Manifest
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier: +V5iyVEOY6BpaO1icIHVS9txsqgXZwJwVEU4Hyv4PPU=
Subject key identifier: 0B:90:0D:36:A7:CB:A6:19:B9:81:1B:25:D9:8E:DC:08:82:3C:17:2F
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer: /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial: 4EB059478C7A60A142BDA12569310F06E92434FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number: 0281
Signing time: Thu 26 Mar 2026 01:44:10 +0000
Manifest this update: Thu 26 Mar 2026 01:39:10 +0000
Manifest next update: Fri 27 Mar 2026 04:27:10 +0000
Files and hashes: 1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: 16GDXOsKZ2Bv8ieknbx802vA+if4X6a/xLcOPG0Ec5Y=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b0:59:47:8c:7a:60:a1:42:bd:a1:25:69:31:0f:06:e9:24:34:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Validity
Not Before: Mar 26 01:39:10 2026 GMT
Not After : Mar 27 04:27:10 2026 GMT
Subject: CN=0B900D36A7CBA619B9811B25D98EDC08823C172F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:c2:0a:3d:9c:37:9a:15:57:b6:37:fd:72:
48:89:bb:00:2b:69:ec:5c:d0:ef:77:99:78:27:f4:
12:13:5a:88:e6:08:6d:59:91:88:b2:e6:20:39:ba:
16:a9:d1:00:93:f4:15:43:20:f9:cb:17:9c:05:2f:
33:68:c9:2a:c1:8d:3a:80:9e:65:84:4c:ce:50:84:
17:61:55:af:94:ab:cf:74:99:d4:ec:9a:52:d2:0b:
d3:35:f5:9b:0a:f9:8f:67:7e:9f:97:ff:fa:fe:c7:
5e:62:38:4e:84:d2:37:57:66:28:7e:95:53:cd:1c:
47:ff:fe:c0:2e:47:5b:14:9b:08:46:b3:9c:ab:45:
be:e1:92:e2:88:88:ef:bd:40:f1:8a:ab:1e:7e:79:
fb:fa:d9:ef:08:87:98:19:5f:b4:6a:ea:a5:36:e2:
66:d6:0f:eb:2b:c1:4c:37:71:a8:4d:aa:0c:11:b9:
b3:ea:21:6f:fc:2e:db:24:16:4a:11:49:ae:14:22:
75:50:a4:5f:6f:69:8e:06:07:7d:aa:05:20:60:8b:
5f:5e:5b:ca:c2:79:48:e5:a1:44:a4:ad:9b:fd:66:
9b:e8:fb:58:91:59:84:1a:d2:b2:d0:d2:5f:27:f2:
c2:99:89:47:fb:7d:98:b4:b4:98:59:e5:24:83:99:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:0D:36:A7:CB:A6:19:B9:81:1B:25:D9:8E:DC:08:82:3C:17:2F
X509v3 Authority Key Identifier:
keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b5:08:c7:6b:e9:83:4f:ca:22:16:2d:25:05:f5:a7:39:f0:
04:67:e5:7d:67:40:30:81:52:39:5d:e9:6f:79:74:e5:39:3a:
54:11:08:37:f1:9c:d1:c7:0f:d4:bd:1c:c9:60:05:ce:90:1d:
4d:3a:df:4a:9f:ae:66:20:a5:1e:03:d9:af:ae:49:88:47:9a:
fe:73:3d:c7:ca:5b:c3:08:bc:f3:31:e3:2c:53:ee:69:0f:bd:
17:f6:4f:08:16:a8:ac:44:d1:31:95:ed:dc:b4:6d:eb:a0:03:
29:6d:f4:bb:01:10:a8:62:f1:8a:48:ad:5e:19:2f:b0:04:22:
25:9f:28:e8:47:da:e0:b8:f0:c5:7e:6f:bc:c1:f7:a2:07:f0:
21:42:fb:b4:15:e6:7f:b3:86:e7:00:0a:7f:28:04:75:6c:ad:
17:37:2d:a5:c0:bd:f8:dc:5c:d2:4e:8d:84:e1:26:cc:2e:94:
68:7d:24:3c:54:67:e8:02:a2:b3:78:ac:62:fc:58:4c:0d:08:
7c:eb:6b:40:71:6c:5d:88:1d:29:9f:9c:6e:bd:64:ac:32:d9:
f3:52:41:e6:d0:81:99:9e:af:37:19:f2:71:f6:71:f5:03:de:
52:95:c6:9e:7c:d0:eb:b2:da:6b:78:1b:64:10:00:ae:89:d4:
4c:b8:c8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:23 2026 by rpki-client