Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json)
Hash identifier: qkxsDMat3ht/NqWmW5I+OkfgQIj7vgjRPo9K0bzQeMk=
Subject key identifier: 55:A5:01:7F:C4:8B:4D:51:6D:A9:81:CE:54:7A:80:CA:DA:0A:2B:29
Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Certificate serial: 0196A8E6EAB337E6C3C621395E421AFD079E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
Manifest number: 0C61
Signing time: Wed 07 May 2025 04:00:27 +0000
Manifest this update: Wed 07 May 2025 04:00:27 +0000
Manifest next update: Thu 08 May 2025 04:00:27 +0000
Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: nGaT8/lYCrHYIpgkkQt0y1bku/ASETNKPVPSvBs46kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:ea:b3:37:e6:c3:c6:21:39:5e:42:1a:fd:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Validity
Not Before: May 7 04:00:27 2025 GMT
Not After : May 8 04:00:27 2025 GMT
Subject: CN=55a5017fc48b4d516da981ce547a80cada0a2b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:65:21:79:1a:75:06:42:7f:20:bb:ee:f5:
f1:2d:b6:1a:f5:95:e7:e9:ba:78:eb:fa:7d:3e:97:
19:e1:47:fa:cb:eb:2a:d8:65:17:2c:6b:ee:20:89:
4d:3e:68:57:f7:56:d7:68:22:43:5b:c8:a7:92:25:
1e:ea:55:d8:ec:88:76:88:d8:1b:e8:f4:1e:dc:c3:
fc:11:83:ac:6f:2f:04:26:14:d9:8a:e6:c7:63:2c:
3b:d2:90:cd:17:f6:ad:10:52:13:0d:18:ed:9f:1e:
34:ca:93:62:47:61:66:83:e0:02:59:87:ea:04:35:
4d:f8:6a:d8:39:d1:3b:e3:13:a1:b6:b9:5e:e7:4f:
5a:cf:b9:dc:98:f3:ee:bd:ed:d6:dc:05:e5:15:11:
aa:b5:1f:53:99:25:24:7e:4d:00:20:34:c6:51:8d:
ae:93:e8:a9:77:49:da:c0:5a:c8:00:e2:34:1b:30:
9e:66:da:73:ed:87:a6:17:a5:9d:dd:5a:ab:b1:31:
c4:1b:84:00:27:2e:04:89:91:02:c4:c0:e7:f1:40:
ae:cb:06:c5:e1:ea:84:b9:64:02:39:7a:3d:69:72:
53:0e:eb:e6:05:74:83:bf:d3:f1:a8:bc:2b:86:89:
76:90:0c:c6:16:3a:eb:c4:14:93:87:7e:8b:59:a3:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:01:7F:C4:8B:4D:51:6D:A9:81:CE:54:7A:80:CA:DA:0A:2B:29
X509v3 Authority Key Identifier:
keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c9:db:60:69:c0:48:7f:bd:c9:be:ce:f5:ed:79:86:fb:46:
65:da:cf:4c:1c:72:87:f3:8d:b1:98:05:b3:f8:9d:5c:4c:0b:
6e:f3:21:0e:70:ba:e1:f8:e3:4b:b4:17:ab:d6:3a:5e:4c:d1:
fd:07:ae:03:81:81:dd:9e:d8:a3:b8:b1:4f:9c:30:bc:4f:de:
69:4c:d4:46:c4:35:60:c5:b4:bb:53:17:b0:5f:12:81:1f:b0:
0d:64:7a:c0:c9:04:6c:73:33:df:dd:58:85:46:0e:50:da:50:
93:75:d5:80:fd:3b:e5:e1:26:1f:df:04:4b:9c:da:b3:75:50:
1c:78:23:32:59:12:5a:8b:cc:83:22:a0:e3:b5:a3:b2:67:8c:
20:f0:13:e1:d9:92:1a:91:94:7a:24:68:0c:ec:0f:21:0d:87:
01:84:ab:39:96:6f:f9:fe:ab:34:fa:4f:5d:55:7a:37:ed:9d:
7a:80:e4:53:ef:79:64:95:80:89:6f:1f:89:10:2a:dd:68:2f:
31:18:e8:86:70:96:39:f9:21:a5:1d:cb:fe:e6:9c:c7:f5:a1:
d3:a3:b2:8a:2f:8a:58:6d:a4:73:7b:53:65:c8:8f:47:63:b1:
08:a4:5f:bd:99:8e:77:2a:da:45:ad:22:5f:7b:8f:29:39:b3:
86:e3:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:55:38 2025 by rpki-client