Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: 05yai8AX209jJOJyNca9fald4vnHt2uS9S3Qlk6QJ0k=
Subject key identifier: F3:C8:1F:F4:C3:FD:61:14:FB:E4:74:C5:C9:1E:8D:E2:58:F9:C5:C1
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0198334BE3FA5E4DDBEF1C6F3C16C8F309A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0A3A
Signing time: Tue 22 Jul 2025 18:01:08 +0000
Manifest this update: Tue 22 Jul 2025 18:01:08 +0000
Manifest next update: Wed 23 Jul 2025 18:01:08 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: XZor8kzD0kkK2Tu7kpccZNH8v5T7k/YB8mfQPCI3a7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:4b:e3:fa:5e:4d:db:ef:1c:6f:3c:16:c8:f3:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Jul 22 18:01:08 2025 GMT
Not After : Jul 23 18:01:08 2025 GMT
Subject: CN=f3c81ff4c3fd6114fbe474c5c91e8de258f9c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:06:4f:d6:5e:18:22:8d:1a:b9:dd:22:12:
4a:81:89:5c:e5:47:98:59:e5:ed:05:bc:99:1b:d3:
b3:7b:e2:1b:29:46:08:f9:3d:24:27:ee:b5:69:ba:
cf:70:eb:17:32:5e:9e:90:38:3a:65:eb:d5:7a:aa:
d2:26:47:24:fd:be:9c:60:bd:5d:ff:4c:a4:c0:f3:
f5:77:13:48:cc:5d:38:5c:ad:43:fc:f2:3c:13:e7:
3f:c6:3d:85:21:88:0c:b1:8a:b9:68:03:ae:fe:d8:
61:10:6e:ac:4d:85:16:c1:fd:d0:94:e6:9c:83:85:
c1:d4:44:a3:48:0a:34:f7:6b:33:0c:31:b8:50:34:
43:f2:bb:6c:5a:ca:21:7c:77:38:ef:ea:42:f8:e8:
76:0c:35:23:f2:9f:18:b5:dd:ef:34:14:fe:a5:31:
ca:c3:68:67:33:70:c3:40:8b:d6:ed:d3:5e:bc:04:
a3:de:70:c7:b4:06:2d:6a:28:77:e5:84:c2:9b:fe:
87:6e:be:50:07:76:fc:3f:86:67:93:65:7c:e0:ff:
e8:1f:aa:c0:86:11:fc:d5:28:6c:7e:0e:27:0b:ec:
cb:cb:aa:ea:7b:4c:fe:95:1f:b9:e5:8f:4d:2d:dd:
b3:b3:83:ac:cb:a5:b6:0d:e1:ad:77:f5:8c:c1:6e:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:1F:F4:C3:FD:61:14:FB:E4:74:C5:C9:1E:8D:E2:58:F9:C5:C1
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:81:41:b6:1b:16:80:c2:b6:46:d7:1e:57:9f:c5:17:63:eb:
39:53:4e:10:21:25:3c:a2:45:26:40:c0:6a:95:ff:b0:0d:b6:
21:ad:2e:ef:c6:85:0d:96:2f:4f:10:42:69:24:06:16:d1:0c:
2f:7c:10:0f:2c:aa:07:e8:0f:e3:fc:c3:f2:2e:ed:cc:38:5e:
c5:b3:f5:0f:dd:6a:d5:d3:66:79:5c:05:fd:f2:2f:fa:0a:21:
42:66:d3:90:2c:59:b2:5c:fd:b5:47:c1:dc:1a:9a:c7:5b:be:
85:cb:18:d4:4b:5f:07:84:8a:14:8f:50:7c:b1:0a:4f:e8:4a:
56:fe:66:2c:78:54:10:df:2a:cf:e6:66:f9:53:6c:94:63:fe:
31:44:fb:b4:f5:2b:49:51:d2:d2:6b:f3:eb:40:54:de:cd:00:
53:15:89:11:97:1b:fa:04:af:3f:a9:3a:fc:19:20:31:2c:9c:
fd:f0:fa:04:6c:b9:90:68:d2:ca:4c:fd:d8:7e:79:d7:29:dc:
ff:54:5f:95:7d:01:a7:27:af:71:77:14:04:5d:a1:5f:8a:2c:
a4:a1:78:09:e2:e0:cd:65:c6:43:fd:bd:e2:e1:14:2a:9d:69:
5a:f2:69:2e:0c:76:b1:dc:63:bb:b9:83:6f:15:a3:2a:65:30:
af:6c:47:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzS+P6Xk3b7xxvPBbI8wmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjUwNzIyMTgwMTA4WhcNMjUwNzIzMTgwMTA4WjAzMTEwLwYDVQQD
EyhmM2M4MWZmNGMzZmQ2MTE0ZmJlNDc0YzVjOTFlOGRlMjU4ZjljNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6MGT9ZeGCKNGrndIhJKgYlc5UeY
WeXtBbyZG9Oze+IbKUYI+T0kJ+61abrPcOsXMl6ekDg6ZevVeqrSJkck/b6cYL1d
/0ykwPP1dxNIzF04XK1D/PI8E+c/xj2FIYgMsYq5aAOu/thhEG6sTYUWwf3QlOac
g4XB1ESjSAo092szDDG4UDRD8rtsWsohfHc47+pC+Oh2DDUj8p8Ytd3vNBT+pTHK
w2hnM3DDQIvW7dNevASj3nDHtAYtaih35YTCm/6Hbr5QB3b8P4Znk2V84P/oH6rA
hhH81Shsfg4nC+zLy6rqe0z+lR+55Y9NLd2zs4Osy6W2DeGtd/WMwW5XUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPIH/TD/WEU++R0xckejeJY+cXBMB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4FBthsW
gMK2RtceV5/FF2PrOVNOECElPKJFJkDAapX/sA22Ia0u78aFDZYvTxBCaSQGFtEM
L3wQDyyqB+gP4/zD8i7tzDhexbP1D91q1dNmeVwF/fIv+gohQmbTkCxZslz9tUfB
3Bqax1u+hcsY1EtfB4SKFI9QfLEKT+hKVv5mLHhUEN8qz+Zm+VNslGP+MUT7tPUr
SVHS0mvz60BU3s0AUxWJEZcb+gSvP6k6/BkgMSyc/fD6BGy5kGjSykz92H551ync
/1RflX0BpyevcXcUBF2hX4ospKF4CeLgzWXGQ/294uEUKp1pWvJpLgx2sdxju7mD
bxWjKmUwr2xHnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:54:18 2025 by rpki-client