Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: d4VryCU+irKbAWuFFUTcvLRkjrQL0mbIs0qchQtvzyI=
Subject key identifier: 6B:42:30:7E:B5:7B:22:AD:60:11:05:B1:09:D7:EE:78:E3:04:13:26
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01992415AEC4BC8CCC12BC0BBF3111806907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 106F
Signing time: Sun 07 Sep 2025 12:10:24 +0000
Manifest this update: Sun 07 Sep 2025 12:10:24 +0000
Manifest next update: Mon 08 Sep 2025 12:10:24 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: CfcDg1L9vaolZZbn26E11Vi1NrNilobyun8boOjeENY=)
2: eIAXDZWaSaEy4v2Hxv2s0edIhbU.roa (hash: Cb0GOi5jhmV+Fnva4Sq0JfgxhOFGk95g6SSzFTWrcr8=)
3: wYh93a95GpR2os9Mw6n4qntabug.roa (hash: +l/5zm42nWsFgSlNxtbMQiH9yt1XqsayvCuVkikeLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:15:ae:c4:bc:8c:cc:12:bc:0b:bf:31:11:80:69:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Sep 7 12:10:24 2025 GMT
Not After : Sep 8 12:10:24 2025 GMT
Subject: CN=6b42307eb57b22ad601105b109d7ee78e3041326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:c6:60:e7:41:3f:28:74:7c:85:f0:e6:fb:
eb:f4:47:cd:c3:b9:0f:ff:45:fb:a2:f9:de:40:26:
86:2c:ed:c4:24:a7:11:2f:b0:6d:bc:ca:d0:ab:5c:
84:82:1c:4d:c4:59:5e:63:ad:ad:f9:58:47:6c:22:
c5:d7:fe:ca:41:d0:88:74:45:a0:ef:ff:2a:0b:b9:
fc:15:ab:ce:1a:e9:c2:6b:c8:81:ca:f7:84:ed:47:
8d:df:b1:a0:79:4d:f5:1f:ba:5d:a5:e4:f2:bf:30:
5c:ee:5c:ca:00:33:53:14:96:83:30:14:d1:c6:26:
03:53:e6:d0:d5:9b:2b:37:79:67:fb:69:44:59:1a:
b8:1e:68:b3:ae:1d:74:e5:d7:d7:d5:02:1a:b5:e9:
d7:1e:47:a8:cc:1a:8b:cf:45:46:b7:6f:7e:57:1c:
f6:78:76:2b:27:0d:f8:27:1f:5a:d6:6b:09:a3:a8:
6d:b6:3d:03:e4:3a:25:36:d8:cf:d0:c7:c1:e1:49:
e2:e6:66:4f:f2:db:4d:14:8a:b3:25:01:22:32:29:
09:c7:7d:f7:6f:3e:27:40:91:c7:08:a3:c1:47:bd:
07:a8:6e:fd:f6:ed:f3:29:7d:72:fd:cf:ea:88:c9:
bf:a6:ff:3c:d8:c3:f9:f5:d7:7c:7b:01:3a:b3:3a:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:30:7E:B5:7B:22:AD:60:11:05:B1:09:D7:EE:78:E3:04:13:26
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:6b:8b:51:b3:f0:bd:4b:e0:47:7e:8d:d3:9e:d5:dc:3c:
7d:9d:38:d5:e0:2b:9f:38:3f:7d:46:30:e5:de:72:51:a7:0f:
55:da:a0:a1:e1:80:8b:82:db:03:ca:77:c8:7c:be:43:62:63:
6f:96:d4:7b:1c:83:0d:b8:0f:f1:a6:fc:59:9f:fb:80:03:3a:
90:35:ee:d3:f7:a0:d9:a0:63:af:e9:51:8e:0d:2d:a8:cf:56:
09:c5:59:a7:7b:91:b2:a2:bd:5e:d3:0e:30:5e:9e:84:8a:24:
dd:60:ca:3b:b9:3d:ea:32:17:f6:f7:ce:ae:16:34:a2:e1:9b:
27:3f:a3:9c:8e:6a:4c:02:30:2e:04:bd:93:52:12:27:d7:a2:
e2:25:40:16:de:db:fa:cb:dd:d1:49:83:c2:09:2b:3d:34:4c:
c6:fc:bf:6e:ec:ef:7c:9d:73:5d:d2:e1:f3:a6:d0:89:ea:32:
06:4b:2d:30:4d:38:47:fe:85:42:6c:01:f7:5a:f9:8c:02:d6:
7d:0d:0b:a6:c6:79:e0:d7:ed:e7:d5:6e:e1:03:5c:e0:bc:8f:
77:c7:ae:ab:f3:04:7e:9c:1c:31:01:69:a8:0a:ab:1e:7e:e1:
85:6b:3e:4c:ac:1c:e3:aa:f1:87:40:aa:51:7d:b1:0d:aa:ee:
fc:a4:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:45 2025 by rpki-client