Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: r3kyhLR9Nx9PExOXVwjgPc8TV9Oi+yGFcUH6bfbDh90=
Subject key identifier: 3A:EC:CF:A4:69:C1:3A:48:56:C7:5B:90:E0:38:10:3D:2C:A4:2A:CC
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 019A71EED000E4EDF7149350421E605835B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 1446
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: aeqkrHL7sffJGGiY519n/+SQS8luRFNHCQaXOUmy9so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d0:00:e4:ed:f7:14:93:50:42:1e:60:58:35:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=3aeccfa469c13a4856c75b90e038103d2ca42acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:7e:22:c9:96:57:fe:f0:b4:90:21:ff:70:
aa:6a:15:0a:96:08:11:c3:57:92:e9:86:f1:14:60:
a6:a2:3a:d1:86:b6:14:8a:f4:01:ce:93:19:16:58:
36:99:2c:ed:10:f6:70:4f:60:2a:cd:07:76:23:01:
32:f3:3b:e0:fe:bf:c6:6a:5a:8c:2a:a7:0f:4c:6d:
fd:b7:43:15:26:c9:88:f4:78:91:bd:52:9a:78:6a:
78:14:0f:42:f5:53:fa:b2:29:2e:1e:e3:2e:e9:a5:
80:87:eb:0d:3e:3c:6f:f5:35:75:2e:4a:27:3d:fa:
25:83:5a:99:78:0f:81:4f:0b:e1:12:72:11:a9:37:
f8:79:e7:17:c5:55:8f:6d:9f:d0:a1:51:4b:5e:13:
4c:31:f1:2e:ff:89:33:0b:4d:3c:19:3a:aa:82:19:
cb:6a:9a:b3:75:27:9e:27:5c:76:0e:98:78:f1:1d:
cd:15:dc:21:34:94:db:11:24:9e:b7:46:80:0c:1c:
c0:9f:33:9f:6c:d3:a8:bc:8c:52:d7:e7:e3:cb:5d:
4b:bb:dc:ae:6d:3c:47:d6:c3:ae:4e:d4:a9:40:2b:
7a:67:2d:da:47:8b:8e:d3:e8:92:f6:96:6d:cf:b5:
0e:d1:32:77:53:73:a8:ea:39:37:30:93:67:50:44:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:CF:A4:69:C1:3A:48:56:C7:5B:90:E0:38:10:3D:2C:A4:2A:CC
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:63:df:f0:55:f9:6a:f2:88:5a:f6:7b:0d:54:77:54:1b:
ff:a0:c7:6f:ed:bd:4b:29:4f:cc:4f:de:7a:bd:a8:49:76:b2:
b0:d9:4b:26:d1:8f:7e:6d:bb:c1:71:84:bb:d7:0b:a6:24:03:
ff:fe:81:10:91:54:a3:c5:c9:05:15:90:8f:d8:db:9f:1b:c1:
0f:f2:4b:76:b6:a8:76:15:06:93:2a:63:e0:a1:ae:7d:12:cc:
b8:f9:45:c4:ac:d0:49:39:4d:88:e5:37:88:21:5e:67:87:ff:
d0:9b:e7:99:d3:43:1b:cf:5b:98:40:e0:f4:e9:04:81:2c:ba:
d1:20:b7:0f:43:26:d0:b0:5b:ec:90:a7:61:dd:07:f4:99:20:
76:21:b0:4f:39:15:2c:76:72:92:75:1c:5d:5b:19:18:08:61:
41:2f:3f:0c:ee:71:f8:4a:20:36:9d:c6:8f:00:88:dd:19:b4:
1f:b0:cb:48:8b:db:5c:9a:1b:e4:11:61:6e:0a:c7:59:27:19:
91:58:8f:d2:1a:d3:b4:26:8a:5e:87:1a:d3:03:79:f4:43:bd:
74:d4:5c:02:94:fa:01:1a:d0:84:76:e7:7e:64:32:26:cc:a2:
2f:5f:b5:58:bf:8d:e5:52:4a:fb:73:ce:df:86:12:87:78:ac:
e8:01:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:15 2025 by rpki-client