Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: DTXQYq3zbrFehZFmVGoEVGdmbzhvCHmEtYg9OYcpO8Q=
Subject key identifier: 26:BD:8C:C6:6B:2F:E0:37:B6:10:EE:53:50:3B:7B:5C:41:1D:33:52
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 0198D5BC4541E63F13F021448D2FFEED4DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 0507
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: vsjlpBD6/eiZpUSiylHo2IG0AdU122jrNQu/hh0dgPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:45:41:e6:3f:13:f0:21:44:8d:2f:fe:ed:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=26bd8cc66b2fe037b610ee53503b7b5c411d3352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:a7:04:8f:3c:c8:02:eb:9f:0c:70:18:02:
32:c6:e4:8b:f7:7b:cd:46:3a:76:74:02:09:02:a5:
f9:fb:11:b2:e2:82:45:25:92:63:5e:f7:b3:77:35:
5b:49:90:68:45:6d:bf:f9:53:13:8a:1c:29:c4:52:
7a:72:57:1f:2a:35:45:6f:6f:63:6a:54:b1:25:9e:
6a:02:ab:7d:2a:32:59:64:c1:7e:60:55:d8:cc:4e:
7d:90:27:21:24:be:be:d4:f0:c8:76:e8:83:55:2d:
cb:94:10:16:ce:df:f6:26:35:5e:29:19:d7:04:1d:
0c:76:86:52:38:e2:91:d3:90:d2:50:df:81:25:ff:
73:46:3a:c5:ed:aa:b1:a5:e9:0b:67:08:9d:e4:4f:
eb:95:d1:63:1f:da:38:90:af:96:04:56:98:c2:60:
e3:8e:07:9f:9f:d8:1a:c5:31:f4:39:08:78:94:dd:
6b:fe:73:c1:08:6a:90:eb:c2:43:86:9e:05:d5:4c:
c3:1c:92:96:a2:f0:ed:29:35:d3:3c:8e:de:d2:6e:
00:92:94:1e:47:82:9b:ab:29:95:7b:f9:f7:b9:06:
ac:43:08:28:6a:97:5b:9d:b9:01:de:03:a7:1a:9b:
c5:18:2e:1f:31:15:b6:37:7b:25:7e:77:85:6e:b4:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:8C:C6:6B:2F:E0:37:B6:10:EE:53:50:3B:7B:5C:41:1D:33:52
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:c0:06:1f:40:d3:5d:8e:fb:a5:cc:bc:cc:49:40:70:7f:
07:69:a8:a9:83:7a:5c:67:d9:97:14:80:b5:98:a4:2b:4e:f3:
91:92:32:50:07:49:cd:7c:c5:03:ca:f3:28:d9:d1:0c:ee:01:
92:d9:b9:74:2a:3d:15:84:85:05:cd:14:45:d1:2f:9e:3d:1a:
71:7d:f3:6c:d3:cb:a0:7a:b5:0a:ca:39:e6:74:a6:67:d5:46:
4b:12:0f:24:38:7d:e8:26:67:f8:78:d2:ea:39:12:1c:dc:65:
a0:41:54:c4:1d:21:6d:02:16:b1:6e:d2:00:e1:06:ef:1a:b6:
b8:d2:94:4f:24:e9:62:bd:63:7d:f4:3b:ad:3e:69:38:3e:de:
1c:65:b1:2e:ae:2f:45:af:64:42:34:20:72:4a:1e:36:66:69:
00:28:20:fa:66:30:96:1b:87:bf:db:03:40:19:36:19:45:08:
7c:6d:0f:97:84:ba:ed:4f:ec:9d:bb:d2:f8:69:b6:a1:a1:ff:
48:7e:05:3e:b2:a6:7b:f8:ad:5e:0c:d5:64:3d:6f:70:5c:fe:
99:d6:60:5e:e0:94:42:a1:50:74:cf:07:dd:fc:8a:8b:18:f9:
b7:b0:d3:d4:34:8a:da:46:be:ce:df:28:0c:3e:5f:d3:ca:f9:
ae:4e:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:23 2025 by rpki-client