Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: /o9Scoeo9HpagIauuwkxPwQ+TxPsu4chufL6rBamRUg=
Subject key identifier: D2:21:17:D6:27:E1:47:26:58:CA:7C:5A:6C:9B:D2:70:0F:95:8A:CA
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 0198D515CED1983523B8E00E782F76DD62D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: 79RypG1RUBTA+xTlhrB+QIrHw+0qkqZpkxTRX580dyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ce:d1:98:35:23:b8:e0:0e:78:2f:76:dd:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=d22117d627e1472658ca7c5a6c9bd2700f958aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:53:2c:b0:22:48:f2:6d:55:f5:4f:fb:1f:
70:88:fc:64:53:52:b0:8e:17:68:b8:33:62:52:fa:
a2:a7:df:7e:fa:f9:93:69:49:13:2e:0f:45:19:c4:
42:ac:38:dd:71:e6:3a:6e:ca:49:7f:71:25:77:4f:
31:0f:7b:eb:2e:98:a7:0a:c5:2e:36:01:8c:a1:28:
98:73:66:8b:c5:d3:bb:7d:dc:8f:8e:ec:db:ba:b2:
7f:fd:45:b1:8d:7f:30:a2:d1:77:75:76:81:8e:13:
2c:83:b9:64:d2:2a:8a:b7:09:a1:b5:2c:db:40:0c:
6d:ca:6d:dd:80:1f:90:dd:a3:eb:08:a5:77:ab:68:
94:1f:9f:cc:30:9e:7c:85:62:4e:e7:e3:2e:f6:bf:
84:b5:62:41:67:ea:28:f2:92:94:25:be:9b:27:6a:
99:37:ea:f7:89:97:0d:a4:6c:dc:41:bc:09:85:68:
2e:89:93:1c:1a:d2:c3:27:9e:8f:36:2a:a3:a6:c2:
cb:ba:a4:6a:83:c1:8e:f2:ef:bc:d4:2b:bf:91:46:
dc:24:fc:85:55:9b:62:5b:53:94:c0:7b:a0:63:c6:
53:c0:e0:dc:14:b0:a3:74:db:1d:0d:36:f4:84:86:
36:3a:ed:32:dd:fa:f6:33:ae:52:0b:17:5a:03:d8:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:17:D6:27:E1:47:26:58:CA:7C:5A:6C:9B:D2:70:0F:95:8A:CA
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:d9:f0:c9:74:18:e3:cd:d1:cc:3b:1c:3b:6c:f0:63:24:
7a:f2:45:24:24:04:0a:76:20:ea:be:4e:68:ba:c5:52:67:7f:
86:bc:a3:6d:e2:99:00:1a:d7:b5:44:92:e5:ca:fe:6f:63:5f:
e4:1f:5b:e1:d5:ed:c9:24:9c:d9:22:2f:ac:2e:ed:6e:db:f7:
aa:b0:7b:4e:29:90:42:78:bc:6a:44:0b:c5:2c:9a:42:bd:71:
24:7a:03:03:b2:e6:bc:7d:2c:ca:aa:2b:c7:e7:7f:13:b8:a3:
2b:69:61:c4:0d:45:56:85:b3:3f:5a:8a:07:23:dd:fe:25:e4:
03:dd:53:fc:1f:20:5d:20:db:2a:bd:ff:bd:62:0a:69:bd:69:
5d:4b:86:f2:98:18:6f:9c:11:96:17:de:8a:aa:1d:54:cd:f6:
37:e1:b3:8f:bd:98:db:ec:9a:a0:cb:ac:be:0d:f0:4f:f0:f4:
c2:c5:99:8a:b6:4b:9d:3d:89:58:df:37:61:1b:27:c1:2c:b7:
bb:d7:53:96:d6:fa:12:85:26:b4:fc:23:fc:1c:24:ec:3f:d0:
76:f3:ec:54:34:c8:c6:4c:a8:88:ce:94:5f:24:2e:be:7f:14:
14:0b:e0:c5:48:db:84:90:37:6e:f2:21:fc:01:2a:51:5e:98:
35:6e:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:11 2025 by rpki-client