Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: oHwZbhce/X/IXYBmFGcdnnems90tk7SKiOGB1tSjd/c=
Subject key identifier: C4:D0:88:24:2C:6E:39:FA:68:1F:46:8E:27:AC:29:5C:33:DE:EC:6B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019A51CAEB4A09E3C105418C556851DE13FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 1B5E
Signing time: Wed 05 Nov 2025 02:14:03 +0000
Manifest this update: Wed 05 Nov 2025 02:14:03 +0000
Manifest next update: Thu 06 Nov 2025 02:14:03 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: 64KV3G2UQUDEVwWYZeAb0dwKI71QdNVY6SP0fKmHKF0=)
2: irqt6GDrSaDnMtNMevxp6HDz-64.roa (hash: iKyKCaDowPiZk2n4ozdNPlznC/FrTOdWFzk/+2bi59k=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:ca:eb:4a:09:e3:c1:05:41:8c:55:68:51:de:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Nov 5 02:14:03 2025 GMT
Not After : Nov 6 02:14:03 2025 GMT
Subject: CN=c4d088242c6e39fa681f468e27ac295c33deec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:00:0d:d4:f6:d7:da:e1:44:f3:51:71:97:
ca:a1:20:07:26:4e:bf:ff:87:af:88:08:e3:24:31:
ec:aa:6d:9a:4b:49:d5:cb:8b:70:97:7f:38:a2:f2:
59:9e:5b:f7:6f:78:0e:0f:02:36:0c:0d:28:ff:8b:
dc:3d:38:ff:6c:8f:97:0b:59:0e:32:b1:fb:8b:a7:
81:d7:f7:ed:84:95:93:24:6e:a9:a9:12:52:84:77:
e7:1f:c6:66:a4:a1:a6:7e:45:8e:77:ca:fa:35:04:
31:2e:1f:cc:79:13:e8:55:26:2d:91:27:62:84:7a:
52:19:1e:55:fa:87:02:c0:c3:79:99:21:b7:2b:f6:
5d:ad:7d:9c:d9:d7:de:c1:62:d7:c3:ba:7c:4d:03:
a9:4a:e3:e9:22:ec:ce:43:22:27:b5:e3:61:2e:ca:
1c:b1:0e:1e:71:dc:10:54:c0:1a:20:89:65:7b:22:
a4:c4:0f:30:78:10:c2:95:cf:d1:18:3f:cb:c3:ec:
be:0c:ee:b5:88:7d:86:44:80:bd:0d:3c:dd:6e:0a:
85:b8:77:90:a4:52:ba:60:6e:c6:ef:14:cf:b7:65:
55:bf:ea:83:23:dc:23:5d:cd:ab:d6:f1:6d:bd:f2:
60:cc:3d:4b:01:a1:a3:0e:bb:9b:5a:fb:b1:7b:a7:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D0:88:24:2C:6E:39:FA:68:1F:46:8E:27:AC:29:5C:33:DE:EC:6B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ce:f2:69:64:c8:4c:15:a5:b2:75:dc:21:17:0c:9a:fd:aa:
28:79:a2:6f:c4:51:b0:c0:0d:c7:47:b3:fa:16:b1:6b:9e:6b:
c1:d5:a1:7b:25:ab:80:aa:08:79:65:71:0f:49:6d:60:fb:4e:
94:fa:b9:8c:a3:32:2f:8d:e4:49:aa:fc:be:4d:55:b2:0d:33:
c8:16:78:d2:09:bc:c3:c2:79:d8:a6:7c:fd:da:0b:38:37:8d:
de:2e:c7:77:a5:7c:b4:31:a9:16:b6:6c:e8:c3:db:f1:c9:1f:
c3:36:7b:13:1f:05:80:38:63:4a:c5:50:83:d7:77:ef:b5:ea:
4e:0a:2f:81:a9:f9:ec:49:f1:e1:2d:d4:2f:25:80:3e:7a:77:
f2:48:1e:91:d5:91:0f:af:6e:1f:5a:01:fd:36:d9:8e:96:f4:
0f:d7:31:85:45:bb:24:fc:d1:82:e3:6c:02:40:57:58:ff:6e:
80:4d:47:c8:ef:65:2b:95:58:bb:b8:89:6e:e6:a9:73:6c:dd:
a5:67:ba:1a:08:ec:4a:96:de:1d:1e:e9:66:e6:b8:3e:ea:34:
c4:52:f2:04:8e:d8:d7:be:c9:31:19:9b:d2:7e:f0:59:b4:13:
f5:d5:23:d2:ce:4c:a9:a0:9c:8a:ea:d3:a7:c6:5d:fd:5b:e0:
91:a8:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:20:30 2025 by rpki-client