Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: bI83kxEsxjTkqG3JlJVKJA6OJYlO2ThhBMyn60/VyQc=
Subject key identifier: 1F:69:70:AB:7A:D8:11:67:CD:A1:EF:E8:90:94:F1:74:18:6C:65:D7
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0196CE0626764E36A35C991137F91A506BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 09:00:31 +0000
Manifest this update: Wed 14 May 2025 09:00:31 +0000
Manifest next update: Thu 15 May 2025 09:00:31 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: KAJpOC1gZGPMu3L7weeCBhKGu4BTRoL6qxdKWtFuces=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:26:76:4e:36:a3:5c:99:11:37:f9:1a:50:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: May 14 09:00:31 2025 GMT
Not After : May 15 09:00:31 2025 GMT
Subject: CN=1f6970ab7ad81167cda1efe89094f174186c65d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:ec:c9:ea:77:88:4d:ef:63:dc:f2:ef:33:
d0:42:70:a9:7f:61:76:db:cb:d2:e0:31:79:73:a9:
42:14:26:9b:83:87:a6:41:52:d8:af:6e:b8:19:76:
b2:f2:d3:d8:dc:6b:8c:f8:1f:08:27:6b:d4:cb:37:
64:77:47:89:29:c9:96:89:0a:8c:71:75:eb:2f:66:
22:56:bc:ba:9e:a3:6b:3f:35:aa:28:f6:b6:69:37:
d0:50:e9:1c:7e:37:fd:3c:3a:03:2d:82:22:f4:fd:
45:d8:12:97:99:93:4c:4a:a3:30:ea:fe:13:31:42:
9b:98:5d:f4:f8:96:ba:b1:1c:12:33:51:a6:17:b4:
c2:e6:a2:ec:03:8d:7d:d3:8f:63:a5:fd:c8:ec:87:
3f:33:60:aa:c7:8b:c8:f0:57:4c:94:c4:be:97:a9:
87:dc:0f:ce:de:27:7f:16:97:67:17:31:69:1c:57:
85:fc:a0:fb:70:0b:23:c1:b0:84:c5:ad:50:3a:47:
17:28:40:57:22:c2:8b:8e:d8:b8:74:6c:fe:9d:b0:
f6:05:7b:de:5e:bb:a3:43:be:bd:76:05:d4:a1:31:
7c:59:c5:3d:13:fe:a7:bb:f5:ad:5f:56:01:f9:b2:
67:37:f3:c9:ba:fe:a3:ee:dd:d3:22:29:fe:bb:93:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:70:AB:7A:D8:11:67:CD:A1:EF:E8:90:94:F1:74:18:6C:65:D7
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:26:90:c7:c9:28:71:86:85:63:ba:3a:8f:d9:a3:ff:be:
c2:7c:ef:c8:99:0c:71:fe:57:28:88:7a:34:56:4a:91:43:f5:
26:ee:24:59:90:8b:d5:1e:da:5b:38:66:46:a6:8b:93:b8:9a:
b6:02:7f:c3:f4:76:eb:cc:84:ef:f3:3c:37:47:8c:a6:52:40:
db:ab:72:c4:46:e1:7f:1d:c9:74:02:98:0f:b3:d3:f0:d9:f7:
8a:78:8f:c6:c3:49:fe:f4:02:a3:39:77:9c:d0:fd:63:b1:92:
2f:51:1f:7b:4a:30:2b:71:d6:05:97:b3:c8:47:26:90:7e:52:
83:a3:81:b3:4b:fd:d2:bf:98:68:7e:d9:8f:2b:be:90:99:3f:
12:e0:0b:b7:43:de:63:76:db:f1:a3:ac:24:23:52:7c:a8:cf:
aa:f9:73:8f:a6:f0:32:90:12:38:dd:59:46:4b:d2:fc:d6:99:
30:88:9f:96:54:22:3b:c3:84:70:eb:a9:18:a7:e4:10:22:e6:
93:95:57:7c:fa:bd:e4:8b:6f:e4:26:e2:e3:86:ff:b6:89:82:
01:7e:da:cc:84:f8:9c:db:e7:5b:94:90:e9:04:77:79:54:69:
3d:d1:30:bd:e8:5b:42:fa:ab:d3:9c:5f:c4:bd:5f:54:c3:01:
d7:83:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:57:16 2025 by rpki-client