Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: j7Sf0P1DQRo2y8k7YVt6G3uBduIkbr8Kxb7v2Pr6imc=
Subject key identifier: 26:1B:04:46:58:D9:B1:EE:6C:2C:53:B9:1D:7A:3C:D6:57:11:75:8F
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 0196C683B8BA83CC0A1FA759009DE605BBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 03F6
Signing time: Mon 12 May 2025 22:00:43 +0000
Manifest this update: Mon 12 May 2025 22:00:43 +0000
Manifest next update: Tue 13 May 2025 22:00:43 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: kP0vQDvedpxLqgz25UdogO2eHq50xqHAKlaFSCOXfWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:b8:ba:83:cc:0a:1f:a7:59:00:9d:e6:05:bb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: May 12 22:00:43 2025 GMT
Not After : May 13 22:00:43 2025 GMT
Subject: CN=261b044658d9b1ee6c2c53b91d7a3cd65711758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:44:60:b7:b9:6c:b3:e6:90:76:6e:9e:8a:
92:98:16:2e:d9:8d:5c:ae:63:3c:14:f3:eb:03:15:
05:12:df:c3:71:4e:b7:cb:b7:9c:49:3e:ec:48:8c:
c3:03:28:53:4e:7b:c5:b1:e5:2b:4e:b7:c4:5e:d1:
d4:11:48:ca:36:9c:ee:f9:bc:64:e9:20:75:0c:f4:
34:24:96:48:32:1a:8d:71:4b:80:f6:e8:67:b5:05:
63:c0:a5:ff:15:34:45:66:c1:8b:e9:2e:e8:85:20:
f7:65:02:05:2b:44:82:a6:cd:45:fc:ab:39:cd:df:
5f:8c:70:a4:f2:37:b2:0b:ad:5c:35:11:bb:bc:ae:
f1:a1:9c:eb:1e:0f:0e:bf:16:ae:a5:08:60:c8:0f:
c0:f4:e6:f8:6f:4a:27:4c:af:38:49:7e:3c:7f:00:
0d:3b:59:b1:25:6d:77:d8:05:36:b6:24:b3:13:cc:
ac:24:fd:26:67:e7:6d:18:27:07:fd:81:c1:c3:31:
d0:63:4c:d4:d3:6f:24:86:c3:4f:3e:d9:90:45:0a:
b5:82:5b:89:38:81:a9:1e:b3:7c:42:6a:0a:69:c6:
0c:0d:ba:55:c1:40:e0:34:56:ec:f7:a9:2a:b9:83:
3a:d7:2d:3e:5d:af:58:4c:b4:ce:b4:d4:03:5e:38:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1B:04:46:58:D9:B1:EE:6C:2C:53:B9:1D:7A:3C:D6:57:11:75:8F
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:f4:df:dc:c0:89:8d:08:3e:f0:51:63:f8:78:28:a8:6f:
67:f8:69:d1:94:a0:38:f2:49:ed:eb:3e:3c:40:77:31:04:a7:
a0:b1:dd:d2:7c:ef:0e:62:94:4c:a6:13:07:dd:cb:c7:ff:8b:
8e:be:34:3a:ff:31:bb:ae:af:b0:18:2c:81:af:4d:07:9b:5a:
b8:70:c6:34:77:2e:1e:0e:af:5b:85:8d:0d:fd:d8:d7:ec:57:
83:fe:4a:e8:d9:3f:b6:5e:74:48:76:ca:7c:99:0e:aa:a4:22:
b8:cd:52:29:91:e6:fc:ca:fe:b5:e8:fa:6e:10:ab:b4:32:e4:
60:a7:4c:2d:21:2c:05:f6:e2:bb:8e:1d:7e:31:66:9a:f2:73:
33:32:58:84:72:01:96:be:ed:d3:52:32:87:08:fc:72:1b:5b:
b8:fc:c4:7b:e3:41:72:79:bd:e8:b9:c7:f6:1d:09:8c:20:dc:
1a:cd:e4:8b:b6:2f:1e:22:7e:41:ed:27:93:e3:e2:fa:89:13:
c9:76:3e:bb:bd:be:0e:8a:47:60:f4:ed:c3:8c:a2:fe:2f:43:
e4:05:3f:78:9f:17:fa:29:e3:14:42:ca:5e:b1:9c:de:3f:b8:
cf:e8:ef:65:c4:0f:47:97:e9:5c:7f:53:15:b3:18:66:c7:6a:
c7:f5:02:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGg7i6g8wKH6dZAJ3mBbvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFlOWYyM2VlYWNhNjhjNzIxY2JlNDI4MDYxMDBiNzVl
MTU3NzAwHhcNMjUwNTEyMjIwMDQzWhcNMjUwNTEzMjIwMDQzWjAzMTEwLwYDVQQD
EygyNjFiMDQ0NjU4ZDliMWVlNmMyYzUzYjkxZDdhM2NkNjU3MTE3NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKVEYLe5bLPmkHZunoqSmBYu2Y1c
rmM8FPPrAxUFEt/DcU63y7ecST7sSIzDAyhTTnvFseUrTrfEXtHUEUjKNpzu+bxk
6SB1DPQ0JJZIMhqNcUuA9uhntQVjwKX/FTRFZsGL6S7ohSD3ZQIFK0SCps1F/Ks5
zd9fjHCk8jeyC61cNRG7vK7xoZzrHg8OvxaupQhgyA/A9Ob4b0onTK84SX48fwAN
O1mxJW132AU2tiSzE8ysJP0mZ+dtGCcH/YHBwzHQY0zU028khsNPPtmQRQq1gluJ
OIGpHrN8QmoKacYMDbpVwUDgNFbs96kquYM61y0+Xa9YTLTOtNQDXjim8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYbBEZY2bHubCxTuR16PNZXEXWPMB8GA1UdIwQY
MBaAFExx6fI+6spoxyHL5CgGEAt14VdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEt
YzliN2ViMmNlYTU3LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEtYzliN2ViMmNlYTU3
LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbG7039zA
iY0IPvBRY/h4KKhvZ/hp0ZSgOPJJ7es+PEB3MQSnoLHd0nzvDmKUTKYTB93Lx/+L
jr40Ov8xu66vsBgsga9NB5tauHDGNHcuHg6vW4WNDf3Y1+xXg/5K6Nk/tl50SHbK
fJkOqqQiuM1SKZHm/Mr+tej6bhCrtDLkYKdMLSEsBfbiu44dfjFmmvJzMzJYhHIB
lr7t01Iyhwj8chtbuPzEe+NBcnm96LnH9h0JjCDcGs3ki7YvHiJ+Qe0nk+Pi+okT
yXY+u72+DopHYPTtw4yi/i9D5AU/eJ8X+injFELKXrGc3j+4z+jvZcQPR5fpXH9T
FbMYZsdqx/UCJg==
-----END CERTIFICATE-----
Generated at Tue May 13 08:22:04 2025 by rpki-client