Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: RGBjneBz4iCw0d8lVs4HYKHJpSZkKK0LrDzK8i9nkic=
Subject key identifier: BC:D1:DD:6D:16:78:D9:E2:27:25:F7:FE:DC:36:B6:8A:29:DB:12:70
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 01992E5999E17194891793880B4694D73A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0ABC
Signing time: Tue 09 Sep 2025 12:00:47 +0000
Manifest this update: Tue 09 Sep 2025 12:00:47 +0000
Manifest next update: Wed 10 Sep 2025 12:00:47 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: DKjaQTxTPUr3iD6+QxleDFxP5Czy4UYilZdnx+rDvCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:59:99:e1:71:94:89:17:93:88:0b:46:94:d7:3a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Sep 9 12:00:47 2025 GMT
Not After : Sep 10 12:00:47 2025 GMT
Subject: CN=bcd1dd6d1678d9e22725f7fedc36b68a29db1270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:ae:5c:26:69:c6:8c:4e:65:ab:26:91:a9:
d8:46:86:09:13:63:0e:77:9e:2b:b7:41:46:5b:3a:
02:15:58:f5:05:44:3d:d2:f5:3f:ff:df:9c:6e:9c:
a7:67:30:c6:5d:a8:3c:65:84:d2:a5:e8:c8:14:02:
b9:00:45:4b:29:60:36:0a:98:3b:99:57:d5:08:4c:
0a:1c:0b:56:0f:86:1c:3a:36:4f:3b:21:07:2f:51:
41:7f:3f:17:a6:af:50:0b:f9:46:6e:7e:ce:d5:61:
f7:9e:64:ed:45:8d:40:d4:3d:e1:ae:0f:b0:d5:38:
e2:e1:eb:a6:89:2f:7b:7f:ae:16:95:19:86:0b:e1:
9f:b4:03:f7:c5:30:9c:2e:88:48:e1:4e:68:d9:55:
12:d1:ed:78:35:b9:96:70:0a:31:3d:07:10:75:22:
6c:aa:c7:09:5b:48:b6:34:05:36:ba:63:6e:37:28:
4d:4c:a8:40:16:96:17:3f:ea:ea:77:f8:65:15:57:
43:41:d4:44:9a:8f:1c:e8:8f:2c:d4:7d:df:e8:c1:
5c:ce:b4:bb:a4:a5:6e:e4:c4:2b:08:76:58:af:ab:
05:03:4c:70:f2:79:37:e2:8d:7c:7d:c7:4d:b1:8e:
d3:28:9c:07:f7:e3:24:6d:7a:d7:ca:85:4e:f7:ce:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:DD:6D:16:78:D9:E2:27:25:F7:FE:DC:36:B6:8A:29:DB:12:70
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:73:c9:f5:9f:df:69:4f:85:c6:02:d0:59:49:86:e3:e5:d9:
4d:14:40:ba:4e:68:0a:76:9f:fd:97:ae:d9:75:7f:75:68:3e:
ff:fa:3e:b8:84:6e:c5:ed:ed:11:ca:2b:f5:7a:da:af:38:ea:
33:7f:f1:1a:96:f8:74:0a:3b:b4:6a:b0:63:d8:e9:7a:fa:89:
e4:0a:08:32:1a:36:08:1c:98:0a:17:b5:81:31:c9:ba:75:1b:
01:75:e9:b0:d1:e0:98:48:75:50:2f:18:82:14:33:da:23:f0:
1b:e6:19:90:df:c8:d7:8a:e3:10:15:d3:09:b8:de:cd:0f:72:
ca:96:6f:9d:90:61:49:14:ac:45:9b:27:ba:2a:0f:5b:4b:17:
39:1b:df:84:f8:60:ae:ca:46:4b:78:2a:dc:4c:3c:38:21:6f:
e4:ea:e7:a2:b4:95:ac:43:f3:c9:e3:62:b9:8e:16:c7:5d:fd:
d0:c7:bb:56:39:7a:6d:00:8c:d7:b4:7d:38:4d:26:32:f8:1e:
4a:7a:8c:a3:bc:37:00:39:81:56:f6:c9:34:7b:22:39:53:d8:
1d:6c:24:6e:ab:c8:e4:43:ef:1d:83:61:3c:9d:e9:57:1d:7c:
28:18:56:44:e6:c5:dd:f8:88:98:eb:d7:ae:af:2e:e6:51:b8:
4d:14:47:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkuWZnhcZSJF5OIC0aU1zpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjUwOTA5MTIwMDQ3WhcNMjUwOTEwMTIwMDQ3WjAzMTEwLwYDVQQD
EyhiY2QxZGQ2ZDE2NzhkOWUyMjcyNWY3ZmVkYzM2YjY4YTI5ZGIxMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkWuXCZpxoxOZasmkanYRoYJE2MO
d54rt0FGWzoCFVj1BUQ90vU//9+cbpynZzDGXag8ZYTSpejIFAK5AEVLKWA2Cpg7
mVfVCEwKHAtWD4YcOjZPOyEHL1FBfz8Xpq9QC/lGbn7O1WH3nmTtRY1A1D3hrg+w
1Tji4eumiS97f64WlRmGC+GftAP3xTCcLohI4U5o2VUS0e14NbmWcAoxPQcQdSJs
qscJW0i2NAU2umNuNyhNTKhAFpYXP+rqd/hlFVdDQdREmo8c6I8s1H3f6MFczrS7
pKVu5MQrCHZYr6sFA0xw8nk34o18fcdNsY7TKJwH9+MkbXrXyoVO986knwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzR3W0WeNniJyX3/tw2toop2xJwMB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3PJ9Z/f
aU+FxgLQWUmG4+XZTRRAuk5oCnaf/Zeu2XV/dWg+//o+uIRuxe3tEcor9Xrarzjq
M3/xGpb4dAo7tGqwY9jpevqJ5AoIMho2CByYChe1gTHJunUbAXXpsNHgmEh1UC8Y
ghQz2iPwG+YZkN/I14rjEBXTCbjezQ9yypZvnZBhSRSsRZsnuioPW0sXORvfhPhg
rspGS3gq3Ew8OCFv5OrnorSVrEPzyeNiuY4Wx1390Me7Vjl6bQCM17R9OE0mMvge
SnqMo7w3ADmBVvbJNHsiOVPYHWwkbqvI5EPvHYNhPJ3pVx18KBhWRObF3fiImOvX
rq8u5lG4TRRHjw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 19:02:38 2025 by rpki-client