Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: AMXDRFOFpuIvP/Y+HCDPDMfrvFdGBkITS/pv0SIkE08=
Subject key identifier: 92:BD:D2:51:73:EB:E7:4E:E1:6C:FB:E5:9D:FC:02:E4:D0:AF:3F:B0
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0194BAF234E1933F5E338AE7F0E416C5522D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:22 +0000
Manifest this update: Fri 31 Jan 2025 06:00:22 +0000
Manifest next update: Sat 01 Feb 2025 06:00:22 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: gLgofy5G6E7GoBsg+ca7t56Q42F8VpRTUrV3GIlhKyM=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:34:e1:93:3f:5e:33:8a:e7:f0:e4:16:c5:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jan 31 06:00:22 2025 GMT
Not After : Feb 1 06:00:22 2025 GMT
Subject: CN=92bdd25173ebe74ee16cfbe59dfc02e4d0af3fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:ef:e9:12:28:ea:29:29:d4:c7:b1:f7:1d:
2d:c9:0b:a4:d5:12:84:6e:1f:d4:8a:b0:36:aa:d0:
85:3a:8e:2a:31:67:7b:bd:fe:e4:ae:fa:b0:d7:8d:
45:25:1f:4f:b2:ea:66:3e:42:2f:ce:95:e2:d9:de:
c9:de:4f:47:20:4c:ad:bb:1d:09:4f:35:df:d5:9f:
a8:3d:b8:02:07:13:14:87:08:67:7c:83:3d:39:45:
cc:08:4c:d5:40:06:e0:9b:92:b4:85:49:31:02:83:
c7:9e:c6:fe:23:f8:d9:98:b0:78:d1:69:fb:be:66:
8d:60:0b:40:f0:fe:c9:ef:26:32:c2:c0:70:a6:05:
34:31:03:73:16:83:52:f5:fb:79:44:e3:60:ad:e8:
ac:55:0e:7b:27:1c:eb:5c:0d:69:7c:c6:05:ea:03:
11:ea:73:09:22:74:f8:cc:db:38:99:5f:16:fa:f7:
66:68:71:8b:e0:07:35:71:c0:88:a7:05:e2:2f:24:
c5:4a:51:89:40:c1:fe:6e:b4:3d:18:5a:bd:4d:3f:
24:d8:9c:0d:20:ca:02:cd:f8:07:50:ef:2e:79:49:
be:e3:5c:41:57:c4:69:ef:0e:bb:35:86:3b:a3:3b:
bb:c6:79:2d:b1:ac:af:00:7c:cc:a7:0f:9c:a0:81:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:D2:51:73:EB:E7:4E:E1:6C:FB:E5:9D:FC:02:E4:D0:AF:3F:B0
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ae:6b:70:58:33:46:ce:98:bb:3c:d1:75:79:34:b5:b8:72:
1b:02:0c:15:8b:3b:44:eb:9c:c3:3f:db:66:2d:8b:08:5b:01:
3e:aa:ad:92:33:c7:dc:af:14:15:4d:45:28:62:d5:6b:cf:73:
54:19:8d:a5:ae:7d:30:c4:ae:c9:0b:0f:c3:75:49:d3:33:b5:
b2:5e:1c:93:46:8a:7b:9e:ff:09:b6:b4:13:d5:76:05:76:0e:
8a:49:8e:e5:b3:5f:de:e0:a7:58:d2:74:83:e8:e9:38:a0:33:
83:f3:2a:6d:97:b4:bc:23:82:04:db:a8:27:ff:a9:d2:2f:f9:
a0:f3:81:48:7e:b3:13:c2:b4:60:71:4b:65:6f:2e:1b:5c:72:
dc:41:3f:46:56:f6:99:60:9b:1b:bd:81:8a:e1:94:db:c5:27:
35:ab:be:96:0a:b3:e5:e5:93:16:d7:fe:76:ce:1c:1c:83:6a:
68:a7:d5:90:95:81:87:28:69:d6:48:71:fe:0d:97:a9:12:27:
bf:ab:fb:b7:cb:59:ef:91:a6:86:f2:ac:6f:cf:fe:b8:15:24:
9e:07:6f:ec:f8:b7:cb:7c:cd:f7:22:9f:02:fc:e2:70:6d:30:
71:d2:e4:2a:d6:fa:7b:11:ad:cf:61:48:e8:cf:43:dc:26:0c:
5d:48:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:19 2025 by rpki-client on console-fra.rpki-client.org