Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File: THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier: Y8Ar6KBIlku38O26Te5TA1gY0eu8NcRH43bvcKEGIug=
Subject key identifier: 05:FE:DD:DC:27:79:FC:D6:E2:BA:B1:1C:2B:C4:2C:D8:DF:39:37:20
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 019A2741F660D74173566DCD2E344D8D0CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number: 0B92
Signing time: Mon 27 Oct 2025 20:00:25 +0000
Manifest this update: Mon 27 Oct 2025 20:00:25 +0000
Manifest next update: Tue 28 Oct 2025 20:00:25 +0000
Files and hashes: 1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: Jy88Oflx3+HWVR/6o2b9hzsJlCChuM2EhH52fkWjqs0=)
2: aZp_-IqiVFoAaaD08gi82AqrlBM.roa (hash: xAjdvDvJZRM8tEfeaFE3V9XsMT9Nsdi0raaN7LzCKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:f6:60:d7:41:73:56:6d:cd:2e:34:4d:8d:0c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Oct 27 20:00:25 2025 GMT
Not After : Oct 28 20:00:25 2025 GMT
Subject: CN=05fedddc2779fcd6e2bab11c2bc42cd8df393720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:ba:03:be:f8:67:b3:b5:d8:0c:e2:dd:9c:
38:2b:45:76:67:ac:49:8d:d1:2c:48:00:66:82:5b:
b2:26:d9:03:c2:06:1a:5a:28:42:e5:a9:aa:ef:91:
cd:1b:f6:47:64:c3:9a:59:ab:80:64:a1:14:56:bb:
20:56:f9:41:c2:cb:db:10:0e:66:25:95:95:73:c9:
72:cb:f8:57:0a:9b:1e:a4:73:3f:4f:65:49:2c:5b:
a7:f0:67:a0:97:f4:4f:df:00:b9:56:20:5b:15:3d:
cb:23:75:2d:ec:d9:53:0c:18:86:7a:99:5c:88:25:
39:d3:bc:2e:19:1a:57:07:4c:e3:59:fb:81:a2:61:
fa:13:b8:80:af:f6:8c:dc:dd:9f:88:5a:7c:cb:b5:
0a:b7:6f:b3:c2:9a:6f:1f:6b:ec:58:fd:d9:95:1f:
90:bc:63:82:01:bd:8c:a1:e7:7e:e5:76:2f:e5:4d:
43:05:07:e9:09:98:39:bd:bc:8a:0b:05:17:9a:52:
0b:31:5f:f1:c0:5f:f4:0f:59:1d:ce:dc:82:6f:f7:
1c:92:75:af:9a:5a:27:fe:b2:d7:94:1e:29:fc:86:
9d:e6:f4:65:80:4e:77:11:5e:c5:fd:80:59:61:4a:
2c:b9:dd:ae:76:12:94:b3:ed:d5:87:5b:e9:9c:32:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:DD:DC:27:79:FC:D6:E2:BA:B1:1C:2B:C4:2C:D8:DF:39:37:20
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:7a:42:b1:ab:b0:77:8b:e5:87:42:5c:7c:37:c9:72:35:
53:df:da:01:53:eb:48:0c:24:5e:3d:cf:61:f9:06:56:3b:f7:
27:45:d3:28:81:e2:d6:84:62:35:d9:40:45:a4:e9:0a:02:5f:
18:05:51:8c:a5:57:ab:cb:b7:b7:8c:e2:29:29:06:ac:12:a6:
02:8c:12:fe:ad:33:49:c2:57:ab:95:f2:3c:fe:6b:cc:57:d2:
e0:a5:81:9f:16:d3:44:90:37:b6:ba:16:9f:11:a1:f7:1f:db:
34:eb:28:b2:f8:df:da:2e:a6:96:9a:4c:44:31:22:d8:06:00:
64:c1:88:58:45:ca:cf:a0:ee:55:24:d1:06:ff:e7:da:46:69:
e9:45:24:75:fd:2a:ef:20:7c:a2:db:7b:13:27:54:b4:af:ab:
70:f1:76:79:5a:d9:3e:54:c4:25:cd:a9:31:b2:89:99:7c:f9:
96:eb:c8:38:0c:92:90:db:12:21:1c:d1:79:c5:26:d9:d7:9b:
8c:ce:3d:cf:ee:e5:39:e7:db:33:9f:ed:1d:99:93:df:da:80:
8d:c7:30:37:0e:af:ea:b4:5d:12:52:5d:9d:d4:00:3e:d6:75:
31:ef:8b:e6:f1:dd:82:49:ee:ee:bd:ea:a7:1c:6b:e7:ec:5c:
3c:16:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:10:14 2025 by rpki-client