Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: sSdUdOM5sK6S6/cMOkCcBhv3HsO+Mmph1UW+PQOwcH4=
Subject key identifier: C7:03:DA:BB:44:BA:55:56:06:74:0B:5F:88:B2:00:83:BC:D9:9E:70
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 019A1797B6F275C0DA0752AE495B540C4B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 16F3
Signing time: Fri 24 Oct 2025 19:00:10 +0000
Manifest this update: Fri 24 Oct 2025 19:00:10 +0000
Manifest next update: Sat 25 Oct 2025 19:00:10 +0000
Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: VDAR1a+sAfoDDlsJzg53tV5XhIHJHftffugdrjrv93k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:97:b6:f2:75:c0:da:07:52:ae:49:5b:54:0c:4b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Oct 24 19:00:10 2025 GMT
Not After : Oct 25 19:00:10 2025 GMT
Subject: CN=c703dabb44ba555606740b5f88b20083bcd99e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:2b:b5:34:90:5c:22:4d:f9:84:d1:90:65:
e0:e4:cd:21:57:0c:96:37:04:08:95:67:c5:2e:40:
f4:9b:0f:06:2c:02:3e:5c:49:d3:09:02:34:60:88:
7f:bf:fc:2a:27:7c:f4:42:bb:f0:84:cd:a5:84:f2:
3b:78:49:ca:5a:37:1f:6c:dd:cc:5a:54:7b:fc:8b:
63:ac:05:53:f5:e7:c4:9d:9b:8a:30:a5:e4:bd:1b:
bf:e8:fa:8d:a6:d1:9e:8b:5a:5a:79:6f:77:ae:c6:
f2:30:6d:eb:16:e2:6a:f6:99:f3:70:17:25:09:1a:
7a:e7:36:80:5b:64:f8:0e:17:0b:10:37:52:ba:21:
f9:72:30:6f:9b:a8:b1:fa:81:4c:7d:a7:a6:97:d2:
c8:b3:7f:59:8e:4f:15:1d:8d:5c:b3:26:54:c7:31:
a1:97:e3:7c:13:a6:8e:d9:90:9a:d6:12:d5:1e:a3:
b1:8e:5a:aa:fb:22:5b:01:29:a8:bf:42:b3:fb:b5:
d4:1d:17:f0:89:6c:1b:14:54:26:ef:95:e7:0c:31:
02:68:59:90:d4:f0:40:13:49:41:7d:c0:3f:d1:66:
a5:ed:d5:1c:3b:1e:db:ae:80:ee:ce:15:7a:17:71:
58:ec:52:1c:c9:52:97:b8:ff:0e:13:31:42:d7:3a:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:DA:BB:44:BA:55:56:06:74:0B:5F:88:B2:00:83:BC:D9:9E:70
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:4a:69:d6:1f:7c:32:5d:2c:db:34:a4:e6:90:20:87:02:
93:36:84:ba:74:a1:62:9a:22:d9:9f:85:50:20:21:fa:1d:0c:
3d:c0:41:e7:5f:44:6a:f1:86:92:8c:28:6b:d9:14:2f:97:e4:
4d:fb:5d:61:7e:46:e6:0c:91:30:f3:62:5a:76:ab:98:6a:f7:
90:f6:ae:f9:60:84:6a:36:e2:16:a2:6e:0f:67:ab:c3:95:aa:
98:7c:dc:13:ae:ad:52:ef:d9:11:82:46:37:e0:53:db:90:97:
a2:ba:32:7f:d9:0b:85:3f:1c:09:a3:87:f4:03:be:0d:c7:6c:
d2:5b:77:a3:66:24:ca:d9:7f:7a:54:b3:17:1c:ed:1a:3c:e8:
b3:53:77:43:10:22:e8:f7:8f:1a:1d:65:d7:40:2e:51:ea:e2:
2a:cf:a1:73:ee:44:9f:10:a0:30:7d:3d:16:92:4f:31:e8:45:
0b:3a:a5:d4:16:33:97:47:c9:35:92:d4:53:29:27:11:d2:d0:
82:f3:d3:98:f6:79:5c:f2:1f:78:41:47:d8:8e:f6:5e:ce:65:
25:f6:ae:89:9f:74:a7:44:e5:e1:eb:9d:c9:c8:7a:cc:c2:5e:
a6:3a:1c:28:5b:62:e2:da:69:85:75:fe:da:1d:85:1f:2b:71:
29:13:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:11:56 2025 by rpki-client