Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: HzIfgH60oW9T0vQ8Eg51HYhQiXvSYKVrLmuopGFaHBU=
Subject key identifier: 3C:6F:FA:C8:3E:49:F8:67:D7:54:A4:65:A3:F9:C1:36:5F:38:AD:D3
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 01968058C4BB677CBAB0DEB304D0BC179A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 07:00:23 +0000
Manifest this update: Tue 29 Apr 2025 07:00:23 +0000
Manifest next update: Wed 30 Apr 2025 07:00:23 +0000
Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: GUcwClu/D/ovtcgH9DVwdAvRKCtHJfzcTgCfVGLCVIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:c4:bb:67:7c:ba:b0:de:b3:04:d0:bc:17:9a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Apr 29 07:00:23 2025 GMT
Not After : Apr 30 07:00:23 2025 GMT
Subject: CN=3c6ffac83e49f867d754a465a3f9c1365f38add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:03:ca:de:82:40:bb:1a:92:78:db:8c:8d:
13:11:72:44:2f:e9:09:93:db:44:a6:5d:35:b9:4e:
73:5a:1a:7d:27:83:de:5b:7f:3b:15:0f:6f:28:63:
f4:7e:d3:03:5a:45:00:25:53:1c:35:f2:10:46:00:
58:39:eb:e5:2d:1f:d4:87:8d:0d:16:ca:cd:ab:99:
66:57:43:e7:bb:e8:ec:e7:a6:0b:18:55:7a:a5:d0:
63:63:b6:23:3e:b3:ae:d2:21:75:ee:81:6a:97:c9:
80:7c:ad:4d:2e:a0:4a:02:a0:e3:fe:5f:a5:d2:de:
be:9c:33:ec:f5:dc:0d:33:ab:89:63:7f:e3:43:b8:
21:55:2a:5c:eb:06:9b:ce:b1:77:3a:49:c4:71:3c:
05:81:e3:78:98:d0:b4:1e:31:12:28:34:9c:80:a1:
da:f0:29:5d:1a:89:20:1f:a6:b9:87:56:a8:1e:c1:
31:fa:55:9e:28:9c:d8:19:ff:94:8e:e3:a6:82:a0:
32:d9:bf:8f:5e:cd:9f:42:a5:5b:4a:4f:31:28:ad:
23:36:ed:a0:13:1d:ef:1f:62:65:8e:34:e6:73:cc:
43:36:a4:1d:2a:e3:e8:0b:6b:02:92:2f:51:03:12:
b0:f3:48:7c:53:51:52:8a:7b:24:3a:88:09:d2:86:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:FA:C8:3E:49:F8:67:D7:54:A4:65:A3:F9:C1:36:5F:38:AD:D3
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:89:9c:a6:fd:f8:90:a7:23:97:b2:35:d3:09:c0:f6:e1:79:
04:46:5f:6e:22:49:45:6b:e5:8b:63:dd:dd:61:9c:2e:ee:c0:
f9:51:22:e4:54:f5:b2:00:21:4f:5c:30:c3:97:db:0f:cc:db:
43:f1:1c:c4:b0:6c:42:0c:e7:0d:0c:1f:65:38:7c:ea:60:21:
8b:ea:8d:19:f4:e1:59:3a:e6:b1:f0:85:2c:49:47:f9:b5:04:
b0:61:6a:be:8a:ce:7a:4b:c9:a5:fc:df:a2:ee:65:f3:0a:c9:
86:7c:92:3b:54:ad:fd:3d:07:c1:ab:bf:83:b7:50:3d:ba:0f:
6e:9a:49:9e:19:86:59:00:bc:ed:6a:33:ce:4c:48:3f:d2:60:
38:b8:a0:a0:da:18:1d:3a:d9:08:92:4b:98:4c:ee:cc:a4:8d:
b5:44:11:76:e4:95:69:48:22:aa:d5:50:c4:11:22:bb:97:ab:
74:f7:a7:e2:75:3f:cc:12:2f:e6:b2:57:de:f5:f7:9c:8e:16:
22:7c:43:d7:66:10:65:37:d6:93:50:27:dc:21:45:87:0c:ff:
8e:ee:24:cb:97:0c:05:9b:c5:24:f6:57:9c:b8:8f:99:3e:86:
ee:70:ac:1c:6d:80:17:3e:8f:19:7d:70:83:91:fb:19:29:63:
78:02:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:29:46 2025 by rpki-client