Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: b2PzzIZ7CFHlRbL1WstTHBflSVWJFD4fYS54FY1dLPo=
Subject key identifier: 93:CB:02:22:FD:91:C3:BA:F4:0C:22:0C:7B:9E:63:21:C8:E6:8E:AD
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 0196C916A3FE76E4B7E36D6F53F2CCAC46F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 083F
Signing time: Tue 13 May 2025 10:00:26 +0000
Manifest this update: Tue 13 May 2025 10:00:26 +0000
Manifest next update: Wed 14 May 2025 10:00:26 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: kCK2p3oq+3xHIpasxLOXM246id/gl0WIievpi4NKIqE=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:a3:fe:76:e4:b7:e3:6d:6f:53:f2:cc:ac:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: May 13 10:00:26 2025 GMT
Not After : May 14 10:00:26 2025 GMT
Subject: CN=93cb0222fd91c3baf40c220c7b9e6321c8e68ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:aa:da:46:28:cb:21:63:a7:b1:c9:b5:72:
37:79:5a:80:05:17:ed:27:39:f2:7c:54:1f:ef:90:
ed:24:26:95:1b:80:c8:86:03:5f:c3:b0:3e:51:b5:
58:82:bb:2a:07:42:cf:4b:5e:51:1a:f6:ba:69:db:
4f:ec:bb:6d:34:16:c5:38:73:5f:84:b1:54:7f:0a:
d0:f8:2f:00:a5:1a:b5:72:15:d8:d8:f9:95:97:75:
6e:90:17:ae:ba:c7:10:bd:37:04:52:4c:03:87:bd:
7a:ea:a4:a4:e2:3b:c1:07:20:89:50:33:56:62:79:
83:37:4d:4c:37:e7:b4:af:24:11:17:e1:0c:53:ec:
fe:ee:7b:88:a5:f5:6a:c0:50:0c:7a:89:49:b4:19:
6e:38:03:a7:2b:23:43:c1:1c:d1:6a:65:92:c9:8d:
fd:51:6d:39:49:8f:8f:5e:83:99:90:83:af:6c:43:
d9:ce:a6:08:2a:01:a2:9d:1d:de:88:3a:e8:fa:a8:
08:66:73:a3:8b:40:a4:84:ed:90:47:21:d3:4a:b2:
a2:9f:1b:9d:a3:c5:50:10:0d:73:0e:7a:8c:ce:a4:
b8:c9:4b:0b:c8:9b:3c:39:5b:e2:bf:41:59:13:27:
07:01:18:80:bd:15:40:3f:46:5d:38:2c:ee:18:44:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:02:22:FD:91:C3:BA:F4:0C:22:0C:7B:9E:63:21:C8:E6:8E:AD
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e2:0f:ac:36:6c:b5:e3:07:62:c7:50:87:08:02:f0:23:40:
a2:ce:a9:fe:b1:a1:52:80:5e:50:cf:64:6a:c7:ad:3e:75:55:
c8:9a:5f:99:90:21:62:11:9e:84:fb:84:da:d3:88:2a:e2:8d:
8f:64:8c:cf:55:c5:3d:a2:fc:9c:be:fe:84:e9:88:85:13:9c:
3b:69:6a:6b:b5:57:56:b2:0e:14:f4:47:43:6a:d0:08:4a:8f:
e5:0e:44:e3:9d:7c:fe:1e:43:69:09:21:3d:9a:b0:c9:64:9d:
fd:cc:d3:e1:a5:ca:57:6b:2e:23:95:67:61:5d:b2:55:9d:c6:
6a:e1:60:b6:d1:76:44:77:6d:d0:83:c0:3a:c7:a2:99:25:90:
af:ee:d4:bd:3f:db:a4:9c:6a:35:85:8e:2a:00:64:15:05:d8:
79:e6:01:c8:2b:dd:d8:7c:b8:dc:42:e4:88:7d:59:b2:5f:99:
18:b9:e6:f1:28:83:6b:87:36:02:d6:aa:22:3c:1f:7e:b1:ff:
37:f4:83:1d:09:b4:d4:d7:b2:8b:9b:e7:5e:c1:e5:57:8d:0a:
c1:82:58:85:fe:6e:b6:0c:e6:41:49:c3:24:39:85:ea:4d:0b:
62:af:73:71:bd:16:bb:d1:88:c1:3a:12:03:ed:8e:5d:50:a1:
67:06:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:35:51 2025 by rpki-client