Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: sS5oYl4upJZRjPbkUg+C4x43pDAEpm2PqoPuALPTe2s=
Subject key identifier: 1E:67:2F:E7:EF:75:64:12:9A:8E:A1:1D:C5:03:BB:5A:30:1D:35:70
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 0199FD3481F53E4496412BAD809A8007BB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 05A0
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: zCvrEw3/18OmjgyQMShkqbmnMT+qZ4uovOkSCUS1l9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:81:f5:3e:44:96:41:2b:ad:80:9a:80:07:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=1e672fe7ef7564129a8ea11dc503bb5a301d3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:c9:e1:86:a2:b1:5e:4b:cf:c2:3b:c2:0b:
4e:31:66:3a:d1:f6:07:0c:42:fb:f1:23:6f:13:60:
52:d7:9e:b5:ff:da:ed:55:08:2d:89:c8:b5:6e:4f:
fd:25:77:15:35:76:ba:a2:c4:a4:01:9e:fd:e2:c7:
f1:bb:56:1b:da:f8:16:99:df:5d:70:23:13:42:d0:
ba:1d:a1:30:b9:ba:b3:89:82:20:dd:07:c9:74:ce:
9d:42:2d:1c:84:88:4b:74:6b:4f:d9:60:a7:2d:31:
83:c5:22:71:8c:61:9d:20:f9:fc:30:26:b0:3e:03:
29:51:24:a2:b0:7e:c7:d9:fc:28:40:97:11:6b:f5:
e9:eb:65:ee:22:2c:0a:c9:89:bc:2c:f4:07:3c:b9:
37:5e:04:3d:f4:06:0a:92:c7:36:37:75:42:40:4a:
7c:63:47:7b:d7:4a:0d:75:b6:b1:f4:77:28:b1:aa:
63:91:12:ea:90:3c:39:c1:8d:92:79:26:3b:ff:75:
03:79:3e:98:03:99:e2:fc:0e:08:86:d5:fa:5d:a7:
a1:7d:9e:c4:f4:f9:6e:59:cd:32:84:91:34:32:99:
32:49:96:c6:0d:f1:bb:fe:2a:65:82:3e:51:9a:96:
c8:9a:7c:6e:a1:00:c6:59:8f:b0:11:12:de:5a:75:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:2F:E7:EF:75:64:12:9A:8E:A1:1D:C5:03:BB:5A:30:1D:35:70
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4d:4e:e8:1a:5e:8f:6c:9b:ed:df:49:c2:7e:c8:b0:a5:c4:
85:9c:a9:ce:63:66:4e:54:52:56:fe:b9:55:3e:59:a0:ed:18:
78:b3:ad:b6:7f:6c:e9:21:30:a2:42:fd:40:4e:78:cf:9a:55:
8e:85:25:63:b9:ad:bc:e1:3a:68:ec:18:da:ab:cc:6e:aa:9d:
f1:da:39:69:e0:48:c5:70:60:11:04:4c:28:e7:c3:91:eb:15:
b0:05:0d:7d:c3:d4:d2:98:d1:86:23:e0:de:95:8f:e3:1a:f5:
e0:d4:ca:cb:ad:76:3e:08:72:ad:e5:32:09:4c:99:3d:ef:db:
a5:89:69:a9:79:95:1d:79:9a:44:ad:3b:ca:a3:91:8e:2a:61:
7b:fa:9c:6a:f1:74:b2:ae:a4:4a:1c:fc:ff:c4:ef:3e:a9:c8:
67:06:8d:dc:85:35:0e:3d:e9:41:f0:e2:26:a4:29:3f:7c:e0:
55:e9:4a:ed:09:b3:c1:72:5c:18:e9:c7:c1:37:e8:96:be:87:
51:37:8d:78:35:eb:ed:e5:2b:1a:b3:f0:57:4e:9a:ee:03:f1:
f0:2e:90:25:93:c3:82:63:70:2f:1b:97:f0:1d:31:0b:f8:7d:
ad:d4:0d:ea:69:be:91:56:31:e2:bc:35:70:d8:e9:d7:c4:27:
dc:ce:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:38 2025 by rpki-client