Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: aooA2Ij1EJ7V/efOFFYeM3Y8bc3rydqLpqyNbNncH88=
Subject key identifier: 75:E7:5F:CB:03:9B:C4:2D:D7:CB:29:59:68:B6:F1:74:EE:89:E5:6D
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 019680C723922324B52AC3F3C209AC837B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 09:00:56 +0000
Manifest this update: Tue 29 Apr 2025 09:00:56 +0000
Manifest next update: Wed 30 Apr 2025 09:00:56 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: MQaEzCZxklYFAR2cy4L2RkCifjDBT51+Ak2uKMtqOqQ=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:23:92:23:24:b5:2a:c3:f3:c2:09:ac:83:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Apr 29 09:00:56 2025 GMT
Not After : Apr 30 09:00:56 2025 GMT
Subject: CN=75e75fcb039bc42dd7cb295968b6f174ee89e56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:6c:c2:8c:88:c7:bf:91:7a:12:74:68:08:
24:43:90:d7:79:21:78:64:fe:f5:a4:99:6a:44:63:
12:21:c3:bb:a2:bd:81:72:be:7a:f9:82:5e:55:75:
46:dc:af:c0:d1:31:d6:0b:c1:4d:0e:36:aa:c8:d0:
19:0c:9e:62:0c:e7:7e:1d:eb:70:10:33:5b:c2:14:
9f:09:d2:af:a2:31:9e:f0:0a:36:19:39:89:53:d5:
fb:74:26:43:c8:c0:f7:f1:fe:4e:15:03:e4:b5:8e:
a2:60:ff:6e:78:3c:b0:a3:ac:15:05:ec:63:2c:22:
e7:d4:47:ba:8b:64:4b:9d:2b:3a:32:58:e0:2d:ab:
04:db:1b:7d:6b:f8:74:74:5f:47:1e:90:2f:01:4f:
21:49:64:22:80:cf:87:f7:cb:87:f5:56:59:34:c3:
d6:cb:2f:a9:54:9f:eb:56:ae:6c:6c:71:34:4b:bf:
74:64:f8:bc:55:b3:11:f5:f9:d3:5c:c7:30:e6:e1:
3e:17:86:23:32:6b:ad:7c:21:49:e5:c2:85:db:23:
0a:ab:75:ed:ad:46:f8:73:c1:ce:22:ae:4d:c4:84:
e7:bd:82:5d:07:46:62:34:60:99:f5:ce:f7:10:67:
3e:47:42:45:ed:82:41:b9:b9:06:46:b3:0a:d0:94:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:5F:CB:03:9B:C4:2D:D7:CB:29:59:68:B6:F1:74:EE:89:E5:6D
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d9:24:76:cd:9c:ed:d7:36:60:8f:b4:da:03:87:86:d6:0c:
d2:89:26:f3:65:ef:91:cf:3e:b8:01:49:ca:d4:2b:5b:b0:0a:
df:e1:40:1f:80:ab:ac:c9:9a:7d:cc:7c:5d:1c:cf:29:6b:36:
2c:72:c5:6d:07:f8:7f:71:c9:41:d6:53:25:19:1f:02:16:bb:
e0:59:65:45:8f:4b:99:ec:ec:f9:e0:df:ea:cb:01:6c:3e:5d:
18:76:f7:49:2c:1c:3c:03:f6:57:0b:ac:8f:35:ba:17:44:af:
37:71:1d:83:b5:f1:48:c4:a5:a4:9a:ce:f0:d7:ae:9f:a2:a7:
99:b4:a0:b0:56:00:cd:bf:a7:d6:56:2f:f9:45:07:13:57:9a:
25:4b:f1:ef:6d:95:bc:bd:6c:7f:7d:5c:48:7b:a0:35:a6:88:
27:31:ad:3a:b2:39:1a:ad:8b:33:50:1f:dc:2f:4d:e5:6e:06:
2e:f8:bc:fc:31:9b:50:1b:85:86:31:a9:25:ae:b0:ca:bc:c9:
2d:4e:29:dc:45:12:59:34:21:17:7c:13:37:38:12:4a:8a:5b:
fd:ae:8d:59:a1:08:c3:24:2d:81:8e:73:86:e4:9a:ab:db:5c:
d0:f6:a5:98:bc:59:8f:3b:f0:93:e2:19:09:fd:74:08:af:13:
5e:80:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:33:16 2025 by rpki-client