Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: u32qQGE2RL+VxbhFS3d+7bTlqAENTB8SGErRQRcIu0o=
Subject key identifier: 1D:31:D1:4D:9D:F8:6D:AF:36:40:8C:EA:40:21:D5:7B:CA:50:20:CB
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 01974D7C084BA24C47897A65850A49561496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:01:03 +0000
Manifest this update: Sun 08 Jun 2025 03:01:03 +0000
Manifest next update: Mon 09 Jun 2025 03:01:03 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: BFgrK803MYpmUl0oz8OmI1EAD9KwPPLIvr1KMegvAxY=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:08:4b:a2:4c:47:89:7a:65:85:0a:49:56:14:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jun 8 03:01:03 2025 GMT
Not After : Jun 9 03:01:03 2025 GMT
Subject: CN=1d31d14d9df86daf36408cea4021d57bca5020cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:3d:07:7b:5c:87:d3:9c:98:77:7b:56:1a:
e9:93:64:d5:f4:5c:dd:2f:58:fc:9b:6c:45:26:4c:
18:27:ce:01:51:07:a2:16:a7:bc:37:c0:51:55:6d:
a2:ee:69:e7:53:4d:5f:2c:48:35:56:7c:76:e2:63:
bf:64:c4:87:f0:3f:10:96:a2:3c:05:c7:01:67:0a:
5d:db:74:36:f1:a1:ff:48:f4:a0:49:91:5d:b4:a9:
a7:75:cc:5f:bf:9e:55:1e:8e:89:b6:3f:47:49:4e:
62:f6:3e:92:f1:61:b2:56:4f:98:0c:91:8d:ce:10:
99:f9:13:69:c8:95:94:1c:7d:bb:3e:ab:18:d0:e5:
88:a1:f6:30:1f:ad:02:07:86:81:02:a8:28:c4:2a:
3f:c0:15:14:c1:97:a7:3b:c0:80:b0:26:61:47:e1:
20:d6:1d:3f:bc:42:9f:56:45:4a:e3:db:3e:19:ed:
ec:27:bf:27:88:71:b4:ec:b9:4f:85:28:58:d4:be:
25:82:39:c8:03:58:e0:b2:da:d5:b6:58:1f:98:e2:
b5:2e:09:77:0f:83:d2:29:ea:5f:f9:a9:f5:e8:f9:
ce:e0:f7:0c:85:16:30:9f:fb:1d:f7:40:4e:f8:81:
6d:3a:e4:ca:a2:9b:21:29:3b:98:38:f3:86:df:31:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:D1:4D:9D:F8:6D:AF:36:40:8C:EA:40:21:D5:7B:CA:50:20:CB
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e5:38:40:f6:64:f9:cc:8f:fe:55:bb:18:55:69:04:45:97:
14:3f:8c:bf:fa:93:91:00:d1:c7:f4:0c:cb:bc:bc:bd:6d:0f:
d2:4d:e2:04:db:7f:90:fa:46:e2:53:1d:5c:8d:00:95:e6:25:
c4:bb:f9:1f:75:97:1b:07:59:50:7a:e8:06:17:de:28:7d:4d:
83:3b:8e:a2:b1:d0:c3:a4:bb:f3:a6:fc:2d:01:14:1c:b8:74:
98:dd:d6:26:43:d8:eb:3d:94:e3:9a:66:48:07:bc:d7:a2:f7:
02:ce:6a:18:15:96:72:29:4d:95:09:3b:f9:c2:b1:6a:be:7b:
c2:7c:d2:e7:97:6b:0f:f6:bd:bc:57:1a:82:a2:21:92:54:fb:
58:59:8c:f0:46:3a:fc:1e:42:cd:b2:50:dd:be:21:fe:4f:37:
b0:77:00:9f:21:99:84:65:75:76:9f:06:29:b1:d6:31:b2:8f:
58:ed:fb:e4:dc:52:74:8a:23:fa:4e:7c:22:ac:4b:b5:db:fe:
76:dc:a4:15:6a:f6:1c:13:2c:46:60:4e:05:8d:7d:b6:94:45:
e2:88:a2:e4:d4:7f:20:96:f8:05:2d:a1:43:1c:f4:a2:56:b8:
68:25:12:95:42:1f:82:c2:7a:00:a0:4a:2f:83:71:34:ba:54:
1d:bd:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:54 2025 by rpki-client