Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: rNsC1rfOIKMBcbHpTVjMRXuNfjL/VmBUWSoGFCLrrCo=
Subject key identifier: 97:95:F2:B4:69:FB:F3:17:5D:E9:AD:E1:30:11:16:ED:48:EE:05:1E
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 019897EF1C2539DDBDF4399D199F1B185BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 04E7
Signing time: Mon 11 Aug 2025 07:01:26 +0000
Manifest this update: Mon 11 Aug 2025 07:01:26 +0000
Manifest next update: Tue 12 Aug 2025 07:01:26 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: 0sQmDOPS91Q3XxaOXZNil+v+mgZpX6FVpAjjvhVCKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ef:1c:25:39:dd:bd:f4:39:9d:19:9f:1b:18:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: Aug 11 07:01:26 2025 GMT
Not After : Aug 12 07:01:26 2025 GMT
Subject: CN=9795f2b469fbf3175de9ade1301116ed48ee051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:98:b0:3a:00:3d:bd:20:41:00:b4:b3:ce:
f7:26:30:10:5d:57:eb:dd:72:ed:18:fe:54:c4:71:
72:3e:09:53:0e:c8:58:50:b5:30:83:b7:86:62:a8:
5a:7d:ae:22:83:08:fc:37:a8:81:38:3a:8f:30:ee:
42:4d:da:25:85:67:f1:21:e7:59:58:38:aa:6f:4e:
dc:0b:b0:fc:e4:b7:58:04:38:49:0a:9a:26:2f:a4:
81:3d:01:e0:16:a8:4c:8f:86:81:98:95:31:3a:83:
89:7d:55:7e:b9:93:3c:60:63:c0:cc:0a:63:2a:51:
db:59:55:78:54:9f:f4:a3:26:61:e0:91:5e:42:83:
4a:36:f9:d2:cf:6d:d4:83:bf:8b:8a:a6:8b:6a:3d:
4a:9f:17:53:dd:72:83:39:eb:52:80:5b:cf:54:26:
6d:a2:7b:ed:33:bd:41:fb:3b:34:64:b9:d4:e3:d2:
4f:a4:b5:1a:8b:6c:5c:6c:87:52:be:a7:47:c8:15:
a0:99:f0:74:d8:94:7d:dd:7c:f5:51:08:cc:3c:f2:
10:ae:90:69:d0:c1:f8:a7:8a:89:75:5c:ce:95:8a:
7d:1f:38:d0:62:f0:16:24:7f:ff:fc:41:b0:29:28:
29:db:73:d9:fd:f9:6b:9f:46:09:5b:d5:17:92:57:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:F2:B4:69:FB:F3:17:5D:E9:AD:E1:30:11:16:ED:48:EE:05:1E
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:18:57:9f:d2:6b:c3:27:05:41:dc:b9:f7:84:99:bb:14:96:
8e:22:bb:dc:9a:79:75:20:df:c1:5d:29:ee:95:ad:0e:c6:81:
80:97:61:fe:88:86:8f:40:7f:d3:6d:24:75:04:2f:29:03:c0:
b1:d6:36:18:96:ae:80:30:af:25:df:85:2d:96:f4:c9:01:7c:
e2:4f:91:a2:ae:57:b2:46:4e:e7:42:6b:c8:0f:56:02:ac:05:
1a:d9:67:1c:1a:cd:09:33:51:b1:5f:99:9b:38:f8:8a:bd:f3:
45:e6:38:f4:8a:5c:60:16:15:9c:11:35:dd:a5:92:a5:47:12:
5d:63:5c:31:66:38:7a:f5:8d:d9:04:1a:94:e2:31:39:fa:63:
69:da:fa:6e:89:94:ab:37:bb:72:88:c4:80:cc:98:a7:75:fa:
32:0c:44:ca:d9:b1:21:bf:04:21:c4:39:97:41:17:bb:d0:79:
85:d4:a0:9e:63:c9:25:db:d7:ab:85:d2:b0:df:c8:09:70:93:
2d:51:d4:bc:a2:28:36:3a:98:7f:15:c8:e2:bc:91:84:8e:6a:
1e:b4:56:d3:30:65:79:2e:ca:bb:5d:a0:d9:8e:be:c6:e8:59:
fe:50:aa:4d:f9:f7:e1:7c:26:96:d7:2f:29:3e:0f:a3:9c:7b:
1b:c0:60:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiX7xwlOd299DmdGZ8bGFvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFlOWYyM2VlYWNhNjhjNzIxY2JlNDI4MDYxMDBiNzVl
MTU3NzAwHhcNMjUwODExMDcwMTI2WhcNMjUwODEyMDcwMTI2WjAzMTEwLwYDVQQD
Eyg5Nzk1ZjJiNDY5ZmJmMzE3NWRlOWFkZTEzMDExMTZlZDQ4ZWUwNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIGYsDoAPb0gQQC0s873JjAQXVfr
3XLtGP5UxHFyPglTDshYULUwg7eGYqhafa4igwj8N6iBODqPMO5CTdolhWfxIedZ
WDiqb07cC7D85LdYBDhJCpomL6SBPQHgFqhMj4aBmJUxOoOJfVV+uZM8YGPAzApj
KlHbWVV4VJ/0oyZh4JFeQoNKNvnSz23Ug7+LiqaLaj1KnxdT3XKDOetSgFvPVCZt
onvtM71B+zs0ZLnU49JPpLUai2xcbIdSvqdHyBWgmfB02JR93Xz1UQjMPPIQrpBp
0MH4p4qJdVzOlYp9HzjQYvAWJH///EGwKSgp23PZ/flrn0YJW9UXklfTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeV8rRp+/MXXemt4TARFu1I7gUeMB8GA1UdIwQY
MBaAFExx6fI+6spoxyHL5CgGEAt14VdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEt
YzliN2ViMmNlYTU3LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEtYzliN2ViMmNlYTU3
LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhhXn9Jr
wycFQdy594SZuxSWjiK73Jp5dSDfwV0p7pWtDsaBgJdh/oiGj0B/020kdQQvKQPA
sdY2GJaugDCvJd+FLZb0yQF84k+Roq5XskZO50JryA9WAqwFGtlnHBrNCTNRsV+Z
mzj4ir3zReY49IpcYBYVnBE13aWSpUcSXWNcMWY4evWN2QQalOIxOfpjadr6bomU
qze7cojEgMyYp3X6MgxEytmxIb8EIcQ5l0EXu9B5hdSgnmPJJdvXq4XSsN/ICXCT
LVHUvKIoNjqYfxXI4ryRhI5qHrRW0zBleS7Ku12g2Y6+xuhZ/lCqTfn34Xwmltcv
KT4Po5x7G8BgSQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:25 2025 by rpki-client