Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: 3XYZ8rpZNwd2D7T94NHEWqI9YbUS0otlwp1AAVz/lvM=
Subject key identifier: D4:DB:B8:3C:F2:10:72:7A:23:A1:7F:55:14:51:85:7D:DD:AC:1C:1E
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 0197730918CA1AA87BAA9FF461D8D5ACF56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 0426
Signing time: Sun 15 Jun 2025 10:01:05 +0000
Manifest this update: Sun 15 Jun 2025 10:01:05 +0000
Manifest next update: Mon 16 Jun 2025 10:01:05 +0000
Files and hashes: 1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: oB35Pr0Qu0t4NlC5TmJ0YEZFFt1a5ONcJd0TUtqe3n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:18:ca:1a:a8:7b:aa:9f:f4:61:d8:d5:ac:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Jun 15 10:01:05 2025 GMT
Not After : Jun 16 10:01:05 2025 GMT
Subject: CN=d4dbb83cf210727a23a17f551451857dddac1c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:3c:65:36:ba:28:7c:e9:c0:e8:43:70:ff:
9f:fa:6b:0e:01:5d:c9:77:2d:e7:9f:73:21:46:92:
26:fc:fe:97:63:15:12:78:20:e6:20:84:ba:c4:ae:
2e:af:b5:ce:c3:6e:2e:70:33:39:a5:ac:2d:20:fc:
73:81:1e:a6:fc:85:df:39:dd:34:5c:35:19:4e:14:
19:5e:ba:90:d0:63:b1:45:44:8c:d7:eb:bb:aa:ae:
45:e2:d0:27:bd:3a:c8:39:bd:6c:63:57:df:ce:1a:
5a:92:ad:df:ea:05:32:00:9c:12:19:ef:64:c9:8a:
7e:85:96:81:11:38:80:20:28:87:f2:71:4e:91:d1:
49:9f:c6:fb:48:7a:3a:4e:c6:26:99:69:5a:50:f6:
db:e6:08:07:0f:2f:eb:5b:91:37:42:d4:e2:37:b3:
52:e8:b1:be:f0:c1:4a:aa:1b:8a:eb:4a:a0:aa:3f:
42:a1:87:4f:08:20:de:aa:65:bf:bf:97:72:1a:78:
db:8d:8d:ef:6e:46:d3:79:48:1a:a7:80:5b:4e:d0:
0b:d2:df:00:f7:bd:40:c6:b8:5c:b0:1d:93:e4:b8:
c5:af:fb:ae:26:83:da:c0:52:fc:a8:85:48:35:1e:
e2:04:57:6c:08:f3:12:a1:66:6a:30:a5:29:cb:f0:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:B8:3C:F2:10:72:7A:23:A1:7F:55:14:51:85:7D:DD:AC:1C:1E
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:dc:7b:e2:53:7e:e3:8f:18:8d:59:6a:35:c2:5a:ab:3a:
14:fd:9b:a2:d4:0d:5e:bb:75:ed:40:69:4c:a1:42:7a:de:5d:
54:f5:d1:06:e4:49:56:d5:f6:4c:81:7e:8e:32:3d:4f:27:49:
1e:e8:d6:d2:a1:cb:73:cd:e1:39:63:73:e0:06:98:fa:86:b3:
90:18:02:c2:ca:e2:d7:60:23:2a:4c:64:ac:e6:a1:af:d7:ab:
30:1d:fb:7d:74:be:c5:5c:a1:11:3d:1f:1d:71:d1:44:13:8f:
90:24:15:55:0b:ab:ec:c6:62:a8:95:ea:f7:b2:b6:ac:53:8d:
82:13:dd:4f:42:45:ae:9b:cf:83:04:b6:9d:67:d2:72:08:76:
31:3f:7c:b5:c6:9b:51:12:94:c4:eb:36:b7:10:47:dc:f4:24:
58:e6:4f:8f:1e:03:02:b1:89:c2:a2:ae:2f:b1:95:57:80:16:
b9:33:1f:23:0c:4c:b6:f1:27:fd:82:e3:89:fe:05:be:80:c4:
24:89:ba:8f:96:60:03:99:95:d1:96:41:47:f7:26:ab:6f:bd:
eb:97:e6:76:ba:65:39:02:f1:12:65:1c:e7:68:da:99:26:5a:
ef:f9:53:25:0f:25:70:5c:02:a1:04:bb:6a:e9:81:c2:e1:ff:
14:2d:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:37 2025 by rpki-client