
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: 1pyWpo5snn0MMxo8cm5T7AQHBZMUtDfogkkakRUDGTw=
Subject key identifier: DE:4D:18:8E:80:9F:2F:25:36:48:DB:9D:98:5A:03:89:3F:BB:8F:E7
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 0196A3C0DAFBA0B0E6C8428644A763AF86A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 03E4
Signing time: Tue 06 May 2025 04:00:47 +0000
Manifest this update: Tue 06 May 2025 04:00:47 +0000
Manifest next update: Wed 07 May 2025 04:00:47 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: RtFo0/vKzgIg6XxC6LbINU4/xw09ehdJMiGLrsv+KHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:da:fb:a0:b0:e6:c8:42:86:44:a7:63:af:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: May 6 04:00:47 2025 GMT
Not After : May 7 04:00:47 2025 GMT
Subject: CN=de4d188e809f2f253648db9d985a03893fbb8fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:cf:2d:0c:92:4f:d7:a3:6e:a3:c6:5f:77:
46:da:d2:2f:58:4a:7e:4f:ea:dd:c0:e8:42:33:e8:
ab:6b:6c:ae:0d:0c:79:24:d1:ba:00:94:e6:4d:2a:
ae:47:3c:b3:6b:1c:57:70:bb:62:05:20:c2:fe:76:
77:7f:6b:28:0c:14:eb:b9:2f:27:c1:bb:d4:55:8f:
e3:98:a1:6a:e5:2e:9a:0a:89:0b:a2:dd:7f:56:07:
d3:69:52:55:41:88:2a:28:c6:18:7f:85:93:af:10:
1f:c1:b7:33:63:65:40:21:2d:a4:f7:c9:ae:bb:f3:
0f:eb:1d:33:76:f0:29:ff:ef:0a:f3:93:5c:4e:13:
ca:43:88:b3:36:fc:ca:e5:10:08:1a:9e:ff:58:ca:
0c:81:93:18:0d:27:5b:9b:28:e0:48:e7:c5:c9:8d:
fa:dc:78:a1:a6:05:82:f9:2b:28:6d:ac:ce:8d:8e:
43:ed:b1:8d:a7:ab:b4:ab:b8:06:26:f7:f2:1a:94:
db:0e:e3:08:1f:d4:59:14:75:86:5b:e0:ea:42:ed:
c3:2e:bc:0d:b2:b0:fb:2f:e7:9f:11:f8:5d:7d:e7:
66:99:08:52:01:1c:5f:2e:62:12:90:30:d9:ea:bd:
07:ce:b4:a2:97:3b:39:63:e7:54:c8:c7:f8:68:2d:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:18:8E:80:9F:2F:25:36:48:DB:9D:98:5A:03:89:3F:BB:8F:E7
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2b:2c:ae:c7:5c:04:dc:99:3a:b2:19:13:92:2d:3c:7d:90:
72:de:81:75:9d:94:e7:a1:de:12:b4:5a:6c:8f:74:12:13:ef:
77:48:4e:12:ec:48:b5:de:2e:7c:fa:a5:d2:ca:5f:ac:67:7b:
37:19:1f:7a:e8:4f:7f:c8:c2:e5:a6:a9:ea:c2:83:58:56:dc:
86:7c:7f:b3:58:4e:90:74:9f:76:73:21:0a:d2:63:a9:6a:26:
59:80:6e:6b:89:11:56:2d:60:40:9e:70:03:b1:53:1b:46:07:
a3:65:78:91:0e:87:4d:23:6a:60:1f:23:c7:e5:dd:7e:8a:c4:
3c:3f:89:76:5a:dc:93:2f:0f:c5:39:42:ae:07:2a:91:c1:ea:
b3:92:ec:ed:a8:fe:d1:8f:cf:cf:c4:72:14:7f:6a:4b:3b:81:
a0:c6:14:d0:8e:84:f1:21:57:aa:96:76:9a:53:07:74:79:95:
a7:11:e6:f8:bc:d0:9c:ba:1e:46:e3:b2:ad:c9:fc:d6:db:16:
43:40:60:72:9f:7c:d7:7a:89:bb:a9:41:56:ba:1a:1d:7e:d7:
03:c3:6c:e5:a6:f2:a7:05:61:b3:ea:0b:47:d2:47:ef:9e:68:
6d:af:34:cc:c9:c4:89:f4:d5:a2:dd:c8:bb:31:6b:7c:b6:8c:
bc:32:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:13:45 2025 by rpki-client