Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File: THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier: JpelLLMzxWTEtmqNg1LPRIux0sk4gxHwEEcYNR098PI=
Subject key identifier: 5E:2D:81:CC:41:CD:08:21:E1:3B:37:CE:26:FD:10:6A:0C:34:8C:2C
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 01976C2B61B820908D7C57B303AFC7F08B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number: 0A28
Signing time: Sat 14 Jun 2025 02:01:11 +0000
Manifest this update: Sat 14 Jun 2025 02:01:11 +0000
Manifest next update: Sun 15 Jun 2025 02:01:11 +0000
Files and hashes: 1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: BZ4yoVmjs9Ct1wqRJb7QK3twiM2nP8Qd12gjoMyaFV0=)
2: aZp_-IqiVFoAaaD08gi82AqrlBM.roa (hash: xAjdvDvJZRM8tEfeaFE3V9XsMT9Nsdi0raaN7LzCKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:61:b8:20:90:8d:7c:57:b3:03:af:c7:f0:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jun 14 02:01:11 2025 GMT
Not After : Jun 15 02:01:11 2025 GMT
Subject: CN=5e2d81cc41cd0821e13b37ce26fd106a0c348c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bb:d2:4e:23:46:a5:07:68:ba:1d:8d:bb:b4:
fd:d8:1c:31:d4:4a:f5:19:7a:3d:68:9d:98:97:68:
2f:82:77:a9:b4:1f:61:49:9d:44:93:aa:e0:5a:29:
6a:ef:9a:54:b7:cb:fe:13:95:99:d8:e9:3c:53:f2:
25:c1:0e:a1:5a:98:25:5c:45:a6:38:1d:56:98:69:
27:c0:04:b2:a4:01:d1:db:ae:6e:55:02:9f:f9:9c:
15:64:7e:75:b0:e1:b2:a0:8b:33:42:f3:c3:91:d7:
0d:a7:87:40:ce:72:31:dc:a1:d3:db:da:04:b3:a9:
e0:b8:ca:a1:0e:2f:8b:2e:7b:b8:7a:2c:5d:82:12:
d1:3d:39:89:67:98:db:89:2e:f5:41:bf:57:f0:0d:
e7:7d:29:12:3b:e4:e1:60:34:d4:d2:d2:f3:7e:21:
eb:2b:f3:66:d4:a9:d8:bf:43:ea:bd:57:8a:f5:ce:
d1:5c:b7:11:42:a8:60:10:8a:f9:11:a1:53:04:f9:
18:12:05:62:87:a5:2e:b4:42:86:e3:56:3d:f0:89:
12:14:ce:4d:cf:4c:5a:26:f3:8f:20:fb:35:a8:93:
3c:f2:59:12:39:fe:83:84:83:d1:7d:a5:78:6a:4a:
4e:9f:9e:b1:d2:0e:3a:25:07:28:b9:e0:b2:91:fb:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:81:CC:41:CD:08:21:E1:3B:37:CE:26:FD:10:6A:0C:34:8C:2C
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:fd:1e:a5:8b:4d:56:c8:d8:70:fa:21:94:ad:a7:ee:ac:
1a:8e:48:2d:e1:da:f7:ed:3c:03:7b:0d:d0:a0:58:b5:f3:c3:
72:b4:df:a8:1f:1f:1e:7a:e6:c6:74:1a:e6:8e:bb:e7:73:5e:
77:36:de:32:1b:33:ab:68:1a:3b:73:bc:3d:9e:43:91:b2:01:
8c:84:11:97:ea:a9:c6:4d:02:89:bb:05:b3:dc:e2:74:82:04:
0c:b9:c1:39:ff:29:3e:58:9f:8b:8b:0a:6e:19:95:a7:c5:bb:
c8:ec:69:33:5b:3c:43:2f:f8:55:c3:9f:85:84:fc:ed:25:53:
ac:94:75:de:79:2b:60:33:a1:ac:61:89:8c:36:29:19:68:90:
f1:07:27:af:58:0b:ec:40:8a:d5:3d:82:7b:7b:d8:91:4b:90:
f0:4a:ea:4f:fb:48:60:16:e0:e4:2d:26:57:b3:eb:8d:c9:a6:
40:71:85:a9:bd:b9:23:60:82:d6:c6:8c:5b:8d:6f:ef:5a:55:
d3:b9:11:4c:d7:9a:85:7a:3a:32:34:5c:34:ad:0f:d9:fd:6e:
8d:e7:58:5d:08:86:2f:f6:f5:f8:4b:85:63:0f:7e:1a:35:34:
6d:e1:82:d7:9b:23:28:8c:97:40:fa:54:38:0a:a6:ca:7d:27:
57:73:ec:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK2G4IJCNfFezA6/H8ItKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFiMTQ3ZWI4NzM3YWJjYzMzNWY4MDIwOTUxYjI1ZmYy
NjU2YTYwHhcNMjUwNjE0MDIwMTExWhcNMjUwNjE1MDIwMTExWjAzMTEwLwYDVQQD
Eyg1ZTJkODFjYzQxY2QwODIxZTEzYjM3Y2UyNmZkMTA2YTBjMzQ4YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rvSTiNGpQdouh2Nu7T92Bwx1Er1
GXo9aJ2Yl2gvgneptB9hSZ1Ek6rgWilq75pUt8v+E5WZ2Ok8U/IlwQ6hWpglXEWm
OB1WmGknwASypAHR265uVQKf+ZwVZH51sOGyoIszQvPDkdcNp4dAznIx3KHT29oE
s6nguMqhDi+LLnu4eixdghLRPTmJZ5jbiS71Qb9X8A3nfSkSO+ThYDTU0tLzfiHr
K/Nm1KnYv0PqvVeK9c7RXLcRQqhgEIr5EaFTBPkYEgVih6UutEKG41Y98IkSFM5N
z0xaJvOPIPs1qJM88lkSOf6DhIPRfaV4akpOn56x0g46JQcoueCykfs2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4tgcxBzQgh4Ts3zib9EGoMNIwsMB8GA1UdIwQY
MBaAFExxsUfrhzerzDNfgCCVGyX/JlamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMt
MDcxYjk5MWFmMDFmLzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMtMDcxYjk5MWFmMDFm
LzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2T9HqWL
TVbI2HD6IZStp+6sGo5ILeHa9+08A3sN0KBYtfPDcrTfqB8fHnrmxnQa5o6753Ne
dzbeMhszq2gaO3O8PZ5DkbIBjIQRl+qpxk0CibsFs9zidIIEDLnBOf8pPlifi4sK
bhmVp8W7yOxpM1s8Qy/4VcOfhYT87SVTrJR13nkrYDOhrGGJjDYpGWiQ8Qcnr1gL
7ECK1T2Ce3vYkUuQ8ErqT/tIYBbg5C0mV7PrjcmmQHGFqb25I2CC1saMW41v71pV
07kRTNeahXo6MjRcNK0P2f1ujedYXQiGL/b1+EuFYw9+GjU0beGC15sjKIyXQPpU
OAqmyn0nV3Ps9A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:28 2025 by rpki-client