Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: xyS9eMZAxsFGJZxLtPTNN5JDTPyNIUfBEw63gjmWVo8=
Subject key identifier: 95:86:F9:04:42:4A:8C:6D:F2:E6:60:E4:7B:8A:BC:4A:95:81:79:1B
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 019921B276BAE4267613047478ABF2BFDC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0976
Signing time: Sun 07 Sep 2025 01:02:47 +0000
Manifest this update: Sun 07 Sep 2025 01:02:47 +0000
Manifest next update: Mon 08 Sep 2025 01:02:47 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: ZuvN/QmQm6mmlnRKL5kgS5YzIL+0GEyJXaw02+ySR60=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:76:ba:e4:26:76:13:04:74:78:ab:f2:bf:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Sep 7 01:02:47 2025 GMT
Not After : Sep 8 01:02:47 2025 GMT
Subject: CN=9586f904424a8c6df2e660e47b8abc4a9581791b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:ac:a9:8f:d9:7d:7b:45:95:9c:1f:1e:3f:
5a:93:6b:a6:8a:29:54:5e:7a:56:44:30:c2:3d:88:
d8:b0:f4:56:3e:53:0c:88:dc:59:f0:0b:56:43:cc:
98:a9:97:9b:a6:ad:62:db:55:4a:d2:3f:21:d7:da:
ca:f5:f8:42:26:73:fc:e6:a3:39:79:9b:b3:18:94:
0a:de:c2:2d:27:43:dd:c9:19:3a:c1:23:74:67:8c:
14:19:dc:4e:58:bc:b8:e6:9a:67:da:bf:cc:e1:4a:
65:87:7b:80:44:06:b8:d1:01:d4:3a:35:17:96:27:
0d:7a:34:bb:a0:02:b6:54:73:49:da:e6:c1:f9:47:
c9:c6:a8:1e:16:aa:ad:19:f3:9c:8e:86:ca:a5:31:
f7:92:c2:49:88:5a:27:8d:62:16:05:07:96:b1:a8:
b9:c9:8d:bc:40:e7:48:9a:42:cd:f4:4f:e9:aa:1f:
e8:a5:0a:51:e6:17:03:c0:26:68:f1:b2:57:f7:f3:
2a:af:6f:60:31:65:77:c6:25:ae:3c:30:52:4c:fa:
6d:da:c1:77:cd:d1:0a:e6:07:8c:62:18:c6:76:4e:
3a:ec:e9:29:6b:43:61:fb:46:45:3f:a9:75:f8:68:
7d:6c:a0:34:dc:61:c9:e0:a8:88:21:f9:45:cc:d8:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:F9:04:42:4A:8C:6D:F2:E6:60:E4:7B:8A:BC:4A:95:81:79:1B
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e2:f7:2a:03:24:f6:cd:19:95:7f:9c:36:94:30:a9:2b:13:
4a:53:6d:00:43:71:99:0c:68:60:e5:03:65:ad:66:01:37:32:
74:14:f0:e2:f1:5a:70:ef:d9:8a:c4:0c:3b:15:d4:c6:77:79:
07:a3:44:a5:1c:f6:5b:f2:6f:14:3b:25:00:be:87:37:0b:c2:
9d:a6:3b:6f:4e:03:b9:e9:dd:e2:cd:40:5f:0e:ba:13:b1:24:
0f:22:66:22:52:a7:4e:ff:5c:16:62:83:c6:d8:0d:35:fb:bf:
63:10:39:ee:13:56:2e:a1:d7:66:30:27:bc:a8:d6:1b:1f:6a:
40:15:84:81:e2:4f:63:5c:dd:33:37:b2:c0:84:12:1d:0c:38:
f5:c9:48:8c:61:d2:3f:f1:9d:4f:0c:aa:cd:50:8a:a4:34:35:
9e:21:11:f7:2a:f5:a9:69:43:39:b2:f4:db:6a:ff:a0:34:c8:
40:da:14:26:a1:1c:dc:af:f5:eb:53:37:35:55:d2:08:b6:48:
3b:74:85:17:29:aa:6b:1b:d8:20:d2:c5:d1:15:0c:a5:23:a9:
f2:6f:c5:65:fb:d2:ec:73:f7:54:7a:a1:be:63:e1:e9:86:24:
b8:9d:c8:c1:7d:3c:2c:61:07:54:ad:13:e4:5c:9d:44:16:aa:
72:b7:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:54 2025 by rpki-client