Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: 8QwsZHBP7SmGULbaDMUMMBaI2ffcnQhyRgx7ySsOe70=
Subject key identifier: B2:9C:40:A4:EF:34:C1:D0:04:F6:DC:20:61:EC:70:1A:C5:44:DD:B0
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976D40E172E5A945D3F1B76193F23BDEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 8C
Signing time: Sat 14 Jun 2025 07:04:17 +0000
Manifest this update: Sat 14 Jun 2025 07:04:17 +0000
Manifest next update: Sun 15 Jun 2025 07:04:17 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: O3UJDYZxVzPIEhhHc5uMPAd+KW9GFJjWzBMtnlJHR9I=)
2: v3plheg9RYvJds7Zy_gcOwctz6E.roa (hash: D7WRN3eaoQuPEIHq2hXxQKRoKfAR7DwNEXSw3o85eAY=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:40:e1:72:e5:a9:45:d3:f1:b7:61:93:f2:3b:de:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 07:04:17 2025 GMT
Not After : Jun 15 07:04:17 2025 GMT
Subject: CN=b29c40a4ef34c1d004f6dc2061ec701ac544ddb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:70:8c:d6:ff:0b:88:d1:02:d8:15:89:2f:
5f:22:07:7a:48:54:c5:65:b3:4e:3d:1a:42:f5:e3:
b7:4d:63:6e:9d:72:52:7e:c8:4d:76:f5:7e:30:0f:
ad:ad:f1:a8:65:4a:e3:78:3b:53:22:73:20:7c:45:
e9:21:58:86:ab:18:bc:cf:05:2c:e6:2b:7a:a1:5c:
03:de:42:78:8f:56:8d:6e:4c:be:5a:c7:f6:13:4e:
a2:b7:9d:c8:63:09:9a:3e:dc:78:7f:8a:0b:b5:97:
21:44:52:1c:91:b2:f3:49:4a:67:3f:49:3e:b0:a0:
1c:b1:10:39:ee:9f:94:f4:37:64:c2:70:d7:7b:e9:
7c:4a:da:cc:fb:51:40:7d:ee:0c:08:d8:3e:6d:71:
f4:56:2d:ce:99:34:66:36:04:d3:81:1e:d9:c8:bd:
9e:06:30:23:56:52:6f:f0:d9:2e:23:11:cd:80:83:
67:56:5a:59:21:19:7c:11:a6:83:32:84:a5:1d:6f:
0c:c4:1a:73:d9:75:0d:df:67:80:48:09:64:62:ea:
8b:b0:ea:e5:e2:f8:60:96:c9:59:a3:33:1a:51:ee:
34:1e:fa:c1:05:7d:d7:31:a2:75:e7:70:cb:dc:c3:
c2:46:83:e8:ff:a6:16:ba:4b:0d:7c:7b:ae:83:44:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:40:A4:EF:34:C1:D0:04:F6:DC:20:61:EC:70:1A:C5:44:DD:B0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:13:7f:20:63:30:ba:3e:f2:8b:65:58:7f:4d:26:1e:0b:
8b:65:7e:25:77:07:21:e9:46:37:c7:de:0d:d3:cb:8b:c2:48:
a1:53:0a:93:98:f0:eb:c8:52:c4:ea:c5:2a:e2:6c:a3:04:05:
9e:a4:29:df:56:c4:58:00:4e:ee:85:b1:b7:7e:ea:c2:db:9d:
c1:5c:a1:4d:3a:b7:fe:65:5b:73:8a:5d:a4:98:29:70:d8:34:
e4:1a:77:69:09:64:15:d5:bd:e1:fd:8d:9c:57:98:ef:3b:ed:
f3:c1:16:43:54:65:e9:31:15:fd:fd:f0:68:57:49:94:24:98:
91:22:f3:83:d4:1c:c7:44:a6:69:31:77:d7:b2:6b:f3:34:16:
82:1b:10:39:df:e9:74:49:77:92:81:0c:5a:31:1a:ee:20:e6:
cf:c0:ec:77:28:8f:17:6a:0f:db:d8:22:72:12:bf:f0:38:d6:
81:92:d7:f2:16:c5:ed:2e:bb:17:be:15:f2:4e:04:90:e5:e7:
3a:5c:64:67:ad:8c:47:fc:62:2b:24:ed:7b:f7:22:eb:67:f3:
f9:84:1e:49:e1:c9:d5:b6:ac:07:9d:0b:4d:c1:f9:32:ed:09:
9d:76:d7:ff:0d:2f:da:a8:d1:56:1f:5b:54:88:af:e2:aa:28:
52:59:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:48 2025 by rpki-client