Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: Tq/VaXZHl0TKRyYfPIcm8v9OT88CBOad0bp/AwCCqwQ=
Subject key identifier: 5F:3E:43:E8:E5:C7:E7:C9:85:81:2D:3B:E9:89:DB:C2:38:DC:98:81
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0197499F083135919A8C6B0608C06B63040F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 09C1
Signing time: Sat 07 Jun 2025 09:00:48 +0000
Manifest this update: Sat 07 Jun 2025 09:00:48 +0000
Manifest next update: Sun 08 Jun 2025 09:00:48 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: nqBbow5ZYVJKW4ftw2JaI1RRdWtj9vq+mY5kYYWbLto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:08:31:35:91:9a:8c:6b:06:08:c0:6b:63:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Jun 7 09:00:48 2025 GMT
Not After : Jun 8 09:00:48 2025 GMT
Subject: CN=5f3e43e8e5c7e7c985812d3be989dbc238dc9881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:73:6c:93:b6:d6:b5:1b:bc:ea:2b:65:cb:
25:a8:84:bc:6e:81:d9:ab:5b:d6:e8:00:ba:0a:2a:
be:cb:17:80:45:4c:10:df:b1:fe:b2:56:ff:42:37:
24:1a:7c:a8:9a:bb:a4:4f:cb:aa:4e:b8:32:1d:5d:
13:b1:7c:35:3d:26:2b:50:27:7b:76:b7:ad:03:ec:
bc:f3:18:e8:1f:eb:d2:bf:fb:00:74:ac:40:5f:55:
e4:15:59:fd:4a:10:ac:c1:0a:2e:16:55:b2:f8:a1:
87:72:03:4b:dd:eb:22:e8:c7:42:56:b1:39:93:ab:
7c:1f:2d:46:59:48:6b:94:f8:63:25:86:6f:07:ca:
b6:07:10:2d:ba:7f:c8:9b:db:3b:68:07:12:74:c8:
26:b3:6f:4f:66:b9:2f:4e:42:a9:5e:81:fb:77:c5:
75:f1:3a:5c:d2:76:6f:ed:12:de:c5:f7:24:56:d2:
21:ec:17:af:fa:92:53:05:81:78:74:bd:0c:75:1d:
b4:b4:49:93:65:68:b3:47:d3:39:bb:c0:52:6b:50:
61:2e:63:26:c2:30:a8:f2:7c:3b:f3:23:09:40:26:
c4:56:91:39:2e:3e:1b:ff:78:37:a2:10:68:f6:c6:
a1:5a:5d:4e:9a:b0:c3:42:62:85:64:9a:2c:be:99:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:43:E8:E5:C7:E7:C9:85:81:2D:3B:E9:89:DB:C2:38:DC:98:81
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:27:21:f1:77:63:a2:6b:ee:a4:c3:57:2d:49:c0:8e:6c:
59:6e:20:43:e2:64:76:08:0e:3a:f3:b3:a5:10:ae:5a:2f:8c:
08:fd:0e:d7:df:81:2e:66:a4:03:12:ad:d2:19:70:47:6f:89:
94:ea:72:b6:45:2b:08:ef:ef:4b:4d:5f:b7:01:d7:4b:69:0c:
1d:e2:fb:d9:c6:0e:48:f6:ce:31:85:97:b8:0e:db:cd:9f:58:
e5:65:07:d3:6c:6f:48:55:13:69:3d:f8:bf:a6:65:05:03:12:
a5:f8:05:e4:31:9e:37:bb:e4:11:97:06:05:67:32:c0:bb:4d:
e3:37:24:63:53:b6:40:f7:0a:5c:5d:d7:b8:3b:93:77:c8:3a:
2b:38:be:4d:98:3a:a6:58:ba:f5:3b:26:f8:9c:35:63:87:20:
bc:80:32:6a:31:07:8f:6a:b8:79:96:43:ca:1b:f8:35:d7:c0:
4a:e3:51:19:94:9a:6b:5f:f4:1a:15:02:f8:fc:e9:f6:2c:d1:
1a:6c:fb:3e:39:dc:4e:cc:d0:45:12:aa:a9:d9:ce:48:96:85:
92:6c:eb:4d:40:23:7b:c7:90:9f:5b:7a:f5:fb:98:b5:79:3e:
f5:b7:4d:2e:53:a5:9b:5a:ab:46:8c:14:c1:3d:b0:4e:30:50:
a1:07:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:34 2025 by rpki-client