Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File: THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier: vaFbSh5hEXyO1VcWo8+2M+MDT0rlGyU+LvyvTJNRAGk=
Subject key identifier: 0B:63:D0:93:FC:8A:CE:05:69:93:59:7E:53:C5:89:29:64:B8:3B:7E
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 019674FA143994DF59C5DCB511423D5B8C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number: 09A8
Signing time: Sun 27 Apr 2025 02:01:08 +0000
Manifest this update: Sun 27 Apr 2025 02:01:08 +0000
Manifest next update: Mon 28 Apr 2025 02:01:08 +0000
Files and hashes: 1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: iKy+sEbOVUa5MG0mjUb7Gbivz9U0WzK5yK88onv+IVY=)
2: aZp_-IqiVFoAaaD08gi82AqrlBM.roa (hash: xAjdvDvJZRM8tEfeaFE3V9XsMT9Nsdi0raaN7LzCKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:14:39:94:df:59:c5:dc:b5:11:42:3d:5b:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Apr 27 02:01:08 2025 GMT
Not After : Apr 28 02:01:08 2025 GMT
Subject: CN=0b63d093fc8ace056993597e53c5892964b83b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:c4:e5:69:a1:e0:da:bf:5d:be:94:5d:4b:
5c:11:93:56:c7:58:16:a2:d9:03:7d:84:37:ed:06:
ae:70:a5:88:a6:ca:e3:db:48:60:84:35:d3:ea:1f:
b9:a7:02:b7:21:37:1e:55:9f:c2:e9:a7:67:1b:5b:
00:47:92:f4:7a:d6:90:a0:59:c5:05:dd:32:d6:06:
c5:15:cd:38:18:0e:0c:90:d9:d5:7b:54:d7:4f:a2:
c4:33:e9:5f:61:04:b3:b3:19:be:1d:e1:fe:85:e8:
64:26:20:9d:31:8f:bb:7b:90:ef:e7:6f:b3:0e:d0:
ec:b5:01:7b:4e:17:eb:42:e3:c5:10:9d:d5:5d:3f:
c0:cc:c6:2a:de:2f:4c:16:3a:96:85:bd:16:fd:b3:
58:47:d5:d0:f5:97:36:73:ef:54:09:35:ab:bb:3c:
25:56:59:4c:38:69:75:f1:78:b3:22:76:08:09:0f:
27:1e:c5:d1:6b:5c:f4:17:ca:d8:f0:e4:ef:d0:d9:
05:4a:04:19:5d:e9:8c:8a:71:28:75:39:5a:7d:00:
3a:1a:97:08:2b:c5:bc:5d:a5:8b:5a:d3:63:de:14:
98:c9:45:e3:d8:18:46:1c:b0:7a:4f:4e:15:66:58:
39:8b:77:09:43:87:8f:32:d2:56:2c:2d:a8:03:02:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:63:D0:93:FC:8A:CE:05:69:93:59:7E:53:C5:89:29:64:B8:3B:7E
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:98:9c:1b:43:80:2b:31:fb:90:55:31:74:30:65:9c:fa:2f:
40:4e:54:82:bc:a2:e2:23:13:67:f7:f6:1a:cc:3c:8c:6e:d8:
ae:cd:1e:31:93:44:83:80:97:ec:2c:25:4d:cc:cc:5d:99:55:
cc:48:93:7d:82:6b:cc:36:8f:b5:7e:9d:0d:b3:36:11:10:e0:
ca:83:4c:0e:e7:d4:01:21:ca:38:e2:71:8e:0e:be:0c:89:27:
dd:d4:2c:13:41:2d:a6:8d:54:28:35:44:fb:d3:27:b1:41:eb:
8c:62:35:20:40:54:ad:9a:9b:25:69:e1:42:31:b9:31:14:4b:
c5:d2:fd:f1:de:9e:27:24:ab:ed:1d:d4:37:75:6e:de:ae:ab:
39:c0:4d:80:a5:e2:80:5f:93:e5:48:16:28:06:2c:0e:60:ce:
01:14:aa:5e:06:4e:08:f1:8d:c8:39:d7:e2:c9:c7:0b:34:e4:
0b:84:55:d5:12:fd:d6:15:6b:f3:ee:f8:bb:e4:b3:e0:97:40:
42:76:76:06:60:15:85:83:89:1e:22:d7:04:ca:e9:76:e6:67:
16:51:7d:e0:d9:62:18:95:39:4e:39:0d:07:43:67:7b:6f:60:
c5:9d:88:49:c5:f5:7f:25:5f:ca:41:77:4c:54:a9:3b:24:de:
b5:96:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:53 2025 by rpki-client