Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: eBNGUMr57MKVd8+ZEpMemyv+mFRxoFfxzDxl7oI/498=
Subject key identifier: 9F:6F:B2:EC:D8:56:AB:2C:A3:F2:51:4B:E3:CB:45:11:75:EF:8B:6E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019A726BCE16DE9CB34C448F7925F8FB9242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 1C8E
Signing time: Tue 11 Nov 2025 10:17:37 +0000
Manifest this update: Tue 11 Nov 2025 10:17:37 +0000
Manifest next update: Wed 12 Nov 2025 10:17:37 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: 3t/rbhGcsMvdXt+UPU41ldz8wGOoTC/nut9QnZhBi1g=)
2: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
3: zKmj2hotz4mWsbqQpyQR-K0GN2g.roa (hash: B/F5Zi0ZZ0/39LVZ8fDa8CTWGgzts3zzMpc7xwLpocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:6b:ce:16:de:9c:b3:4c:44:8f:79:25:f8:fb:92:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Nov 11 10:17:37 2025 GMT
Not After : Nov 12 10:17:37 2025 GMT
Subject: CN=9f6fb2ecd856ab2ca3f2514be3cb451175ef8b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:a9:e0:a4:4d:f9:c1:64:0f:c6:23:1a:63:
47:e9:f6:a0:31:2e:9c:4e:41:21:95:52:ff:ec:5e:
13:95:bc:0e:45:4d:9c:28:17:1e:64:29:fd:e7:5b:
2f:6d:2c:dc:c0:10:57:3d:9e:04:92:b2:f6:07:a8:
07:5d:46:c8:f7:73:e6:de:17:74:87:eb:01:eb:5d:
ce:b8:b1:a6:38:38:f3:37:b9:12:c5:69:67:ee:be:
e3:4f:07:c8:cb:a0:13:43:07:44:92:b1:81:9d:e6:
79:74:72:77:cf:80:37:61:69:55:37:80:ba:cd:79:
7d:9e:86:7f:18:0d:bb:52:28:93:90:97:5e:1a:90:
6b:90:8f:a3:81:a1:85:51:ce:df:cc:fc:f3:f0:d8:
33:50:72:ee:24:99:7d:42:17:b1:f2:b1:1e:d5:e5:
b5:c4:a7:20:31:c2:45:6b:61:39:4b:71:72:92:22:
10:2f:57:68:76:ed:1a:1f:cb:73:39:19:78:3b:57:
9d:c7:34:eb:66:29:93:39:31:bb:c1:6c:18:37:0e:
16:1e:8e:96:20:4f:aa:f7:9d:c4:18:60:5e:84:3e:
bd:3d:f5:6b:97:a5:fd:db:1c:59:3f:96:2b:3a:2b:
5e:ed:cf:92:3e:c2:c5:0e:32:ba:fb:9d:06:28:91:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:B2:EC:D8:56:AB:2C:A3:F2:51:4B:E3:CB:45:11:75:EF:8B:6E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:9b:48:7e:6c:4f:24:1a:b5:32:70:6e:f4:5f:9d:d2:70:
ee:f3:88:58:ea:92:df:4e:c0:ef:af:b3:bc:a3:4c:a8:db:5e:
ba:30:98:f2:15:e6:67:89:72:44:b6:e1:08:aa:b6:08:fd:59:
ce:45:d1:d6:79:7a:37:82:0a:37:c0:f8:b4:67:06:9e:ff:a6:
2e:30:61:90:f9:bc:b7:00:6d:85:b0:38:ee:e3:18:16:86:dd:
bb:4b:4e:28:10:2b:10:55:e1:3b:2b:3a:f4:63:0f:05:74:8a:
6a:a9:db:c8:14:bc:c6:9d:bd:28:2c:01:15:89:7c:0b:cc:67:
6f:63:c0:90:c0:05:8f:ee:67:be:7e:fa:45:5f:a3:bc:0c:0b:
82:9c:61:c4:23:72:65:e6:52:f6:e4:d8:7b:e4:8c:b5:d7:8a:
48:d3:5f:e6:94:0e:17:68:e9:df:eb:2b:5f:f9:81:d9:93:b1:
bd:a3:7e:7f:be:63:ab:9e:36:17:f3:8d:4a:0a:67:92:7d:81:
32:3b:7d:2b:0b:87:cc:7f:05:22:ad:da:64:3e:ac:74:1b:e0:
f0:de:b7:79:13:a0:ca:af:53:ed:83:d7:d7:0c:9a:61:4b:17:
f4:aa:17:d5:51:a1:23:d9:3d:3c:0b:c0:8a:52:65:05:8f:af:
60:65:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:08 2025 by rpki-client