Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: AkwdPi21fQgcES96N3vXbrbqYP5WggxFrTMKZ1w3fAs=
Subject key identifier: F5:03:BD:1D:3D:12:44:E3:21:71:B7:FC:1F:4D:FD:6B:B0:A4:B7:6D
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019A72939854B95AE3D7DC3C72C6758126E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 1172
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: +ZfP/NdSJ0/TRC7NFKY78bSo1S2M+l2Y0bf1iJ46JRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:98:54:b9:5a:e3:d7:dc:3c:72:c6:75:81:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=f503bd1d3d1244e32171b7fc1f4dfd6bb0a4b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:82:23:cc:6e:32:01:4d:2c:73:9f:2e:33:
14:31:78:bb:49:f3:09:58:8e:1c:7d:54:79:d9:20:
9f:86:0e:84:f7:90:af:91:24:fa:4d:19:f3:ba:34:
9d:69:cc:92:5c:de:58:4c:27:69:5c:1f:73:77:df:
5d:6c:07:a9:31:db:f1:04:48:61:57:25:9a:9c:d1:
ae:97:e5:2e:52:aa:04:90:1c:79:40:cf:28:e9:d7:
7e:8c:a3:0f:56:0e:80:9b:6e:c6:65:66:58:0a:bb:
1c:26:e3:db:cc:a4:ed:50:1f:7d:75:3b:92:5a:7f:
6c:c0:d0:14:1a:2f:44:18:bc:14:4d:d3:78:32:48:
6b:de:9f:98:b9:2b:e1:3b:d6:c3:74:35:6d:81:73:
a3:56:5c:db:c6:28:d2:59:6e:1f:e1:d9:b1:42:20:
d9:4e:22:15:63:4c:92:91:e3:d6:cc:ab:ec:e6:d1:
07:8e:c8:5a:77:76:0a:0e:cb:9d:1d:c0:cc:50:4f:
be:a9:52:8a:c4:d0:dc:87:5c:96:e5:ec:14:ad:a9:
fa:b4:fe:04:0c:12:88:de:12:03:0a:a2:93:3c:ba:
d9:34:a3:cd:28:0f:56:f2:8d:34:3b:6d:d6:28:80:
97:16:b8:4d:6b:a1:ec:52:ff:8b:65:4d:b1:53:2b:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:BD:1D:3D:12:44:E3:21:71:B7:FC:1F:4D:FD:6B:B0:A4:B7:6D
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:84:29:e8:fd:c4:0b:6a:cf:ed:1f:2e:98:68:94:fe:9c:
02:c9:5b:b1:dc:2e:30:ae:76:05:9d:49:16:b4:f4:54:4b:bf:
75:6b:e9:e6:0c:08:30:6a:d1:37:74:59:63:6d:52:5d:45:f0:
ba:62:b9:3c:b1:0c:93:c8:50:78:c3:9a:44:f0:df:41:bb:f4:
51:e8:a8:72:d8:1b:39:06:2a:54:00:dd:4f:3d:e4:af:ac:2f:
f1:e4:2c:2a:b5:66:ff:fd:c7:13:ac:4a:cc:90:ce:2f:1b:bf:
91:a9:5b:fb:03:1d:75:ac:d6:32:24:aa:98:b5:4d:06:b1:d3:
22:84:aa:d8:d8:45:b1:7d:5c:bf:95:ba:22:54:01:a1:ad:90:
88:4e:c9:0e:65:c1:27:d3:4b:ea:20:81:89:d4:1e:eb:01:97:
97:a6:18:c9:d0:9d:8b:8c:fa:5e:55:6a:be:64:20:bb:e9:9b:
cf:9a:cf:4b:4e:4e:b7:e5:10:7c:6a:94:fd:a9:05:21:6b:bf:
20:58:15:db:43:66:fa:ef:1d:f5:87:f9:4f:bd:43:44:fa:86:
11:6d:15:e7:c7:4e:ef:b7:f6:7e:1d:a9:2e:a3:f7:e1:a1:3a:
96:17:8c:95:8a:c3:16:32:5d:9c:b0:cd:77:d1:78:e2:e9:f9:
00:54:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:54 2025 by rpki-client