Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: SA8QrSd9RukX6WHZg6DYkO9diUUKLLJTgvMyenD3Evg=
Subject key identifier: 23:6C:D2:E0:DC:A1:98:57:5E:FB:E3:75:8B:1B:09:5B:0A:34:F0:14
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 0198936CD96D70472A4BEA81B05B16F12EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 10:00:40 +0000
Manifest this update: Sun 10 Aug 2025 10:00:40 +0000
Manifest next update: Mon 11 Aug 2025 10:00:40 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: agesePdqrSylYxChxQXknYSbVxLC/uYOpA1cTao3Pts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:d9:6d:70:47:2a:4b:ea:81:b0:5b:16:f1:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Aug 10 10:00:40 2025 GMT
Not After : Aug 11 10:00:40 2025 GMT
Subject: CN=236cd2e0dca198575efbe3758b1b095b0a34f014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:b1:e7:06:e8:ef:a9:31:a9:f3:71:be:61:
4f:03:21:fe:e3:71:49:63:2f:ad:34:2a:bb:02:85:
16:20:f1:59:0e:9b:d2:57:db:8b:2a:92:36:56:0f:
29:12:98:29:e9:a2:af:aa:25:7d:d9:a0:77:fc:79:
eb:da:5c:38:cf:a9:b6:20:b5:a8:7f:3e:25:b0:5a:
eb:2c:8e:21:3b:73:e3:4b:1a:19:9e:54:a5:c1:84:
2e:1f:05:5a:8b:09:23:1b:32:89:e2:db:51:82:a7:
42:a5:15:ce:1e:d3:b2:b0:bd:31:98:41:4e:b6:d9:
26:48:ab:b7:cd:e1:5d:5b:10:f2:2f:1a:eb:44:8e:
f2:9b:0b:e6:7f:d5:7e:02:a4:6e:cc:cb:6f:ff:ae:
87:b6:34:d7:70:90:64:3f:ea:65:8c:64:eb:74:d9:
52:b1:87:91:98:ee:cf:69:d1:da:97:4b:42:1c:91:
98:39:34:ec:13:53:60:6d:f0:49:e7:b2:98:91:c6:
b4:95:f1:11:55:74:06:d4:4b:46:7c:10:11:7f:47:
8f:38:9a:f6:fb:dd:67:16:2e:af:53:96:91:7a:6f:
6b:46:b7:59:36:78:15:2f:b1:99:46:55:34:61:23:
63:d6:46:26:b6:b7:4f:63:21:5a:df:f6:4f:4e:05:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:D2:E0:DC:A1:98:57:5E:FB:E3:75:8B:1B:09:5B:0A:34:F0:14
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1c:ea:2e:5a:54:97:91:93:4c:7f:9f:03:e8:99:b1:2f:f2:
02:a5:5c:55:43:81:f2:65:e1:38:b9:d2:42:00:9f:c7:11:aa:
6a:da:84:22:ff:1a:a9:dd:57:57:f0:80:e9:56:b3:a3:9e:5e:
a5:ae:fb:ec:32:db:07:ee:7b:a2:6b:00:e6:c3:9e:d4:c2:40:
da:d8:84:b6:f5:80:ca:bc:0a:86:fa:02:c2:6b:a2:c1:d8:8c:
34:50:df:0e:23:04:8b:20:5c:de:0f:85:3c:cc:56:b9:64:b8:
bd:88:71:44:9e:35:a0:d1:07:71:49:3b:d4:8d:fa:25:58:2d:
49:1b:70:68:88:c5:07:4c:91:5d:b4:ee:3c:92:a2:e1:11:0d:
5d:7d:e3:d2:d6:41:ea:75:36:df:c8:41:5c:7f:90:c6:76:a5:
6a:00:4a:3a:2f:8f:59:d1:ac:a4:f9:1e:f2:d8:01:2d:14:91:
29:b7:8c:b9:3f:e1:a1:57:a4:96:82:0b:db:45:e2:12:dd:9a:
59:5a:ec:bb:4c:72:93:c5:1f:7a:32:65:ba:25:e8:97:4d:14:
0f:73:7d:9c:40:cf:c2:74:9f:57:6d:8b:35:23:01:4d:ef:d1:
5c:fb:85:24:92:d5:32:00:67:cb:3e:f2:cf:41:bd:17:4f:d6:
aa:d5:d5:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbNltcEcqS+qBsFsW8S74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MWE3MmJmYTRjYWFiY2JhNGVjMDQ4NDEzN2E1MTZmOWYz
NDQzNDYwHhcNMjUwODEwMTAwMDQwWhcNMjUwODExMTAwMDQwWjAzMTEwLwYDVQQD
EygyMzZjZDJlMGRjYTE5ODU3NWVmYmUzNzU4YjFiMDk1YjBhMzRmMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrSx5wbo76kxqfNxvmFPAyH+43FJ
Yy+tNCq7AoUWIPFZDpvSV9uLKpI2Vg8pEpgp6aKvqiV92aB3/Hnr2lw4z6m2ILWo
fz4lsFrrLI4hO3PjSxoZnlSlwYQuHwVaiwkjGzKJ4ttRgqdCpRXOHtOysL0xmEFO
ttkmSKu3zeFdWxDyLxrrRI7ymwvmf9V+AqRuzMtv/66HtjTXcJBkP+pljGTrdNlS
sYeRmO7PadHal0tCHJGYOTTsE1NgbfBJ57KYkca0lfERVXQG1EtGfBARf0ePOJr2
+91nFi6vU5aRem9rRrdZNngVL7GZRlU0YSNj1kYmtrdPYyFa3/ZPTgUmtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNs0uDcoZhXXvvjdYsbCVsKNPAUMB8GA1UdIwQY
MBaAFLYacr+kyqvLpOwEhBN6UW+fNENGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEt
OGMyNTNjNDU5MjcxLzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEtOGMyNTNjNDU5Mjcx
LzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxzqLlpU
l5GTTH+fA+iZsS/yAqVcVUOB8mXhOLnSQgCfxxGqatqEIv8aqd1XV/CA6Vazo55e
pa777DLbB+57omsA5sOe1MJA2tiEtvWAyrwKhvoCwmuiwdiMNFDfDiMEiyBc3g+F
PMxWuWS4vYhxRJ41oNEHcUk71I36JVgtSRtwaIjFB0yRXbTuPJKi4RENXX3j0tZB
6nU238hBXH+QxnalagBKOi+PWdGspPke8tgBLRSRKbeMuT/hoVekloIL20XiEt2a
WVrsu0xyk8UfejJluiXol00UD3N9nEDPwnSfV22LNSMBTe/RXPuFJJLVMgBnyz7y
z0G9F0/WqtXVBw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:19 2025 by rpki-client