Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: FApIs62CBNtV5RgDSZeE+qSoemBkKP6gNJlioE3XohU=
Subject key identifier: 0E:A6:3C:37:E6:29:19:F3:7D:E0:6D:B6:B7:EF:5E:77:BC:4E:B5:AA
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019A725C6C663C30D0BF74A4135892C8AADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: QeXAa6jM70PPCHLgUJTly2xwb4ulrzkC+acJhvXoEPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6c:66:3c:30:d0:bf:74:a4:13:58:92:c8:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=0ea63c37e62919f37de06db6b7ef5e77bc4eb5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:51:bc:5a:8f:b3:09:6f:a3:26:a5:71:0e:
f7:c6:c7:c0:15:2f:56:be:46:d2:83:42:75:ae:74:
06:62:05:e8:b3:1f:55:03:65:93:53:67:9c:32:0d:
2d:5f:f3:b0:43:3f:ba:12:d1:a7:d5:43:3f:81:f5:
9e:ee:4e:1f:a4:fc:e4:6f:73:27:8e:ad:c3:9e:e8:
38:36:d9:5b:8b:d4:2c:db:43:15:b8:9d:a6:8e:d4:
b0:46:b1:87:c3:61:35:31:fb:26:05:60:84:f2:cc:
05:b4:80:41:be:25:28:59:96:8c:df:c0:67:ce:cc:
5d:f1:17:9d:96:c7:75:8e:0c:4b:44:e1:64:8c:87:
11:bc:15:dd:a0:9e:c9:2e:52:60:73:42:c7:e6:5c:
88:65:ac:0e:30:6f:d8:45:b2:de:83:68:7b:05:c0:
b7:4a:e7:25:0d:6b:1b:6b:c9:db:c1:cd:37:c3:3c:
6b:a0:04:70:71:52:74:37:f3:46:c9:00:1d:48:84:
35:ba:ce:e0:da:69:7a:ae:62:13:df:77:6d:6d:af:
c0:10:4d:e6:6b:c7:f7:c3:e9:b0:96:27:4a:31:ed:
b8:7f:b9:87:88:f8:6b:b1:e4:68:d0:d0:15:40:3e:
ad:85:20:be:83:cd:c7:ba:7f:8a:4a:bf:56:70:8e:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:3C:37:E6:29:19:F3:7D:E0:6D:B6:B7:EF:5E:77:BC:4E:B5:AA
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:09:f5:ec:d3:dd:f8:9c:dd:86:f9:ec:25:1d:f2:6c:00:
ef:0e:a5:ff:0b:cb:aa:00:1a:0c:09:27:83:50:1d:eb:88:34:
02:54:97:78:39:3e:c5:8c:e1:fe:dc:63:55:c1:84:ad:fa:5e:
8b:1f:12:8c:3d:04:a4:5e:04:80:72:47:76:5e:a9:8d:53:ec:
5d:9e:93:fd:3d:08:eb:92:2e:08:5a:f6:c8:cb:e6:6a:ce:13:
4e:cf:7e:03:d2:73:cf:eb:f2:19:e0:80:64:1a:46:16:38:5e:
9f:0d:24:44:b9:f4:a4:f8:4b:19:8b:c8:d5:18:c7:5b:10:42:
ab:46:3c:31:2e:50:a9:f7:55:b5:2b:81:2e:91:65:fd:e5:8d:
ca:5f:b3:2a:7b:47:a1:a0:f7:4b:6f:c1:c4:54:61:be:b8:2a:
78:a1:74:79:83:da:96:ab:14:94:f0:ad:f9:ea:a1:bd:32:a2:
d1:c2:8d:7e:53:d9:d5:19:b4:bf:66:13:ca:72:c2:71:38:16:
20:c0:6a:9d:ae:08:1d:26:ed:da:ce:62:85:45:68:81:42:4b:
25:5b:a5:e0:4d:87:fa:b8:ae:d1:5c:4f:00:4b:06:d7:09:1b:
e1:b1:0f:a7:23:ee:63:c6:24:69:99:f8:52:81:b2:4d:14:28:
1c:4f:5e:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGxmPDDQv3SkE1iSyKraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MWE3MmJmYTRjYWFiY2JhNGVjMDQ4NDEzN2E1MTZmOWYz
NDQzNDYwHhcNMjUxMTExMTAwMDUwWhcNMjUxMTEyMTAwMDUwWjAzMTEwLwYDVQQD
EygwZWE2M2MzN2U2MjkxOWYzN2RlMDZkYjZiN2VmNWU3N2JjNGViNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YtRvFqPswlvoyalcQ73xsfAFS9W
vkbSg0J1rnQGYgXosx9VA2WTU2ecMg0tX/OwQz+6EtGn1UM/gfWe7k4fpPzkb3Mn
jq3Dnug4Ntlbi9Qs20MVuJ2mjtSwRrGHw2E1MfsmBWCE8swFtIBBviUoWZaM38Bn
zsxd8Redlsd1jgxLROFkjIcRvBXdoJ7JLlJgc0LH5lyIZawOMG/YRbLeg2h7BcC3
SuclDWsba8nbwc03wzxroARwcVJ0N/NGyQAdSIQ1us7g2ml6rmIT33dtba/AEE3m
a8f3w+mwlidKMe24f7mHiPhrseRo0NAVQD6thSC+g83Hun+KSr9WcI6BdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6mPDfmKRnzfeBttrfvXne8TrWqMB8GA1UdIwQY
MBaAFLYacr+kyqvLpOwEhBN6UW+fNENGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEt
OGMyNTNjNDU5MjcxLzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEtOGMyNTNjNDU5Mjcx
LzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt4J9ezT
3fic3Yb57CUd8mwA7w6l/wvLqgAaDAkng1Ad64g0AlSXeDk+xYzh/txjVcGErfpe
ix8SjD0EpF4EgHJHdl6pjVPsXZ6T/T0I65IuCFr2yMvmas4TTs9+A9Jzz+vyGeCA
ZBpGFjhenw0kRLn0pPhLGYvI1RjHWxBCq0Y8MS5QqfdVtSuBLpFl/eWNyl+zKntH
oaD3S2/BxFRhvrgqeKF0eYPalqsUlPCt+eqhvTKi0cKNflPZ1Rm0v2YTynLCcTgW
IMBqna4IHSbt2s5ihUVogUJLJVul4E2H+riu0VxPAEsG1wkb4bEPpyPuY8YkaZn4
UoGyTRQoHE9eTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:39 2025 by rpki-client