Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: IVbCdYcHcOSpI1kGYyhCc4WELYnjDOYyvz1RPkAXxfc=
Subject key identifier: A8:06:6D:34:D6:53:87:29:D1:E3:E4:C7:72:54:2C:FD:42:75:B7:00
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0199380256CE1F7509A2E3DEA004B2CF4FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 09:01:41 +0000
Manifest this update: Thu 11 Sep 2025 09:01:41 +0000
Manifest next update: Fri 12 Sep 2025 09:01:41 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: aD6QxdKmkwXILHz7BreHCwTD0HiaB6yemfkzQl5Cj9k=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:56:ce:1f:75:09:a2:e3:de:a0:04:b2:cf:4f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Sep 11 09:01:41 2025 GMT
Not After : Sep 12 09:01:41 2025 GMT
Subject: CN=a8066d34d6538729d1e3e4c772542cfd4275b700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:59:71:2b:fc:78:dd:05:68:dc:8b:b7:14:
9e:a1:79:62:8b:96:ea:09:af:b5:59:87:f1:92:e4:
31:ca:fe:3f:0a:ec:33:d3:5c:82:f1:f9:7c:ff:76:
b0:cd:8e:b9:67:6c:73:cd:42:c7:bc:e9:3f:10:fc:
02:f1:71:56:15:cd:f1:d2:1b:e9:12:6f:fa:3f:57:
38:88:5f:a5:b9:80:20:1f:36:93:40:0f:8a:14:e9:
fb:15:80:79:aa:07:17:09:b5:42:90:62:51:82:a8:
b9:5f:9f:23:b0:84:53:f2:61:dd:31:2f:da:92:d9:
3a:a2:e2:c3:7f:f6:88:be:1d:ac:9d:77:48:1e:69:
e7:30:4d:8d:1a:59:7c:26:63:e1:0e:82:b1:70:5e:
c8:fa:7c:ae:df:45:66:4e:7e:7f:08:d3:f7:d9:f0:
05:33:45:d0:d6:0d:5d:69:d3:52:f3:bf:b6:43:e2:
df:97:18:53:99:56:b2:d3:5d:4b:71:40:28:c1:dd:
63:40:89:c9:26:0f:25:e2:d9:80:7e:cd:1c:12:3f:
68:02:89:94:56:ef:e2:39:1c:bb:18:d1:c6:34:61:
4f:ae:53:c3:5c:3a:ab:ae:21:32:5c:f5:d6:7c:56:
aa:68:e9:39:fa:54:c9:d9:c8:f7:e7:24:73:8c:67:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:6D:34:D6:53:87:29:D1:E3:E4:C7:72:54:2C:FD:42:75:B7:00
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:54:05:22:7e:63:0f:3a:88:5a:e8:8b:22:b6:5e:20:7d:04:
aa:75:cc:8e:da:f5:19:9a:e8:54:2e:91:5a:bd:b7:b0:80:23:
14:0c:e4:7f:d7:64:57:c2:03:fa:11:4f:a4:8a:7c:71:f5:29:
90:af:e1:3f:67:fc:42:81:ac:c0:17:2f:69:a1:5e:02:cf:b7:
6e:33:61:5d:0b:97:99:75:a5:7d:21:15:fb:3a:07:9d:c9:69:
ba:42:e9:8a:23:a7:2d:1a:fe:e2:b5:32:0f:9f:88:9c:25:f0:
50:d4:f1:b5:13:52:3d:a2:ab:5d:a0:f9:ce:93:1d:2c:cd:3f:
8b:f3:ad:fa:15:fc:b6:0d:60:ae:aa:bf:27:56:5f:d6:b3:e5:
fc:da:30:9f:0a:73:a2:a5:0e:d8:61:ee:46:38:35:ef:2b:f5:
e9:a0:33:8b:8e:56:72:e8:ca:04:95:34:76:10:33:be:9d:e5:
1c:b4:10:e8:3e:6d:f4:d4:02:c0:ef:c7:8a:7f:e1:91:5f:09:
34:1d:ec:f4:00:38:a5:96:23:e5:19:3e:58:67:b8:b5:c8:bd:
e2:97:19:0e:03:32:7e:e5:69:04:dd:9a:da:2f:b9:34:bc:75:
da:b3:44:c0:06:3b:97:67:39:01:9b:a5:eb:16:f7:64:4d:10:
26:70:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:56:48 2025 by rpki-client