Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: dTYpCXGI31vYUECKH3luLbXDKz9V4viBuMV6njMj4cU=
Subject key identifier: B1:02:61:A8:A2:A6:79:DD:81:B5:31:4E:EE:4A:FF:62:B0:90:9F:EF
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 0198D65F84EF3E84452FAE02D671DC625312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 094F
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: MJWk2UTQ/tC0xACUfR5H+9qrT4t+17LqmPyVE3S8tHI=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:84:ef:3e:84:45:2f:ae:02:d6:71:dc:62:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=b10261a8a2a679dd81b5314eee4aff62b0909fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:c1:ed:92:05:70:cc:67:aa:71:bc:0f:df:
a6:05:6c:52:25:87:79:2a:52:46:75:f0:68:cc:ec:
e2:16:2f:fe:f0:d0:e9:f1:8a:c3:1a:f0:55:ce:da:
21:87:40:c7:ca:d9:6c:9d:b2:c0:57:c6:8a:a2:19:
8a:e3:c9:ba:9b:91:a0:b4:ce:44:ca:ea:50:ce:8b:
0c:a8:97:66:8b:e0:8f:76:3c:72:df:05:50:51:d0:
91:1d:cd:34:65:a7:0a:ba:cf:c1:24:ac:92:c5:ec:
33:27:7a:0d:ba:28:3d:2b:7f:41:a4:22:90:d2:c3:
5b:36:86:5a:9f:0b:3c:90:95:2e:15:80:99:4c:d1:
f6:76:3e:11:8b:16:04:44:6b:95:19:08:fa:17:bd:
29:23:90:86:b7:08:39:05:93:1e:05:eb:b2:23:2c:
04:ad:76:45:95:1f:fd:81:d3:a0:78:78:2b:f2:c1:
96:b9:e2:75:32:f0:df:71:ee:77:14:0c:5b:25:65:
31:27:48:a9:d8:54:b2:fe:fd:81:7d:2b:0d:a6:f8:
43:e5:b6:21:fe:25:ef:f0:6d:9f:84:48:7e:23:cc:
2f:0b:e1:ec:b3:ff:91:14:23:13:0e:18:4b:8e:71:
01:8f:df:c0:00:5c:d0:fa:71:7c:26:f0:3a:13:3c:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:61:A8:A2:A6:79:DD:81:B5:31:4E:EE:4A:FF:62:B0:90:9F:EF
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:9f:41:d2:6d:11:e4:90:78:4c:08:61:2a:c9:71:e7:81:
95:df:01:2a:a8:fa:6f:65:f8:e3:83:f5:ff:40:c9:60:50:f1:
29:3d:fc:2a:90:35:72:15:ac:17:a6:f6:92:4c:f4:ae:74:41:
e7:54:c9:0e:04:6a:a0:4b:f7:ab:52:a3:55:90:9f:2d:2e:19:
23:84:a9:1c:52:a4:30:5e:fa:93:8f:15:58:8e:11:0d:26:2f:
5e:cc:c0:5f:a5:08:10:5e:6f:48:1a:c4:a7:57:3d:3a:d0:73:
28:10:a7:c8:fc:bc:22:5a:4c:37:ef:af:90:f3:1f:25:6b:df:
b6:c6:b1:90:67:9c:a8:0b:21:f4:22:99:5d:2d:f4:39:3a:2f:
aa:41:b5:e8:da:0d:c9:b8:bf:5c:89:b6:a6:27:f6:8d:36:5c:
81:5f:e7:22:c8:c7:9d:d4:8f:71:6c:48:38:c6:26:05:4d:0e:
ae:b1:84:dc:21:b9:1f:4d:eb:0f:fe:21:fa:dc:db:de:d0:61:
56:18:c3:61:f3:6a:3c:f5:20:3c:4d:83:fc:ec:df:f2:0a:ff:
46:6c:fa:bc:b8:de:12:01:ba:ae:72:c8:0d:ee:94:83:90:c5:
c4:d2:17:84:4e:1c:ad:58:0f:17:8e:e0:75:0f:6a:94:e9:c8:
3e:e0:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:10 2025 by rpki-client