Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: TbC0486f1Ab9V3uP6jEs5Qhgrydn0RWd4/C+fYp5k3g=
Subject key identifier: 18:38:8B:EB:4E:42:AE:17:6A:23:3F:BB:46:83:88:D4:60:99:C5:64
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 01992CA20D7276862410B8A6E64F24D14F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1675
Signing time: Tue 09 Sep 2025 04:00:41 +0000
Manifest this update: Tue 09 Sep 2025 04:00:41 +0000
Manifest next update: Wed 10 Sep 2025 04:00:41 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: 8A4K8NK61b90Xgny+7NXBqOghnoCkjA6tvGaqwaKsWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:0d:72:76:86:24:10:b8:a6:e6:4f:24:d1:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Sep 9 04:00:41 2025 GMT
Not After : Sep 10 04:00:41 2025 GMT
Subject: CN=18388beb4e42ae176a233fbb468388d46099c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:65:35:84:8f:60:36:43:45:03:2a:a7:3e:
2f:a2:62:3f:6b:8d:48:18:d3:0d:2b:7e:56:14:8a:
0a:09:aa:da:17:40:61:9e:18:22:c0:37:49:50:18:
28:25:99:8c:63:af:8d:54:45:02:ba:96:67:40:89:
0c:d4:81:c2:5a:d0:23:22:1d:3a:90:8c:72:c5:58:
81:db:02:7e:a3:b9:57:67:81:ce:a2:ec:fa:83:ed:
61:ea:10:75:71:b4:36:8c:81:cf:32:71:25:df:a8:
7a:ab:c4:d9:1c:3f:3c:3a:b6:91:18:69:45:9a:f5:
d2:ed:d6:ad:d3:13:7f:8b:70:ac:93:0a:f2:79:05:
87:07:2a:84:aa:a4:8d:b0:33:dc:4e:70:df:58:d5:
b1:3f:f0:e1:da:ec:e6:fb:84:5a:16:50:78:45:fb:
9d:d3:47:73:bb:ee:5d:7c:e4:51:4d:e8:22:2a:3a:
29:fd:62:72:b1:48:ba:54:0a:6a:af:49:fe:40:ae:
10:29:fc:c7:88:75:c9:67:c7:13:07:09:1e:2d:6a:
32:66:54:c4:46:fa:a3:48:cb:07:0d:06:0e:f8:f5:
e8:47:fc:37:6b:08:a3:7f:04:10:3b:78:e9:0a:9a:
3c:3e:6e:1d:e7:3d:ba:ef:81:6d:00:2c:fa:fb:4f:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:8B:EB:4E:42:AE:17:6A:23:3F:BB:46:83:88:D4:60:99:C5:64
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:21:e2:85:f2:0d:74:9c:86:77:e4:0a:bf:0c:56:f7:73:35:
b3:20:b3:3c:ec:45:54:eb:a7:cc:83:92:15:99:5b:fa:b2:f3:
8d:ae:f1:3b:c4:1e:e9:01:57:bd:fc:08:e1:a6:c9:cf:75:cf:
aa:1c:ad:a0:6e:1b:0f:a7:1e:f4:3d:0b:1f:eb:71:1d:91:ee:
97:45:35:e0:89:7d:bf:34:4c:ce:b0:cd:bd:4e:34:1a:16:7c:
ef:d4:3c:37:4b:4e:e7:af:2f:54:91:cc:8a:89:8c:17:0b:00:
36:37:14:bf:30:e1:fd:80:23:ca:6f:e7:6f:87:c5:81:44:2e:
f8:b6:fe:78:5d:0c:7f:f9:fd:80:66:c6:cb:c2:0c:d4:af:cc:
47:6f:ea:58:7b:5b:bf:8d:96:17:fe:82:f0:4f:5b:7c:bd:50:
22:18:7d:e3:06:96:ba:59:e9:06:a0:9d:50:25:44:13:9b:0a:
89:72:93:53:76:17:48:73:c3:48:6a:cf:c8:bc:08:91:4d:4f:
b4:d2:98:ee:b4:7c:67:a4:61:c6:71:67:e8:b1:b5:a5:03:05:
6b:27:0e:e4:a9:20:bc:fa:80:28:d2:80:2b:47:c2:e7:6f:8e:
28:ca:e2:2b:19:d4:cf:3a:12:53:47:ba:18:77:12:22:df:63:
b4:7c:c8:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksog1ydoYkELim5k8k0U8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi
YTNlMzgwHhcNMjUwOTA5MDQwMDQxWhcNMjUwOTEwMDQwMDQxWjAzMTEwLwYDVQQD
EygxODM4OGJlYjRlNDJhZTE3NmEyMzNmYmI0NjgzODhkNDYwOTljNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQdlNYSPYDZDRQMqpz4vomI/a41I
GNMNK35WFIoKCaraF0BhnhgiwDdJUBgoJZmMY6+NVEUCupZnQIkM1IHCWtAjIh06
kIxyxViB2wJ+o7lXZ4HOouz6g+1h6hB1cbQ2jIHPMnEl36h6q8TZHD88OraRGGlF
mvXS7dat0xN/i3CskwryeQWHByqEqqSNsDPcTnDfWNWxP/Dh2uzm+4RaFlB4Rfud
00dzu+5dfORRTegiKjop/WJysUi6VApqr0n+QK4QKfzHiHXJZ8cTBwkeLWoyZlTE
RvqjSMsHDQYO+PXoR/w3awijfwQQO3jpCpo8Pm4d5z2674FtACz6+0/GvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg4i+tOQq4XaiM/u0aDiNRgmcVkMB8GA1UdIwQY
MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt
MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2
LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyHihfIN
dJyGd+QKvwxW93M1syCzPOxFVOunzIOSFZlb+rLzja7xO8Qe6QFXvfwI4abJz3XP
qhytoG4bD6ce9D0LH+txHZHul0U14Il9vzRMzrDNvU40GhZ879Q8N0tO568vVJHM
iomMFwsANjcUvzDh/YAjym/nb4fFgUQu+Lb+eF0Mf/n9gGbGy8IM1K/MR2/qWHtb
v42WF/6C8E9bfL1QIhh94waWulnpBqCdUCVEE5sKiXKTU3YXSHPDSGrPyLwIkU1P
tNKY7rR8Z6RhxnFn6LG1pQMFaycO5KkgvPqAKNKAK0fC52+OKMriKxnUzzoSU0e6
GHcSIt9jtHzICw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:38:36 2025 by rpki-client