Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: k0KUv3NYaqfiSqEiM597+0UKVRakjDX1V+Had2agtcs=
Subject key identifier: 41:FB:BD:8C:48:77:D1:9B:B5:E4:57:BD:10:D4:94:55:F7:40:4C:BD
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 0198D4A7AC6E99D7D603D33AAB3CE81819A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 1370
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: LUuDXiMKxl1q47HPjclUFOuCK/2d3lwh9T+8WsAKTWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ac:6e:99:d7:d6:03:d3:3a:ab:3c:e8:18:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=41fbbd8c4877d19bb5e457bd10d49455f7404cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:a9:1e:88:4d:86:b6:a8:ed:0c:24:91:25:
de:27:4e:4a:2c:27:40:07:58:eb:ae:76:39:60:e8:
35:4f:b8:80:50:8e:f6:17:18:56:48:1a:12:18:fe:
c3:de:08:62:b2:20:5a:85:6a:64:1c:43:c4:10:e1:
00:3f:68:bf:ab:3d:31:f5:24:c8:71:14:70:a9:28:
ba:a9:80:e2:32:c3:f1:4f:12:ab:4e:c8:08:63:b7:
1b:df:3a:e5:e1:ad:d4:36:42:26:31:f8:bc:42:85:
60:43:a6:07:cf:12:f3:d0:33:e7:00:b1:c4:d8:b3:
3b:be:0e:f0:28:14:e1:6c:be:3e:83:83:9a:a4:a5:
e3:dd:89:a1:30:81:b7:8a:8a:05:44:48:63:b3:de:
81:32:0c:cd:ca:b2:bb:a7:b6:d4:3c:34:fd:8d:43:
c2:aa:c3:30:64:c8:c5:75:d3:18:cd:3d:08:a7:27:
be:0b:84:73:62:53:5e:c4:e1:5b:b8:79:ad:82:36:
17:ad:c6:71:12:e6:f8:52:af:81:b0:27:aa:5a:b6:
69:ab:19:3c:09:50:05:10:a2:44:80:37:df:d5:30:
b5:c2:d4:d5:d4:8b:5a:2e:cf:f5:90:81:57:c0:ac:
be:fd:f9:cf:b6:0b:f1:66:bd:00:44:98:2a:5b:55:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:BD:8C:48:77:D1:9B:B5:E4:57:BD:10:D4:94:55:F7:40:4C:BD
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:a1:48:14:b6:15:9d:e2:22:4e:b2:61:13:49:a4:ec:d8:
c4:aa:3a:2e:0d:83:e6:30:49:41:83:cb:38:f1:ee:1f:b4:39:
ee:19:7d:7e:30:5f:ed:a6:0c:d1:64:bf:9b:5f:2e:8c:25:88:
36:16:e8:39:1d:ea:51:7b:e3:17:79:84:36:f1:3e:bb:b6:de:
58:c8:e6:24:27:7c:31:d0:1a:10:63:61:0c:f0:86:e7:d6:5b:
8b:2e:31:a5:72:cc:fb:ec:4f:05:a4:a4:db:2b:07:e1:86:a2:
16:9d:6f:e3:9e:71:22:89:20:b4:b7:87:5d:0e:05:12:41:60:
96:b3:0a:a1:68:a2:51:0e:02:c7:d4:07:6f:4d:37:45:1a:ef:
47:94:67:a4:a2:fa:1d:a1:6d:a2:9e:ba:ee:eb:45:3f:a0:aa:
87:41:f0:4d:9c:f5:c5:5f:0b:aa:a3:d4:95:8c:fa:eb:8c:e3:
80:05:e6:66:1c:51:db:9e:69:25:8b:28:43:71:dd:6b:35:9c:
69:38:57:a3:1b:f2:47:7e:57:4f:da:5b:34:07:d1:e1:68:41:
43:59:e4:ed:46:53:42:8f:6a:c8:41:49:55:35:09:a6:09:78:
90:24:08:6e:15:99:64:b6:a1:0a:b9:bf:bd:b6:60:27:39:43:
02:cd:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:21 2025 by rpki-client