Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: GKXfSI5pS0l6kivy3bIkMOb3Q1ZMzgoyWeb67Ea6Pw8=
Subject key identifier: F9:0B:6B:81:CE:18:D0:D5:6A:02:08:70:78:BE:5D:71:83:08:0B:8D
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 0195116C15CF214BFC75C6E22A059153D178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 01:00:50 +0000
Manifest this update: Mon 17 Feb 2025 01:00:50 +0000
Manifest next update: Tue 18 Feb 2025 01:00:50 +0000
Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: nFRKAVU6OnwjVTF+ul1M2hkDx3vZ56Yyk9HI85+I0cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:15:cf:21:4b:fc:75:c6:e2:2a:05:91:53:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Feb 17 01:00:50 2025 GMT
Not After : Feb 18 01:00:50 2025 GMT
Subject: CN=f90b6b81ce18d0d56a02087078be5d7183080b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:c2:5d:3e:18:b6:ee:61:1c:e3:40:9e:50:
4c:fa:7f:34:df:0d:82:36:5a:1f:30:13:a7:0e:84:
1e:34:2f:c8:ab:67:3c:e7:a4:47:49:0b:48:8e:36:
fd:0f:38:7b:b5:6f:b0:98:b3:1b:37:57:1c:fe:63:
7c:3f:12:0f:d9:d1:69:2a:af:f4:5a:6a:b7:da:68:
98:84:45:37:24:18:ac:ec:78:7b:a4:2a:e6:23:87:
d3:78:3f:45:40:e0:00:4b:27:34:a1:5f:31:bf:66:
09:69:3b:72:b2:d5:7b:95:13:d0:ee:16:3b:54:21:
83:05:c5:44:25:35:76:ed:c7:f1:e7:e8:e0:29:5a:
d6:1e:46:d0:a0:fa:b2:67:99:4f:61:57:24:04:f0:
c7:cb:5a:55:fd:e3:d3:9b:a1:4e:60:31:de:15:91:
92:88:8f:f2:a9:e4:cb:ee:60:31:ca:b1:fa:a0:4e:
e7:0f:82:bc:e3:b7:06:f0:5f:b5:d3:49:d7:bc:e4:
09:94:ed:ac:f9:86:2a:9a:aa:84:18:7c:a5:d8:c3:
a4:18:02:8f:b3:23:4e:9f:46:3f:70:ec:52:37:18:
a7:de:e7:89:a4:7b:59:bd:a3:df:71:e6:79:dc:ad:
89:40:65:d8:ab:3f:84:16:db:a4:bb:81:a2:48:27:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:6B:81:CE:18:D0:D5:6A:02:08:70:78:BE:5D:71:83:08:0B:8D
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:96:d8:34:87:40:c5:33:48:06:af:45:7f:08:52:cc:2e:16:
72:f6:cf:cb:b8:b2:45:15:33:63:3f:f5:13:7c:f2:fb:6a:1a:
0f:19:ed:df:79:cb:45:ef:58:72:ce:c7:e4:a3:b9:a2:96:dd:
37:58:99:3e:75:f0:05:24:96:64:1c:f5:36:a6:f5:1b:e6:56:
18:1d:7b:bd:97:5c:e7:bf:4f:59:c9:4b:9d:05:4f:4e:f3:23:
64:f6:93:7f:84:0e:cd:2a:8f:a1:d5:7b:0a:11:5e:2d:82:40:
86:aa:bb:62:cd:47:1f:f6:36:04:39:91:ea:8d:7e:90:47:8c:
76:f9:3e:e3:ad:d4:1a:30:61:4d:b0:c1:e7:33:aa:06:b4:94:
49:db:a8:23:0e:01:f0:ff:9a:1a:0e:bb:11:0c:45:a2:6d:26:
20:6d:43:9a:ee:31:58:a9:94:fc:f6:4b:57:81:37:c7:2f:5f:
11:07:d7:94:5a:b7:91:f8:83:f9:29:62:ca:1d:c0:e0:f2:0e:
84:76:41:93:90:c2:c7:23:68:54:42:85:6a:51:53:60:ff:48:
37:f8:70:f4:47:75:a3:ed:26:38:e5:1f:54:b1:31:5f:bb:e2:
0d:b3:cf:65:f8:e4:51:ae:96:ee:50:90:1c:cf:62:2b:70:c9:
d4:27:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:06 2025 by rpki-client