Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: kkCa894T7k487VJ6BWb6yKXtsDYvSRclWPOBIfOR8io=
Subject key identifier: 3F:A1:59:16:53:3B:D7:1C:8B:93:0C:24:C8:A8:B8:E8:DA:79:BB:62
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 01974A7A52BA5A4E924608ECB68C77CC27AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0882
Signing time: Sat 07 Jun 2025 13:00:19 +0000
Manifest this update: Sat 07 Jun 2025 13:00:19 +0000
Manifest next update: Sun 08 Jun 2025 13:00:19 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: CfnTmxicRwNZMA7Cf8PgpTRGM7y60mW9IHSWOpxOIiU=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:52:ba:5a:4e:92:46:08:ec:b6:8c:77:cc:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Jun 7 13:00:19 2025 GMT
Not After : Jun 8 13:00:19 2025 GMT
Subject: CN=3fa15916533bd71c8b930c24c8a8b8e8da79bb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:27:22:0c:ad:da:df:91:90:8b:ee:20:df:
1a:bd:f5:b4:65:7d:f7:29:da:f6:e6:5f:77:17:ae:
04:07:9d:1d:06:85:f8:f1:fd:bc:59:af:69:52:78:
69:24:3b:fd:0c:ea:33:ec:d1:d1:10:6f:f5:97:89:
87:ed:b8:97:97:58:23:e0:2e:1c:83:9c:5c:81:70:
57:a8:8e:89:8e:99:50:e5:6a:5b:5b:88:07:f7:22:
35:0c:d9:a5:fd:22:47:f7:5d:93:01:77:f6:af:2c:
71:eb:22:6c:ce:94:14:25:3c:24:90:b1:cf:6b:df:
7d:3d:2c:2f:a1:3d:77:ce:b9:14:94:ec:2b:53:c3:
4c:ac:38:c0:76:96:ea:1c:ad:93:71:c9:a0:92:b0:
9c:ed:86:20:f6:7c:87:41:27:e5:e1:24:7d:8e:75:
6a:42:6e:4b:dc:6a:19:9a:6c:0a:e5:3b:1f:cc:30:
74:91:d4:d3:6c:42:f7:84:ab:e4:31:70:d3:3e:54:
51:b9:40:e4:7d:0d:39:6a:ba:fc:f8:85:6d:34:c0:
b6:59:63:be:2e:1b:20:ff:03:2f:cd:e3:d4:7f:94:
f6:03:54:f9:47:51:54:5a:a5:16:68:30:4f:ca:4d:
15:fd:e0:c4:12:88:cb:a6:4e:c1:8f:11:3f:f8:b5:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:59:16:53:3B:D7:1C:8B:93:0C:24:C8:A8:B8:E8:DA:79:BB:62
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:33:d3:7a:88:0f:31:09:d3:c6:ff:44:8c:6b:6d:4d:d0:74:
ff:44:01:2c:b8:8f:9c:99:9d:ae:a1:45:06:84:4b:93:f1:bf:
d9:32:68:a4:be:15:25:7b:fe:eb:00:21:09:88:44:ce:d7:86:
92:bc:e6:ef:3c:cb:8a:d5:d7:bd:64:f6:d6:c1:2b:d9:1a:b8:
83:95:c6:17:8e:87:3b:a4:55:61:8a:72:b8:68:be:d6:ea:68:
be:24:b7:d4:96:63:3e:c2:e7:da:b7:bf:49:65:e9:17:cc:8f:
4b:a5:18:81:d3:a9:df:c1:a4:82:b9:3f:41:b8:81:74:9c:3b:
4f:b2:51:d1:e3:4f:b8:63:b5:1c:a1:36:2f:62:0d:6d:60:32:
b4:13:7e:79:07:37:2d:bb:22:14:3a:94:9b:f7:19:d7:cb:38:
99:2e:db:33:47:78:56:bf:6b:25:40:68:e5:a8:49:43:8a:dc:
5b:34:2e:3e:e9:e0:98:af:4d:c8:86:2e:98:37:e4:91:1e:f9:
ce:76:a7:7b:b8:5d:bf:53:19:e5:53:38:80:8b:cb:28:09:95:
c0:e3:dd:9d:25:d6:06:40:5f:cc:16:01:98:f5:4d:00:45:0c:
0d:77:99:5a:8d:41:38:fb:a0:a0:cc:53:00:3c:09:41:35:bc:
5e:a1:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:10:52 2025 by rpki-client