Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File: THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier: zOK9CzZqukepcOrvh/186Fd7GnRAv2P/0udDnAcvtwU=
Subject key identifier: 40:7D:56:F7:95:40:A9:3D:E6:6D:35:94:F9:BA:13:13:7C:7B:01:01
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 019848528DB087DED501497F0776F63C50A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number: 0A9A
Signing time: Sat 26 Jul 2025 20:00:26 +0000
Manifest this update: Sat 26 Jul 2025 20:00:26 +0000
Manifest next update: Sun 27 Jul 2025 20:00:26 +0000
Files and hashes: 1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: 4vPamN+n8XS0ikWG4scTtvNpEuAbJO9gx1eSInjL2cg=)
2: aZp_-IqiVFoAaaD08gi82AqrlBM.roa (hash: xAjdvDvJZRM8tEfeaFE3V9XsMT9Nsdi0raaN7LzCKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:8d:b0:87:de:d5:01:49:7f:07:76:f6:3c:50:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jul 26 20:00:26 2025 GMT
Not After : Jul 27 20:00:26 2025 GMT
Subject: CN=407d56f79540a93de66d3594f9ba13137c7b0101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:45:87:73:da:62:43:98:d1:79:76:fd:8d:
f2:b4:9a:89:8a:2b:f4:c0:8c:a1:64:b7:fa:93:fd:
6f:3d:07:20:c3:e9:ec:fd:8e:52:a1:57:85:ee:2e:
1d:29:b9:01:2e:ec:9e:43:ef:cb:c3:60:9f:77:f5:
a4:52:4c:bd:1d:79:10:1e:29:40:51:fa:16:7d:4a:
a3:9e:bc:9b:1a:c8:66:1d:ec:a9:09:24:a3:76:c4:
e5:ac:3c:9e:3e:18:c1:87:61:fc:f5:aa:b8:42:9d:
29:4e:bc:03:8b:eb:a1:50:03:66:c1:7a:72:a7:3d:
e8:fb:b7:62:8e:a7:09:1d:d1:b3:95:8f:55:a9:5d:
5c:b1:46:72:c5:e1:e3:8d:34:f1:6f:59:b2:82:15:
b9:d8:42:c6:e9:48:1b:6a:ee:d4:1f:68:34:ad:9a:
15:aa:be:c1:e3:cb:f3:b5:4a:42:5e:37:52:a7:3a:
92:60:7b:6b:b1:a9:de:86:92:e8:ea:fa:fd:2f:ff:
cf:fe:4f:99:52:65:c4:8a:42:d9:2e:51:71:64:2a:
19:66:e1:b8:e4:71:17:1c:38:5c:c0:e2:09:03:e5:
62:5a:16:1f:3a:23:ef:91:64:09:b7:eb:5f:8c:f7:
53:11:da:11:32:5c:25:bd:e7:3f:0e:2d:ee:61:08:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:56:F7:95:40:A9:3D:E6:6D:35:94:F9:BA:13:13:7C:7B:01:01
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:00:ab:e1:fe:3a:0c:2f:f4:cb:d6:0b:b1:4a:93:bb:ac:
78:12:32:28:ba:12:e1:44:f3:92:e7:9a:02:11:50:14:b5:cd:
74:bd:1a:7b:3e:96:0e:be:83:75:43:52:15:17:bc:65:42:ef:
84:bf:07:44:05:8a:50:04:5e:18:a7:ef:68:44:72:66:81:af:
e4:7e:b2:77:f9:58:89:e7:a3:fa:f6:1a:99:0f:28:90:98:bc:
f0:0c:b5:74:64:0a:42:05:b2:7f:63:b5:41:29:69:05:11:21:
67:96:12:13:33:f4:12:53:d8:2e:77:bc:e9:e9:86:73:d1:5d:
8d:0d:b2:70:7a:4c:68:8f:3f:c9:8e:f4:2d:12:a2:32:cd:20:
18:12:39:ae:20:79:74:a6:f1:eb:d4:76:b9:ac:94:f1:82:87:
7f:ec:e8:5f:95:28:5e:9e:f8:81:66:ed:68:6a:4d:e7:89:b9:
70:76:ce:d0:98:80:cb:d3:16:58:c0:e9:f8:3c:06:a2:09:e8:
c4:2d:e6:83:c3:83:09:ae:97:87:09:c8:b2:fd:ad:7a:9c:85:
01:9c:a3:68:ec:a1:a1:7f:9e:fc:c3:9d:86:f8:6d:66:74:68:
b1:7a:a3:04:fa:7c:de:c3:7b:73:99:dd:8a:00:ff:f6:ec:16:
13:41:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:21 2025 by rpki-client