Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: bbG4+sRo4JHhgUQDc/JHiut9R++o60j/R5qONmLjS0Y=
Subject key identifier: 9A:10:3C:D7:43:C3:A4:74:43:89:03:C5:86:EB:3C:AE:F9:C0:D4:57
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C95900CD253F5F3D858018A85DFB6680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 03E1
Signing time: Wed 02 Jul 2025 04:15:42 +0000
Manifest this update: Wed 02 Jul 2025 04:15:42 +0000
Manifest next update: Thu 03 Jul 2025 04:15:42 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: uW8YEjX1oBMnsakdc0Uq8ncT1cMSTo/NEvWO62sa45Y=)
2: tlIc0DHKTvOEptP6iIzDwzKqtSo.roa (hash: 1i07GTLpNFlCcCoLjINNkYDgU7Z/4giJ3u26N6Bh/0U=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:59:00:cd:25:3f:5f:3d:85:80:18:a8:5d:fb:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 2 04:15:42 2025 GMT
Not After : Jul 3 04:15:42 2025 GMT
Subject: CN=9a103cd743c3a474438903c586eb3caef9c0d457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:9b:49:b9:97:b5:a3:18:b1:ab:f7:49:f7:
75:35:df:41:12:aa:44:83:c1:b8:cf:09:8f:f1:bb:
40:22:be:0e:eb:d8:66:03:f5:ad:6f:7d:9e:d2:02:
a9:7e:16:2b:f4:7c:4e:57:97:f4:ee:d5:57:af:1c:
81:09:88:54:ef:5f:55:bc:ee:5b:91:d8:8b:3b:b5:
d2:47:06:2d:7b:dc:c0:7b:33:04:3e:02:da:31:2f:
da:de:9b:b0:26:c9:b9:a7:29:1f:37:48:05:b1:af:
db:f2:27:8b:41:99:2c:33:56:aa:4f:b1:c0:a3:00:
b2:71:7f:f5:1e:25:0c:d2:fb:48:8d:17:66:e1:d8:
bc:ad:cd:84:43:c4:45:d1:4f:28:b1:24:c3:18:65:
ab:66:68:e9:bc:e8:6a:82:da:98:28:34:4c:58:41:
92:fc:f9:63:5f:bf:1d:5b:2f:1b:9b:2b:e3:7a:99:
8a:98:55:2d:b8:51:16:d7:b1:2b:17:c9:80:a4:a0:
da:0f:ba:d0:61:21:d3:19:65:64:0f:b0:a3:4f:95:
39:35:64:29:80:ed:00:e1:99:31:59:4c:6f:3f:eb:
ab:c9:0a:52:b3:6a:a8:49:8e:c8:6a:54:ea:2d:4e:
54:f9:92:77:12:4d:d0:7c:e7:e7:32:43:a6:be:da:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:10:3C:D7:43:C3:A4:74:43:89:03:C5:86:EB:3C:AE:F9:C0:D4:57
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:2a:4c:69:c0:a7:e6:04:91:16:17:25:71:f3:a5:e7:99:
ba:5b:86:4e:7e:7f:39:7b:2d:fc:31:11:0e:63:6d:96:a6:d3:
05:63:5a:81:ad:05:f6:3f:48:fd:8b:1c:56:c6:ae:61:90:5f:
dc:5c:e3:8f:46:d0:2f:15:28:9d:71:9c:31:19:fe:20:46:2f:
59:b3:a4:2d:91:72:26:be:5c:10:fe:4c:c7:73:0d:e5:37:1a:
95:84:ee:2e:a3:de:d4:ba:a2:16:df:87:2f:e8:c9:27:92:59:
ce:50:59:b2:8c:f7:e8:45:60:91:09:9a:ec:ee:0b:7b:15:cc:
e8:33:62:43:6e:18:1e:9d:f4:21:65:2f:73:9e:87:48:49:a6:
97:72:92:17:96:47:2d:e5:20:bc:3c:b4:3a:8e:64:94:bb:d7:
e4:82:80:96:8d:61:17:5d:d0:51:4e:8f:6f:56:c2:ab:26:8d:
1e:b4:d6:5e:45:68:d1:44:1a:a3:bb:9b:73:1d:5a:6c:2e:03:
e4:e9:67:57:9b:cc:64:69:1f:45:ec:f9:7a:c8:d6:43:ea:88:
d5:28:76:d2:42:3a:e6:26:b7:1c:67:d6:1f:06:af:15:8d:2e:
7c:33:f6:f8:a7:d0:a0:b5:3d:0a:3f:48:0b:54:eb:49:5f:dc:
12:7e:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:39:41 2025 by rpki-client