Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: UIge/xZJP5aSWUKmWGpuTB4SmQKtnZ7OUn3BOOKMNgo=
Subject key identifier: 45:C1:CB:02:9E:B2:5C:B7:61:8D:25:4D:F1:7D:14:72:0A:ED:88:5C
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 0199FDD9917599FEBF3972814CC24701882A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 09E8
Signing time: Sun 19 Oct 2025 19:01:58 +0000
Manifest this update: Sun 19 Oct 2025 19:01:58 +0000
Manifest next update: Mon 20 Oct 2025 19:01:58 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: t4Ffup5VuN9U9T7i76AJBlWacxJozu6n4uc4u8BumWE=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:91:75:99:fe:bf:39:72:81:4c:c2:47:01:88:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Oct 19 19:01:58 2025 GMT
Not After : Oct 20 19:01:58 2025 GMT
Subject: CN=45c1cb029eb25cb7618d254df17d14720aed885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:72:18:8d:a4:70:3b:5a:9e:b0:7a:79:09:
8d:04:a1:a1:ae:4e:25:9c:71:77:a7:0a:e3:00:12:
dc:c7:7a:7f:44:0f:bc:eb:6b:aa:10:12:2e:0f:8f:
8c:75:e3:7e:63:87:db:f9:7c:72:6f:57:bd:db:e3:
d5:8b:4d:ad:ed:6b:50:17:5e:b1:73:d4:fe:34:92:
f0:22:54:b5:b2:0c:08:0a:1c:d6:95:11:bc:6e:cc:
9a:46:22:9d:72:c1:1f:a9:97:d9:e0:ed:c1:83:33:
d9:cb:7e:72:fb:e9:82:38:49:e5:de:4d:1d:f2:c1:
01:0e:e1:8b:9b:78:eb:32:29:87:30:79:c3:9b:e6:
df:05:e1:5b:14:d4:16:29:7e:19:f1:84:ce:5e:9a:
a3:d9:26:ce:aa:5a:08:4e:a9:ee:2a:17:d3:f7:8e:
1f:e7:cf:d4:4e:7b:f0:ea:44:17:ec:1c:d6:b3:c6:
8b:7f:d5:77:74:4b:12:7f:98:ed:d3:4f:9e:cb:8b:
00:c3:0e:00:d7:73:8b:06:b9:47:f5:6a:ce:ee:5a:
93:50:55:45:f4:a1:06:06:5f:bc:6e:95:af:39:db:
6f:f8:c4:c2:c5:44:02:1d:dc:1f:52:e4:ec:e4:76:
06:a6:ef:06:2c:18:9c:ee:e8:f5:d7:31:93:b8:17:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:CB:02:9E:B2:5C:B7:61:8D:25:4D:F1:7D:14:72:0A:ED:88:5C
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2b:33:d5:fa:ef:2b:e8:2e:ef:14:84:4f:a6:d4:6c:42:0a:
29:cc:cc:02:c5:73:39:c4:4b:bf:3c:9b:4f:9e:a9:df:64:27:
7c:a4:01:f6:da:91:2a:fc:47:8e:ac:03:84:39:e0:71:71:d7:
a6:78:23:16:fd:c0:d0:91:1d:10:b4:04:2d:7e:06:c6:24:38:
92:48:a8:16:10:f5:bf:55:9d:e9:63:50:c1:84:bd:c6:66:47:
a1:f7:e2:e0:3f:69:6c:4b:fe:ae:6f:7e:dc:38:37:8e:95:a5:
40:2c:5e:e4:67:32:16:59:99:51:4c:2b:48:3e:65:55:bf:f7:
1e:19:cc:c5:be:3d:83:c6:27:5c:b4:78:9a:ec:3e:be:ec:06:
07:95:a3:90:33:59:3a:1e:46:19:6e:55:6e:cd:a1:43:48:53:
45:d5:56:70:e0:be:70:80:44:e1:85:07:04:cc:bb:49:02:dc:
79:dc:82:e8:ac:59:c2:72:94:35:5d:6b:02:65:0e:55:70:ae:
c2:9e:1e:1a:d6:26:7f:07:45:0a:80:d5:d4:b0:71:70:49:9e:
8d:77:97:0a:fb:89:72:17:04:2d:1b:c1:e0:e2:be:32:08:b1:
88:57:4e:21:d9:85:68:b6:65:a5:f2:d3:32:c8:21:2b:65:94:
4a:bb:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:34 2025 by rpki-client