8:48:48:c5:69:29:0f:5f:ff:
c0:bd:b9:81:1d:0e:93:1b:ec:de:84:28:09:c6:c4:
45:18:9a:23:b5:24:be:e6:c7:eb:11:cd:da:f3:80:
7a:ee:11:d6:37:56:7a:a5:18:b8:66:ef:24:fa:14:
af:da:e2:d7:82:50:83:dd:05:65:46:02:ab:42:1e:
3f:0a:0c:ad:1e:56:b6:4d:a8:04:ec:f7:d1:92:1c:
9c:0e:84:30:fa:4c:58:7a:c2:ed:b6:4c:2c:a7:f2:
7d:9b:e0:37:29:1e:dc:14:96:6a:f0:df:a5:58:bb:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:C8:4A:0D:E4:E0:D3:9A:39:6D:45:BA:1E:15:B0:E4:38:0E:C1
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:1a:f0:8a:9e:01:3b:b1:af:8d:1a:29:64:df:cb:4e:f3:
4b:a7:d1:0d:e1:83:7e:16:4c:f8:27:48:4e:a2:59:f2:80:e7:
de:24:2f:70:a4:56:78:87:f7:c9:cc:a7:3f:ad:7c:20:40:47:
9e:e0:bc:47:bc:c6:ff:47:09:0f:f7:f6:1c:6b:f9:7f:22:53:
1d:45:7a:bc:d0:5d:70:37:42:37:e8:49:1b:77:02:82:93:e4:
09:ef:29:e3:32:85:ed:3e:55:0f:64:c1:d9:eb:d2:ef:10:d6:
f6:81:0b:ca:4f:33:23:b4:cc:a3:5e:8b:56:3a:c5:a4:c4:b2:
c6:cd:58:8d:bd:b4:6e:7a:5a:b3:88:9d:f0:0b:48:aa:ac:bb:
ee:03:d2:74:16:76:ca:b9:61:65:6a:5a:3f:b8:6b:a1:00:e6:
65:55:e2:f0:6c:5a:a6:db:17:97:ea:3c:d1:ad:ad:ca:13:dc:
39:53:12:53:4e:15:6a:fe:50:e8:e6:df:14:b3:d1:41:4c:a9:
4b:ac:d4:51:86:a6:ab:f8:4b:fc:e4:04:6a:c7:a6:1d:cb:0b:
41:35:3d:08:39:7a:d9:65:e0:a2:97:75:23:cf:38:53:ac:f1:
4c:98:e6:72:53:c9:b3:fc:54:2b:9f:7e:fc:b4:c5:6b:bb:89:
ac:01:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:45 2025 by rpki-client