Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: X6fCIAd6yQ0TBNE3VIJb/cv9Ea8/dcErxbiRnrtoq6g=
Subject key identifier: F5:8A:64:8B:D1:5E:F2:63:88:92:75:8B:78:6D:32:B3:BA:04:A9:80
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 0197B88F0FA21B0E48D32511981AF67EEEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 08BB
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: ZSBIzMeUIV2RTmSq1myisjOM1DU/w0AtpVbCBPADybE=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0f:a2:1b:0e:48:d3:25:11:98:1a:f6:7e:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=f58a648bd15ef2638892758b786d32b3ba04a980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:95:00:32:37:91:0c:61:2d:f0:22:20:99:
45:ea:ef:b6:ae:83:60:ba:73:21:21:64:5f:f2:48:
b6:86:c8:1e:e8:68:2a:9d:55:12:51:12:f0:31:79:
f2:e1:f2:16:67:76:28:c3:ec:6a:9d:ae:ea:de:21:
b1:1d:ed:61:af:34:df:ec:0d:79:03:36:c7:b9:fb:
3b:75:57:73:2b:7c:d5:d1:68:8a:de:04:bd:4e:30:
8a:1a:b4:c4:42:29:14:c4:6f:33:72:93:84:71:72:
8a:6a:0c:c1:3e:4e:ed:24:76:c4:da:83:ce:58:e3:
7c:9b:34:28:fe:be:d5:b6:70:4e:85:48:55:0e:fb:
fa:55:53:d7:47:bd:ba:ad:e5:b8:bb:80:09:94:9b:
e8:06:af:b4:e0:34:ab:31:90:24:5d:fc:e2:6c:4e:
34:04:e4:a4:13:2c:57:7b:4a:2e:f2:13:ae:57:e3:
ed:6e:b2:06:26:80:65:95:75:d7:f8:96:40:7d:97:
8f:86:b2:c3:2a:f0:24:b8:9e:92:82:6d:01:c8:da:
17:67:50:35:14:fb:37:a7:97:70:b2:76:f7:70:d9:
c2:e3:40:b5:ea:48:f8:4c:f0:6d:3a:99:96:2d:1a:
11:4e:bd:ed:a4:4b:61:b2:a6:6b:64:d1:a7:a0:f3:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:64:8B:D1:5E:F2:63:88:92:75:8B:78:6D:32:B3:BA:04:A9:80
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:19:d5:e4:2c:57:6a:25:a9:c6:42:67:1f:37:1f:2f:2c:
44:d8:87:6a:63:9f:a3:66:4b:a8:4b:04:1d:24:d4:ed:01:76:
c4:c1:b8:04:27:74:95:51:56:94:66:b9:79:d6:5e:6a:70:cb:
63:e6:94:ef:c5:a2:62:f2:69:4b:18:13:ba:f8:f1:ed:91:97:
7d:db:e4:0b:7a:53:83:f4:19:5e:0d:55:03:b2:e9:e6:43:36:
c4:39:88:99:dd:94:9a:90:42:ca:f2:a9:be:3c:66:b8:a4:c1:
cd:68:0b:db:80:2f:cb:e5:b4:b3:32:ce:fa:3c:2b:01:25:b9:
c8:17:93:28:20:f9:28:c5:86:13:51:80:7e:3a:64:2e:bb:f8:
a6:91:16:40:70:39:b1:ba:53:29:06:5f:6d:d8:95:67:e5:72:
d6:40:ca:06:4b:e6:98:3f:ed:fd:1c:9b:2f:d6:3b:04:e9:62:
14:15:0e:39:65:8c:9c:21:a7:4c:f3:ee:d6:3c:91:81:bb:f7:
80:ae:58:14:62:73:f2:cf:18:09:27:80:b9:d8:26:9d:10:de:
16:3f:7e:c9:eb:e5:60:f2:3b:2a:36:52:d4:d1:ef:e4:dd:f5:
2e:ec:49:09:99:56:6c:1e:0f:0c:61:9c:c7:de:a5:2d:68:ee:
46:82:3d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:38 2025 by rpki-client