Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: EtC7CRIaa8+JNcatjUYxi6jHxq1juasuLoLTYZpIqHI=
Subject key identifier: 38:72:F3:C2:FF:CD:4C:79:B6:76:1C:CC:F2:50:06:6A:4A:70:34:A9
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 0199FC218084234B44E112C43D88CD059A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 1409
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: XMLyNCiaYsNthk7pHZSWxRYONmYotmTiPvIKIYNTDBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:80:84:23:4b:44:e1:12:c4:3d:88:cd:05:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=3872f3c2ffcd4c79b6761cccf250066a4a7034a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:4d:ab:09:ef:1c:59:86:3a:5e:07:cb:69:
d8:47:d9:bf:4c:8e:57:81:cd:44:fb:e0:98:57:ca:
a6:1b:a0:1f:78:34:07:28:a2:b3:05:aa:a1:d1:a4:
22:35:5d:e5:b5:d8:34:e3:da:28:13:b4:81:9f:d3:
65:2e:fc:d1:e1:86:e3:12:7c:aa:f9:10:d4:96:a9:
82:43:42:de:5e:e6:51:d3:8c:45:1c:76:99:81:0b:
ae:2f:80:53:60:6f:26:4d:91:fd:42:26:a6:18:a6:
e6:f3:61:24:f8:6a:5a:fc:45:19:30:34:8f:96:06:
7a:3b:de:53:07:43:12:f1:cf:9d:31:22:09:c0:cb:
13:5f:e8:de:a1:92:aa:38:7a:27:b8:f5:7c:90:66:
1f:4b:98:e8:f6:f3:8f:7d:6a:d8:eb:80:af:45:36:
41:a8:39:ed:dd:40:60:b2:e8:c6:bf:b9:ec:a8:da:
a5:a1:36:a8:40:da:f4:e6:d3:c9:48:c9:7d:11:ad:
b3:a5:88:c0:ea:bf:93:04:40:2f:69:45:8a:ab:7a:
0d:70:63:fe:6d:5b:b4:96:84:fd:8c:e4:31:7f:d3:
98:84:eb:a1:8e:15:6a:16:c1:5f:52:70:7e:cc:18:
39:b4:56:c3:de:0d:61:f4:ea:25:d4:43:a8:0c:69:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:F3:C2:FF:CD:4C:79:B6:76:1C:CC:F2:50:06:6A:4A:70:34:A9
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8f:45:43:88:e4:79:d2:2f:c0:96:f0:78:f7:49:dc:a7:33:
00:2c:39:29:f1:ce:6b:1c:31:e5:2f:d3:3b:4d:ca:ae:d2:c1:
a6:16:b2:49:46:e1:91:a9:1f:56:6e:2b:a1:5f:24:16:0a:ca:
58:90:11:08:e5:28:dc:05:5e:90:b7:9a:60:55:0f:ce:7c:cf:
ee:d2:15:82:bd:96:1a:e9:9e:11:37:d3:70:98:02:78:c0:5f:
e5:69:b8:55:d8:e5:16:82:a0:84:54:b4:98:e8:22:ff:20:2e:
88:f7:99:17:c2:98:43:9d:a7:bc:5f:ab:15:e1:2a:35:23:f1:
1b:43:ae:6b:49:2d:7a:91:40:e6:8e:b7:dc:8f:ac:01:7e:6b:
29:f5:ca:b2:3c:4f:f6:35:a9:39:e3:6d:e4:44:cb:55:5c:1a:
46:6f:78:b4:7f:81:58:16:64:87:dd:a1:89:9b:f3:8f:ac:ed:
a2:f5:33:a6:2e:cc:7c:51:16:eb:e6:54:97:75:09:fa:3f:de:
dd:ad:45:96:1b:b6:c9:07:27:ff:01:b3:6a:6b:0e:fc:a5:1c:
70:29:40:2b:bc:84:b3:a1:c8:c9:86:50:1a:4b:36:1b:32:4d:
6c:6d:d4:2c:e1:b8:87:00:a0:09:01:83:8f:97:e9:91:d0:f5:
e7:d6:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:14 2025 by rpki-client