Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: EJZ8rQ/z0pOghLbwkhWKtCtj7FAFChBA6mt8S7gvzVQ=
Subject key identifier: 51:3B:EB:93:0E:9A:00:F7:42:56:88:B8:06:98:56:99:59:B7:DB:59
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0196A208DD04DB87859E3B59E15F96A6B3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0ACE
Signing time: Mon 05 May 2025 20:00:11 +0000
Manifest this update: Mon 05 May 2025 20:00:11 +0000
Manifest next update: Tue 06 May 2025 20:00:11 +0000
Files and hashes: 1: B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa (hash: GYazD0XUED0Lzoqp0JRsmv1Wdv3MWiNL0orAYJkGs0s=)
2: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (hash: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=)
3: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (hash: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=)
4: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (hash: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: Q7EY50gmWojCUu/33y69JtnoXwQKhLswA06pfNLG3bg=)
6: VQHe2S-7j8SMoLbiYSjz9IrWVbc.roa (hash: 4EmRDMW6ZpVFVYfLs3GRzG+ePL4wqHpJMD783K3OCFc=)
7: r34i9MogSBxeDWHyGIhH_hkNvH0.roa (hash: /LsOtQwuG5S1pPv/GDxv95WqbubjE7D9iX5jL74tvxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:dd:04:db:87:85:9e:3b:59:e1:5f:96:a6:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: May 5 20:00:11 2025 GMT
Not After : May 6 20:00:11 2025 GMT
Subject: CN=513beb930e9a00f7425688b80698569959b7db59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:71:f3:0f:41:97:db:9a:66:3d:7d:ab:0a:
b9:d5:01:91:8a:3d:fe:14:b7:40:e7:23:ad:aa:33:
3b:bb:09:65:db:bb:cc:6a:a8:f1:5a:57:f8:78:99:
e7:79:aa:c8:d1:c6:2d:e2:87:67:8e:8b:26:43:18:
7c:94:79:e2:f7:af:63:a0:ba:2e:c7:f9:a6:1a:7f:
eb:36:5e:56:1e:ca:d5:9d:09:32:ea:f3:b7:b2:14:
1b:2d:0e:f2:ec:68:07:5b:e2:97:60:9c:99:e9:f7:
5f:c3:21:9f:0c:5c:bc:b5:11:89:99:5c:f7:4f:51:
dd:e5:79:32:3c:41:70:d7:51:c4:af:db:62:c2:b4:
7e:c0:f3:af:29:e0:76:68:91:a0:3d:11:f8:4e:b4:
ad:12:bf:4c:9c:61:65:85:b3:9c:3c:57:a0:43:8c:
29:12:99:ac:64:f3:f3:15:d0:81:0d:62:35:db:3b:
74:26:35:af:df:3b:38:66:d8:ee:30:52:d3:de:53:
7e:6b:89:df:16:39:30:d0:26:e6:75:2b:84:9b:82:
fa:07:2f:ef:ef:c7:90:90:4a:08:f3:eb:3a:4f:f2:
14:42:eb:00:7b:0e:55:ad:d3:b3:85:8b:f3:71:dd:
17:9e:92:8e:ba:1c:31:dc:15:6b:13:33:f0:25:ac:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:EB:93:0E:9A:00:F7:42:56:88:B8:06:98:56:99:59:B7:DB:59
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:22:87:40:11:88:f0:75:86:df:3b:c9:94:2c:07:88:96:4e:
f6:36:f1:f7:53:1a:72:df:41:f0:79:f6:0b:63:ec:34:1f:21:
4f:b8:42:32:cc:df:da:a6:33:d7:0a:f7:52:cf:81:09:ca:9b:
0f:d1:8b:02:d8:cc:3e:0e:5f:8b:91:d6:06:ee:61:d3:6b:3c:
2c:ee:5b:05:f9:0a:f2:1c:fc:19:02:e4:66:a8:45:f4:1f:40:
55:50:97:e8:45:9c:4f:25:81:aa:e3:6a:52:c4:71:f0:b7:72:
9e:72:b0:b0:51:65:be:cc:cd:b3:8f:e4:d9:87:84:8a:96:df:
96:4c:5a:cf:f4:fb:e8:8f:5c:7c:b0:cc:c1:4b:6a:75:9d:a0:
ab:5d:dd:c6:62:e6:7a:0b:a3:c1:69:4d:05:3d:77:4a:69:a2:
bc:68:46:b3:4a:6c:25:f8:ac:60:4c:f1:f2:8a:fd:ed:88:fa:
a1:75:72:8f:44:5a:a4:07:90:f7:d0:db:62:c4:7c:2c:24:37:
d7:b6:25:8c:3d:2b:f9:b5:2f:9c:02:a0:10:3e:46:f5:76:9e:
8b:06:d4:c6:82:29:38:1f:53:06:ae:f6:3f:a1:b8:2f:82:7c:
d6:ef:1c:f3:f3:7c:f5:88:02:51:cf:df:97:84:d9:f9:1c:d6:
5b:47:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:01:08 2025 by rpki-client