Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: 2gdNzm78a+WaG8B4FcUdVYc5IaPrcCtV9kkuqnoOZVs=
Subject key identifier: 4F:75:0A:E5:4F:5A:79:DA:F7:43:9C:7A:76:29:F8:4F:B3:84:4B:49
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 01992443BBD008B2FAA85A439E21E20633D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 13:00:42 +0000
Manifest this update: Sun 07 Sep 2025 13:00:42 +0000
Manifest next update: Mon 08 Sep 2025 13:00:42 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: WZPTulq6aaKWnsk1QaLeSsx+uuMgU8QzAUSnXpv6fOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:bb:d0:08:b2:fa:a8:5a:43:9e:21:e2:06:33:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Sep 7 13:00:42 2025 GMT
Not After : Sep 8 13:00:42 2025 GMT
Subject: CN=4f750ae54f5a79daf7439c7a7629f84fb3844b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:f3:eb:d7:a8:fc:d4:94:4d:16:69:ac:04:
cc:6d:cc:9a:ca:1f:b1:57:5c:24:72:3a:3c:16:50:
b8:bb:e8:7c:0b:09:16:c3:8a:95:54:5f:94:af:fc:
74:81:74:48:57:ee:40:ac:04:60:c3:b8:3f:b1:9a:
2c:9f:a1:ec:e5:67:46:c0:5d:b2:c0:b5:50:eb:8e:
72:e6:b4:b2:6c:c8:1b:c3:fd:5d:fc:69:45:bc:0e:
61:9f:2f:30:e9:26:64:48:79:8c:91:42:ca:99:b7:
7b:1d:51:39:0a:ab:76:0c:10:f4:86:d6:26:2d:8f:
69:e6:72:02:e4:d6:ee:83:0c:dc:d3:02:bd:0f:f8:
5e:6a:b3:22:00:59:09:d3:36:9b:1c:fc:f7:b7:db:
66:f3:8f:42:d5:2d:76:8f:0a:c3:b3:04:d9:04:70:
6f:72:7c:f8:74:f3:98:fd:43:5b:ba:cd:10:44:d7:
4b:b8:0f:6c:b7:77:ad:c6:dd:40:ea:39:93:53:bf:
5b:6f:fa:fc:b4:f6:eb:4e:41:30:b2:b9:1a:ca:7f:
41:9d:16:11:c2:a6:71:35:7e:db:f2:7e:64:11:4f:
14:c8:bc:09:b4:8e:55:8c:7e:4a:aa:bd:69:6b:57:
65:41:17:ef:ec:d5:93:8b:cb:c4:d5:4e:2b:7d:29:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:75:0A:E5:4F:5A:79:DA:F7:43:9C:7A:76:29:F8:4F:B3:84:4B:49
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:09:81:75:58:a6:da:a8:1e:da:19:c1:f4:cd:f2:6a:9e:
0f:fe:72:87:05:aa:81:b6:f2:6e:ea:26:15:81:cb:e9:8d:1e:
9d:a4:dc:40:dd:d8:2f:61:78:d2:74:49:42:85:d0:45:f2:d2:
cd:51:5c:46:48:3e:5c:4c:5f:0f:e9:53:31:74:5e:4a:9d:6d:
b3:09:b7:5c:ab:c0:71:22:39:dc:86:c5:e7:de:20:e7:3c:1b:
df:45:6b:8a:73:e6:41:41:9f:52:4e:a7:43:9a:b8:20:69:d9:
b1:38:bc:5e:a6:27:61:fc:fc:e7:73:52:0e:81:7b:3c:90:b3:
60:b8:7f:f7:85:a9:16:e3:79:b4:4c:16:e6:70:a9:fc:d3:fc:
54:2a:05:bc:0f:28:6d:55:1a:66:89:ce:9c:84:72:76:65:fa:
da:27:69:09:77:30:b7:53:79:a1:83:bf:bf:79:05:a3:74:b2:
61:9a:37:bb:1c:11:99:f8:96:f2:87:45:75:ec:59:f7:3c:65:
f6:70:5e:37:73:72:d5:9f:70:29:1a:c8:ff:e5:40:3b:79:77:
42:bd:85:70:d9:27:8e:ed:4e:90:35:52:97:5c:a8:f8:e3:4d:
f7:1f:8f:86:50:f4:b3:d0:00:8a:96:a3:7d:bb:50:01:02:46:
30:bb:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:28 2025 by rpki-client