Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: HCsoL+93vRH0ZDIX8ZE7yoZ1Yqw8hX87MR6xRHmwi9c=
Subject key identifier: A4:7A:B0:37:A0:32:25:8F:1B:87:35:9F:42:DC:11:89:8F:D3:99:04
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 01965B02F6BF448775A750E3C74658E02E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0806
Signing time: Tue 22 Apr 2025 01:00:42 +0000
Manifest this update: Tue 22 Apr 2025 01:00:42 +0000
Manifest next update: Wed 23 Apr 2025 01:00:42 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: Cir3qiRXbjiIjwKDSobS0xz7NXG9NiujJMBlUpwdLpo=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:f6:bf:44:87:75:a7:50:e3:c7:46:58:e0:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Apr 22 01:00:42 2025 GMT
Not After : Apr 23 01:00:42 2025 GMT
Subject: CN=a47ab037a032258f1b87359f42dc11898fd39904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:fe:34:ae:ee:8d:b3:1e:92:ff:1b:0f:72:
12:67:12:1b:f1:e1:54:c7:0a:a1:76:fa:7d:50:9b:
14:ab:81:d7:5b:11:7d:77:26:96:7b:12:da:ce:f3:
ad:78:2b:d7:44:1c:f9:11:65:39:83:8e:d3:e7:9a:
56:11:0c:bc:1c:95:1d:9d:ea:1f:c9:39:e8:1f:99:
fb:ea:1c:1d:fd:be:ee:9c:e1:93:3e:e9:b6:10:ea:
0c:4a:78:6a:93:9f:c6:51:3a:4c:8d:53:92:60:a5:
d1:a5:d1:c8:1b:6b:d6:7e:05:08:66:93:70:63:df:
aa:15:cb:5f:b5:e7:d1:c5:80:89:de:a5:16:87:17:
6a:22:a4:a4:a3:9c:1e:0b:8f:00:cb:c9:c4:eb:4d:
d3:a6:ae:22:fc:17:c8:44:10:76:9b:88:3c:7f:31:
aa:68:19:f1:ba:a2:24:cd:ce:bb:80:45:a6:35:98:
58:3d:9e:67:d2:00:75:9d:04:0f:cc:af:8f:2e:47:
2e:78:0d:8e:d5:73:aa:51:d1:5e:17:bf:ec:b4:31:
22:7e:51:0d:a8:91:8d:bd:32:a6:30:8c:ee:c3:17:
3c:5c:27:76:10:c9:74:72:b9:6e:d3:8f:4f:b6:38:
30:04:43:7c:4b:b6:8c:80:2a:76:7d:92:c9:61:46:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:B0:37:A0:32:25:8F:1B:87:35:9F:42:DC:11:89:8F:D3:99:04
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0d:c7:54:b0:b1:9b:b6:11:d0:92:ee:b9:c8:1e:3c:8f:7e:
db:a2:6f:4a:5b:d2:5f:85:38:7b:8e:16:bf:79:45:87:ad:57:
6a:c2:bf:bc:ed:b9:d4:7a:05:c5:b4:42:e1:4c:f4:3d:50:d2:
c2:59:55:d4:4c:8f:32:3b:58:8f:91:c5:40:b5:50:5a:52:f8:
ac:05:90:51:44:02:c0:42:1b:10:91:30:2e:44:15:1f:da:32:
34:7b:05:d7:7f:63:35:d8:bc:44:88:04:03:de:db:36:88:c3:
7d:c1:05:33:59:cc:45:f7:3f:cc:68:1c:7e:a7:a8:c5:d3:c2:
5c:70:67:87:10:dd:c1:64:77:6f:58:c1:65:42:e8:6b:c4:6d:
00:54:cd:2c:38:31:67:f1:e4:d9:25:45:62:53:26:9a:d8:20:
0b:9a:19:08:86:7e:55:f9:8c:73:1d:9f:c8:0e:b1:13:71:2c:
d6:05:db:1b:c5:cd:c6:a9:5d:e6:97:27:5a:85:17:25:6c:1e:
e9:8a:9f:d9:67:1e:0a:d0:a2:ad:44:bb:9d:15:ac:ea:78:a3:
71:37:eb:36:d2:31:e6:60:50:52:5e:9b:16:fa:f7:9f:bd:41:
a2:14:13:45:72:5e:9b:29:fb:ba:32:dc:23:31:88:fa:d0:08:
c3:88:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:42:50 2025 by rpki-client