Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: k8pwL1MNpNwzG+RVSGgDV3OKY/24Hp9peSURHFmo99I=
Subject key identifier: 23:3E:9D:5E:EC:49:F0:2C:D6:AD:EC:DE:8C:21:06:AA:58:E1:85:A6
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019A541AC40E05386244BD924C44B091DD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 13:00:31 +0000
Manifest this update: Wed 05 Nov 2025 13:00:31 +0000
Manifest next update: Thu 06 Nov 2025 13:00:31 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: E6QhM/XJq+m9Rt4UJi79UohCga+17FRWEbMwxlaxCCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:c4:0e:05:38:62:44:bd:92:4c:44:b0:91:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Nov 5 13:00:31 2025 GMT
Not After : Nov 6 13:00:31 2025 GMT
Subject: CN=233e9d5eec49f02cd6adecde8c2106aa58e185a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:8d:8d:c6:81:31:58:17:7e:83:b1:ef:56:
00:09:85:9e:53:bb:84:c4:37:41:99:df:cf:d6:57:
93:2c:07:6b:54:b5:ef:ab:12:32:71:cd:b7:0b:3c:
a4:0b:d4:a2:7d:03:4f:4c:a7:02:dd:ff:70:99:5f:
d8:e1:ce:7f:31:f2:fb:be:cf:b7:3e:6c:5e:d5:b8:
7f:7f:52:0f:bd:c6:d8:cd:b0:2f:89:94:6b:8e:66:
16:bf:2e:9d:78:8c:a7:02:7c:9a:95:c6:08:72:a5:
ad:63:19:49:36:45:19:41:57:d7:7e:ca:25:06:f9:
b9:2c:55:e2:f1:ad:fe:e7:75:44:c3:36:ac:1d:7c:
40:48:d7:33:d6:3f:e9:fd:1f:0c:6c:7b:d2:83:be:
cf:0d:62:22:b5:58:80:1e:d3:33:a6:e4:13:31:05:
10:ee:9d:2e:87:a9:3e:9c:70:5a:b6:3a:ec:6c:45:
a7:ac:e4:39:b9:e7:19:db:32:9d:6e:ef:b8:9b:7e:
85:d6:60:d7:f1:f9:be:27:21:86:2c:bb:90:b9:17:
86:85:16:80:da:24:dd:c1:c5:cd:62:3c:46:0b:6d:
6d:bb:f8:37:84:71:28:ab:74:95:31:93:e3:04:11:
82:f7:7e:d0:e4:64:e1:2c:31:1d:4b:62:d0:3a:53:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:9D:5E:EC:49:F0:2C:D6:AD:EC:DE:8C:21:06:AA:58:E1:85:A6
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:63:d4:d8:45:3a:7e:9e:3f:bb:31:f0:3d:f6:10:ba:f0:
44:d9:d1:54:99:e3:64:a0:5b:3f:d6:1f:68:0a:1c:62:81:0f:
c5:c4:98:6b:49:85:3f:7d:09:69:87:5e:33:fe:03:3c:2f:aa:
c5:48:06:98:22:c2:e9:b5:4f:1e:85:66:e2:bf:e8:e2:bd:d4:
b2:68:37:72:02:32:63:6a:d4:f3:4c:51:b0:ee:24:9d:2c:25:
11:5b:5d:d3:f6:cd:5e:2d:91:94:71:51:ca:08:61:8d:ba:ae:
5a:e2:6e:9e:02:6c:38:5e:42:97:c9:a5:4d:16:e8:cc:b1:0b:
0f:6b:75:d8:26:3f:6a:6d:b4:b0:ec:2c:de:27:65:32:3e:0d:
cf:5c:eb:b5:82:ce:95:43:7c:c0:17:35:3d:12:4c:d6:ba:ca:
af:63:76:eb:92:2c:a4:86:b8:b4:82:4d:09:38:93:f4:43:0f:
d8:45:84:86:07:3c:7d:02:c1:ff:15:d3:5b:53:b4:d7:1d:fa:
9d:2a:2e:6f:14:6d:b3:32:a5:14:1b:99:0c:99:97:91:46:78:
60:05:22:3c:7e:25:1e:b2:86:2a:1d:25:21:fd:43:6d:99:9b:
73:5f:1f:83:0f:ce:fa:73:e4:76:1d:cb:dd:0d:1a:16:7d:2a:
8e:d0:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:17 2025 by rpki-client