Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: RArUcrKNgAb8cTVczYWzNvUHUcxsOaEkiQHhagcng+c=
Subject key identifier: 63:D9:C6:91:A9:F0:2C:A1:92:EF:5F:16:32:8C:11:58:39:A0:F2:55
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019A21ADDA68B0AEDCB3CE654C38DC8EBB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0B3A
Signing time: Sun 26 Oct 2025 18:00:33 +0000
Manifest this update: Sun 26 Oct 2025 18:00:33 +0000
Manifest next update: Mon 27 Oct 2025 18:00:33 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: shZ4OvgzMMT9jVrUxiiYxPsdwbPcCAVhIwsH5Obbu5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:da:68:b0:ae:dc:b3:ce:65:4c:38:dc:8e:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Oct 26 18:00:33 2025 GMT
Not After : Oct 27 18:00:33 2025 GMT
Subject: CN=63d9c691a9f02ca192ef5f16328c115839a0f255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:ec:b8:85:e4:57:ab:8a:b8:83:d2:a4:81:
43:28:c3:08:f5:56:56:6b:65:8f:2b:bc:10:28:f6:
1a:65:e4:96:dd:22:41:06:4f:e7:ca:52:f4:69:9d:
d0:53:59:cd:6c:7f:ae:80:03:4a:e7:b9:b5:bd:67:
e0:2a:c6:d2:06:9f:28:49:ff:a7:53:19:d3:0d:29:
c2:e9:c5:d6:70:1b:38:19:7e:1b:3e:83:c0:fe:22:
5c:87:9c:6f:08:e2:c7:33:0c:a9:d9:bf:cb:4c:73:
84:9c:83:ad:98:2a:d2:e5:13:ca:7d:4b:f8:bd:83:
e2:6b:7d:9c:b9:04:c6:5d:1b:51:b6:52:f2:c4:8e:
70:23:78:8e:b3:e6:01:18:a9:2f:0c:76:c9:f6:3b:
fd:b6:cb:58:99:3a:9b:99:ff:aa:e7:d4:8a:4a:2a:
75:89:f4:c2:fc:ea:9b:44:56:5c:18:49:9a:3a:6b:
fd:60:70:49:c3:ed:84:de:fe:a5:51:15:cb:b9:8d:
6d:93:ed:bb:01:13:d2:23:b9:a8:66:f3:4f:57:f9:
eb:66:a9:c4:dc:67:1b:7f:d3:1b:b6:79:66:ad:32:
3a:ec:c6:fc:89:18:78:79:cd:c4:68:59:c9:a0:63:
eb:be:ac:78:06:9c:0e:67:38:fa:02:af:db:c0:25:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:C6:91:A9:F0:2C:A1:92:EF:5F:16:32:8C:11:58:39:A0:F2:55
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:64:81:6e:4e:62:4d:29:6b:27:2c:e2:a6:b9:93:5f:79:f0:
62:b0:f2:51:c4:cb:17:76:31:b3:74:e1:36:cc:73:68:9a:69:
0e:a5:c7:b3:05:40:6c:02:0a:85:8e:52:90:78:35:80:84:d2:
7b:60:74:5d:ae:a7:c8:72:db:60:4a:60:51:0f:3d:2d:5d:bd:
5d:19:0c:34:63:93:7a:64:d7:4c:00:12:41:b1:8c:a7:05:62:
6a:c9:cf:03:8b:cb:a0:ff:e5:76:b0:3f:4a:53:7d:cb:7f:3e:
9b:9f:ed:16:1c:0d:ed:bc:6a:fb:07:83:ab:e7:3e:4a:36:cc:
af:a8:f0:da:42:5b:b4:07:f2:25:92:ba:5a:10:6c:47:9d:30:
12:ef:1e:d4:7a:18:46:01:95:18:a5:0e:fc:d7:a2:23:f9:25:
5f:6a:f9:10:f3:71:df:a1:ad:c7:f7:5d:bc:a2:2b:d9:6b:11:
95:bc:95:bb:cc:94:60:0e:f9:0b:a9:d0:e9:02:b6:7d:7d:30:
7e:87:44:ed:c0:16:9a:a3:52:0c:03:32:54:81:a5:7a:cc:76:
6e:66:f3:55:d7:89:22:c0:38:3d:c3:72:89:d9:22:62:4c:f0:
dd:c9:21:58:19:a4:9f:5a:ed:35:e2:8e:60:0d:f8:28:97:97:
6e:80:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:53 2025 by rpki-client