Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: yupuspajF5tYD6EAEwQnhjA6X4eQGViH57Wf/OkyDY4=
Subject key identifier: B8:F7:91:9C:46:7D:CF:72:23:8F:2D:64:6B:E2:6F:49:4B:D5:43:F8
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01987BA8FEECB5A83EE3EAA8583CF7083B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 0A52
Signing time: Tue 05 Aug 2025 19:15:29 +0000
Manifest this update: Tue 05 Aug 2025 19:15:29 +0000
Manifest next update: Wed 06 Aug 2025 19:15:29 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: 3+YfXpJVGHvLCwyHyD/9ojkMWGnL1IGwVRwrpM0f0FY=)
2: VBBPZz2Clmq9JQ9D1jJY9HQ50qs.roa (hash: gk3nUUVigHcZonMDdgzXZscs9W+bga6UT9YBjSWqBBE=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:a8:fe:ec:b5:a8:3e:e3:ea:a8:58:3c:f7:08:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Aug 5 19:15:29 2025 GMT
Not After : Aug 6 19:15:29 2025 GMT
Subject: CN=b8f7919c467dcf72238f2d646be26f494bd543f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:7d:70:a0:e8:e0:1f:6e:4c:e6:a3:58:58:
e2:ed:b5:1f:c1:09:b3:f3:a2:08:e3:6b:d6:2b:5a:
6c:71:cc:d8:aa:5b:52:f2:d8:ce:c5:68:47:e0:63:
7e:98:ff:66:05:fe:88:3e:63:29:cc:1e:bd:94:79:
53:47:80:b1:9d:d1:4a:71:5c:0f:e3:95:a6:98:b9:
03:a2:8b:16:3b:8d:e6:6a:b3:c7:cd:a9:15:44:68:
df:07:ec:8d:d5:10:d2:f0:d2:88:f3:13:81:8c:e8:
db:4e:86:45:81:56:86:0d:08:05:9e:18:3b:ad:df:
5d:bc:4b:99:96:b8:94:84:18:2b:fb:93:75:8f:c3:
46:bc:9e:42:9f:dc:16:55:cd:46:6e:db:ee:30:5b:
c4:0c:1b:91:17:49:85:84:a0:20:5d:24:07:10:1b:
39:96:4a:01:4c:e3:89:72:bb:22:da:f7:5a:76:23:
40:e6:a6:91:8c:1b:7b:00:b0:ef:6c:9a:d3:f4:3c:
90:f5:e4:17:52:91:d4:c2:0d:0c:c5:1c:d6:fd:2d:
b0:ca:db:41:b8:13:64:17:8f:30:fc:53:2e:21:27:
06:7d:44:bc:02:77:5a:2d:e2:0f:e2:90:cc:a4:a3:
d0:72:bc:6c:8a:46:7d:a9:be:fd:f2:1d:1b:7b:b5:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:91:9C:46:7D:CF:72:23:8F:2D:64:6B:E2:6F:49:4B:D5:43:F8
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:24:83:77:74:e8:57:d5:e7:b3:92:63:02:5a:b2:f4:72:97:
0f:6c:63:38:6a:e9:a1:90:d7:32:27:b7:73:a7:cb:60:5a:0f:
7a:ab:e6:00:a0:61:e4:1e:c9:de:cd:94:6e:98:81:8b:be:06:
d5:cd:55:10:b1:3a:e2:31:76:92:41:6f:a7:e7:6c:81:c5:b9:
46:84:13:0a:b1:f1:d6:e2:f1:b9:49:48:eb:58:65:9a:73:ad:
dd:d3:7b:d9:7a:e9:29:9a:f0:c2:9f:d0:36:ae:11:4a:c8:b5:
b7:73:42:ff:50:a9:fb:14:9c:9c:1a:17:ae:cd:96:1f:23:e0:
bc:bf:f3:af:46:94:d7:82:25:b1:fc:a4:4d:74:b4:6b:79:2f:
17:a2:c8:9b:42:ae:8e:08:09:70:0e:b2:af:01:a1:10:38:d6:
e5:4d:c6:8d:f3:b1:25:aa:97:f3:1e:68:42:0f:76:66:8b:a7:
64:53:16:f9:14:a5:71:2c:e8:0c:15:f3:a1:d6:44:20:2f:5c:
81:83:09:d9:ce:f9:a2:1a:ee:99:67:ab:f2:9a:1b:a9:d2:41:
ed:31:39:15:89:1e:e1:fa:df:02:fb:9f:0e:9e:e9:0a:41:68:
32:e9:65:95:83:8b:78:77:8f:67:45:18:be:6a:58:3a:02:13:
ec:1a:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:28 2025 by rpki-client