
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: FGIlyCO5EnI5RhuaaZXTWKcR3EN/Bn7UNnrnUWx8pCE=
Subject key identifier: 01:86:2F:59:0B:5B:7D:42:F0:A0:28:A4:B6:A2:3A:5F:6D:A3:B8:A6
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 0196553779FC1FD76B10555F678D7A620171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 0392
Signing time: Sun 20 Apr 2025 22:00:21 +0000
Manifest this update: Sun 20 Apr 2025 22:00:21 +0000
Manifest next update: Mon 21 Apr 2025 22:00:21 +0000
Files and hashes: 1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: JrcL0maCYOBHjVhS/jRo8AzHqjeQ0Djw9e/uQDudwLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:79:fc:1f:d7:6b:10:55:5f:67:8d:7a:62:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Apr 20 22:00:21 2025 GMT
Not After : Apr 21 22:00:21 2025 GMT
Subject: CN=01862f590b5b7d42f0a028a4b6a23a5f6da3b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:31:51:ff:44:e9:8a:49:6a:37:08:53:af:
3f:78:ec:69:6d:08:e4:68:4e:35:6a:f9:b0:25:e1:
56:30:d8:68:4f:1b:bc:a7:84:c9:60:77:d3:78:08:
a1:38:9f:b5:72:19:0a:30:77:15:bc:18:71:ad:1a:
b8:a5:5f:91:a3:e6:51:f3:db:af:fe:43:0d:85:78:
f0:c5:c2:bc:70:62:b3:1e:37:d0:00:f4:7c:92:2c:
4d:e5:da:89:87:f1:2e:1f:cf:9e:ac:8c:14:a0:4a:
4e:89:79:79:5d:cc:a4:b1:5f:95:e7:48:d2:3a:50:
a5:21:fe:b6:cb:cc:2e:ba:43:73:4f:46:4f:2b:37:
4d:b3:b1:de:02:ee:dc:5a:a1:f3:99:fa:05:7f:90:
99:bd:d8:fc:e5:6a:32:16:3a:90:22:1a:d8:a7:23:
da:64:78:da:80:59:58:f5:1a:78:c8:20:0d:3c:d7:
52:38:61:b8:d8:3d:1b:8a:35:8e:4c:78:53:41:99:
df:46:ec:86:a2:17:07:06:fe:ad:14:3e:f2:51:4e:
95:98:f9:10:62:a9:f4:54:6c:99:a7:a4:eb:e2:63:
89:01:aa:c3:5c:d0:0e:8a:d9:3c:fe:21:5e:83:75:
40:1d:94:c5:05:d2:3c:e7:a4:20:c3:63:2a:52:9c:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:2F:59:0B:5B:7D:42:F0:A0:28:A4:B6:A2:3A:5F:6D:A3:B8:A6
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:c9:9e:98:82:47:e6:ce:b9:f4:ea:eb:f8:d5:71:4d:9d:
97:e9:45:02:43:e1:83:cf:fc:70:01:8e:7b:1c:f2:af:8c:72:
a2:ea:ed:68:3b:58:e8:f3:85:35:25:fb:e3:84:f0:bc:2b:87:
59:8f:6e:87:8c:0c:2a:2d:19:6b:bb:33:df:4b:80:3c:e6:c9:
92:8d:47:b6:02:d8:98:36:da:71:e5:5b:52:e2:6f:cf:2a:cc:
cf:c7:35:fb:ec:88:b4:36:b8:63:1f:f0:2b:d7:c9:22:5b:d9:
11:a1:48:6b:93:31:d1:99:11:de:62:f4:b2:19:4c:cb:36:e5:
6f:95:84:4c:67:8f:2f:e7:61:d3:ca:3f:71:c9:dd:37:2d:b2:
79:d2:ad:4a:93:92:70:2f:33:c9:ef:39:6f:cc:dd:26:4b:e3:
62:5b:d6:9b:77:73:79:5c:b3:19:d5:23:b8:25:fb:e3:29:22:
7a:bd:9e:45:7e:2c:69:12:cf:b6:90:1d:73:7d:79:c8:33:e0:
fd:85:26:0e:1b:a2:72:2f:26:3d:4c:76:8d:87:2b:43:cf:e4:
65:e4:b9:ad:ed:08:6d:1a:ba:b4:84:07:1c:6d:e8:3d:4b:b2:
5c:0d:1e:55:f9:90:0d:a4:88:b2:f2:9d:71:2d:ee:87:c9:c5:
dd:f9:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:37 2025 by rpki-client