Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: oLyEYTPqhMOOGS9CJ1dvspzVUYn/CVhkb0P+TB/L7KU=
Subject key identifier: DE:5B:42:31:BF:B7:07:16:FA:C0:3D:89:69:61:17:82:F0:B3:FD:29
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019A4F99340CCEDAC73C0BFD7FC55DC98568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:31 +0000
Manifest this update: Tue 04 Nov 2025 16:00:31 +0000
Manifest next update: Wed 05 Nov 2025 16:00:31 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: d553/OQ+7XVm04bSautzwHgw2gDBC/z8RjNaXIq8ksM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:34:0c:ce:da:c7:3c:0b:fd:7f:c5:5d:c9:85:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Nov 4 16:00:31 2025 GMT
Not After : Nov 5 16:00:31 2025 GMT
Subject: CN=de5b4231bfb70716fac03d8969611782f0b3fd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:b5:47:36:db:f2:5a:4c:d1:28:ff:48:6a:
b2:34:f1:a8:11:49:1f:4c:a3:49:f0:93:58:37:8c:
a2:f4:09:d0:2a:9f:81:eb:d5:2b:43:f0:d1:94:74:
d7:66:cf:e7:d8:bd:1e:8d:a6:8b:de:43:07:d3:15:
18:5e:e8:1c:e9:1f:39:2c:4d:ad:be:ee:fa:cf:54:
5c:e5:e5:ba:6b:e0:c0:13:27:1a:c5:a2:76:85:55:
d2:64:1e:77:e4:af:fc:34:ff:37:b7:42:d0:1a:b6:
03:5a:5c:24:a1:5e:7c:5e:7f:87:f6:c6:75:6b:35:
ce:a7:73:cb:d9:11:fe:d7:de:3e:f0:02:79:9e:1b:
d7:f0:ed:57:95:3e:bf:73:6b:c2:06:e9:31:bd:1e:
5a:80:9d:96:6d:11:16:a2:0e:29:7d:65:4f:a5:6a:
b7:c3:db:1f:a0:0c:e5:28:38:54:7c:21:1f:de:fa:
2f:38:a4:6d:72:05:7a:0c:1e:7f:73:1b:28:e6:4d:
c9:7d:44:c5:ad:0d:44:06:d6:db:d4:7f:d2:8e:e2:
b0:f3:ab:1b:17:c0:68:7d:78:81:51:2a:e2:23:46:
96:3d:70:98:ab:b8:cb:b3:a4:83:3d:d7:09:95:cd:
05:a8:12:4b:d0:84:b3:4b:c0:4a:8a:e6:aa:9c:4d:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:42:31:BF:B7:07:16:FA:C0:3D:89:69:61:17:82:F0:B3:FD:29
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:74:bc:b2:11:7e:72:e2:17:55:30:8b:35:a0:45:0c:82:19:
6f:66:d9:92:1c:90:30:82:31:dc:ef:30:13:91:c5:58:c9:a9:
87:5d:00:f9:4e:29:4c:45:81:48:a0:40:d6:86:40:ec:dc:52:
9e:62:aa:af:14:13:e6:4a:16:aa:7e:00:c0:ba:0b:e7:af:8b:
27:22:d5:75:c7:8f:44:55:2a:45:22:b3:ab:5b:ec:7e:e6:16:
eb:bd:0f:d1:f4:35:d8:b5:a3:58:aa:be:62:48:9a:03:66:cd:
92:18:27:67:3d:83:ab:d0:7e:14:21:f7:d8:8a:06:34:d4:83:
1b:c9:20:6f:e9:b0:fa:9f:b4:82:9f:ea:6b:75:cc:1c:dd:cc:
2c:24:5e:07:f6:19:47:d2:e3:c2:dd:f7:7d:5c:9f:94:b6:c5:
f3:ae:0a:29:07:cc:f9:ee:77:32:6f:2e:24:a9:42:37:77:74:
9b:56:bc:a9:13:ed:97:a1:8f:36:9a:7a:58:0e:98:2d:c4:98:
e9:59:ed:de:49:59:db:65:05:0d:6f:91:9e:1a:f2:e7:05:fa:
64:e2:6b:7a:05:1e:7a:20:8e:77:6f:36:53:9b:83:6d:8f:5b:
d7:41:39:74:7d:59:c7:48:7a:fa:9e:12:79:67:46:f7:c1:b4:
3c:96:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:02 2025 by rpki-client