Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: FpU9GiWBQ5BKKLFOgaCFm4UAyDJ6qWk7IsRUDuBG+h0=
Subject key identifier: 2B:E4:67:7B:2D:F5:6C:F5:B3:00:EB:AB:6D:9D:74:03:38:84:E8:79
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 019A73A685C284E673134DDD80A3402FC472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0A25
Signing time: Tue 11 Nov 2025 16:01:24 +0000
Manifest this update: Tue 11 Nov 2025 16:01:24 +0000
Manifest next update: Wed 12 Nov 2025 16:01:24 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: bWqvr0ufnYI470zR8DQ3Lx7xdS1NcwzQy+d5pnsuNuQ=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:85:c2:84:e6:73:13:4d:dd:80:a3:40:2f:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Nov 11 16:01:24 2025 GMT
Not After : Nov 12 16:01:24 2025 GMT
Subject: CN=2be4677b2df56cf5b300ebab6d9d74033884e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:9a:cd:f7:09:5c:cb:64:33:00:af:41:46:
79:39:33:27:5c:60:2b:24:82:0e:60:c1:c1:96:ad:
8c:0c:fe:f4:94:93:3b:c3:a1:ae:cb:9a:c5:a8:bf:
65:23:71:55:ba:c5:27:98:74:8a:78:a0:6e:21:11:
05:19:27:15:97:dd:86:51:60:59:9c:e8:fd:a8:8c:
b8:54:6b:bd:64:28:2e:30:40:30:77:2b:61:f8:d6:
6c:a4:39:10:a6:c0:74:08:49:38:0f:e7:17:36:b4:
36:27:dd:57:7d:65:2a:6a:8d:79:6f:f1:84:29:5c:
9e:6c:4e:be:fb:44:e0:ac:cd:37:a8:17:23:e9:26:
00:a2:14:66:6c:51:fa:18:c1:a1:62:2d:29:95:b2:
2d:d4:f9:ba:a3:72:5b:33:ee:a1:7a:14:0e:8d:09:
77:bc:6a:a4:91:5d:c8:78:fa:e8:b4:99:2a:01:4f:
0a:8e:7a:8f:c0:85:65:13:d3:fd:a1:f1:ec:d4:38:
e3:a3:40:bd:1c:0f:b7:fb:e2:f4:cb:4e:de:86:a4:
3f:13:02:80:d8:d7:f6:bc:6e:25:0f:6d:5f:54:7a:
4b:e9:af:43:8e:e3:29:bb:69:d8:dd:75:b8:ff:c7:
58:0c:9a:b7:5a:d3:8a:d1:91:3c:84:a8:a8:26:8a:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:67:7B:2D:F5:6C:F5:B3:00:EB:AB:6D:9D:74:03:38:84:E8:79
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:8d:da:b1:69:a2:84:c7:84:1f:fa:ce:d8:87:f3:c7:a6:
bf:e3:9c:c9:24:40:f4:72:b8:db:0c:7a:a6:d3:c8:d5:6c:f2:
ed:11:8d:d1:3c:21:cd:26:09:50:3f:36:28:d5:8d:3d:6a:84:
7e:55:dc:c2:8d:39:c7:7f:f6:9f:18:24:39:04:9b:fe:6b:d2:
6c:be:bf:78:31:14:d4:7d:17:ea:f0:2a:8f:ae:dc:64:1f:35:
ee:5e:85:99:ea:f6:5c:df:5e:f0:8c:34:32:6d:8c:fb:c0:18:
23:27:de:5c:fe:f9:6d:bc:45:03:b1:5c:26:1f:a3:2d:06:70:
bf:56:15:c3:d3:78:8b:63:8e:ea:a8:76:46:6d:80:df:4f:4a:
57:8d:1b:b9:f5:42:7b:da:67:2d:aa:56:ea:48:7a:57:46:48:
d8:94:be:af:0e:d9:94:ad:24:c9:f3:e9:c7:06:be:64:c4:63:
b9:e3:58:fe:07:ad:87:47:58:4d:52:84:c1:81:d1:30:d1:fb:
b1:68:36:04:af:28:83:6a:70:c9:db:95:a4:ee:64:56:ce:28:
39:c1:25:10:82:e7:5a:a2:76:00:27:7b:34:81:86:cd:d3:98:
6e:ed:a2:06:d8:70:c7:ac:66:08:9e:fe:5d:d6:4a:0e:1e:bc:
7a:65:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:11 2025 by rpki-client