Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: Rh/t8cdZH0bwHKGPORYCLsI81iTB0o7bBZITgHRHDtY=
Subject key identifier: 87:BC:04:68:99:B0:26:FA:1E:5E:9B:8C:C8:96:BD:79:03:D7:E1:CE
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0198469B41404DF1B4D798B006CBBF1AD546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 12:00:36 +0000
Manifest this update: Sat 26 Jul 2025 12:00:36 +0000
Manifest next update: Sun 27 Jul 2025 12:00:36 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: gYH8belj4kRZpx/MPvjxibM3ytCzy62treSVvq+B8pM=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:41:40:4d:f1:b4:d7:98:b0:06:cb:bf:1a:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jul 26 12:00:36 2025 GMT
Not After : Jul 27 12:00:36 2025 GMT
Subject: CN=87bc046899b026fa1e5e9b8cc896bd7903d7e1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:a4:5a:ee:2c:b7:39:2c:6b:e4:53:75:28:
7d:24:74:e1:52:dd:bf:66:f8:32:3b:99:77:d1:f0:
77:e4:98:e6:e1:56:31:f6:e7:17:29:6c:7e:f1:d2:
2a:04:58:ad:b6:67:9a:f4:5c:c8:5c:47:9f:4d:c7:
2b:4f:f1:7e:f0:ba:d8:ce:33:de:49:4e:aa:b3:ec:
12:7d:8f:18:2b:44:52:39:d1:6d:62:d7:53:4a:94:
e8:62:aa:b8:7f:fe:5f:f0:5d:27:05:48:dd:9a:f8:
3a:f8:5e:56:7f:12:2c:12:fc:07:00:0d:9b:8e:1e:
3c:de:ff:9b:26:84:08:22:9f:ab:8c:24:09:90:e9:
9d:1e:ef:54:71:d8:26:11:95:39:53:6a:fa:60:df:
c7:24:7d:c0:d9:25:b6:1b:c7:1f:f7:4b:a5:ee:0a:
87:4f:60:50:08:6f:4c:15:a5:8e:e7:18:07:2a:53:
53:51:ad:fb:af:9f:b2:d6:df:21:52:9d:87:34:0d:
8c:2a:06:1d:ee:75:d4:f1:bd:11:4b:f9:18:99:02:
63:c6:42:e9:cb:db:e6:e6:2d:98:31:4d:7a:cc:2b:
1a:36:a3:7c:01:16:2f:0d:f9:95:03:54:3b:fb:a2:
59:51:ed:20:67:8d:27:18:68:33:3a:ec:a0:ba:78:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:04:68:99:B0:26:FA:1E:5E:9B:8C:C8:96:BD:79:03:D7:E1:CE
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:95:2d:39:b8:fc:ef:63:66:79:57:fb:cc:06:4a:4b:f0:
27:b3:37:55:9e:4e:d0:95:d6:18:a7:39:fe:da:7a:86:d2:79:
c9:a5:31:b0:2e:40:ed:9e:bf:1b:6c:db:c0:07:ca:9d:43:1d:
bf:0b:19:77:82:3f:6f:b7:16:76:b1:71:e7:99:77:7d:40:27:
b5:46:8e:b7:43:67:07:bb:87:5d:9c:d0:b4:83:0e:2f:d8:56:
a8:88:37:d9:88:56:cd:ca:80:08:06:63:9a:43:07:7a:5d:33:
47:01:45:50:44:4b:e5:69:e0:9b:4c:ad:54:f0:05:b0:f3:22:
90:a5:10:85:7e:8b:0a:ba:02:a3:a5:ff:f9:85:82:ab:46:ba:
9d:0f:ab:69:5e:00:dc:9a:29:91:7e:f5:f2:32:f2:bc:58:76:
c2:b4:d1:f4:82:e4:aa:6e:4e:20:80:ad:c0:67:ea:27:88:16:
bb:fd:ac:23:63:22:7a:92:d0:48:b2:2b:97:93:04:04:84:2a:
1d:50:0d:08:48:42:c4:9f:69:4e:c1:bb:48:a9:1c:df:12:95:
5d:92:f9:4e:34:c5:0b:c4:0e:89:f7:40:f5:fd:20:bf:b5:7f:
b7:f2:d3:3c:fc:ac:7f:fe:bc:07:93:71:97:fa:d8:38:0f:c6:
7b:78:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:24 2025 by rpki-client