Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: 3M+VA59VNfDIqUHfekvctTh4ucrteqMsFERgGCmTW7g=
Subject key identifier: 50:57:DE:4E:C2:EC:4C:97:7D:E3:0E:52:00:2A:A5:F2:30:33:68:B6
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0197B7B34CDB07CE6653C4AA83966C075913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: 2wnUM0IlYDcZ3E/n8NTVwK3o1f/e6Wttj7k0tJPNHcE=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4c:db:07:ce:66:53:c4:aa:83:96:6c:07:59:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=5057de4ec2ec4c977de30e52002aa5f2303368b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:d9:7d:99:fc:6d:ea:a1:ec:1d:7c:33:0b:
f6:41:48:b4:09:24:2b:3c:e1:6e:14:40:a6:08:06:
62:94:29:42:b7:fc:ac:9f:6c:c1:c4:2e:84:69:90:
10:b4:1e:1b:8a:4f:ca:32:31:74:bf:c7:26:03:99:
39:3e:a2:0d:d5:51:f3:f7:95:dc:8a:21:0d:93:2c:
50:c8:59:e1:81:f9:41:49:bf:c9:84:ce:f2:32:c2:
a8:b8:35:b1:61:f3:f0:2c:e1:b4:e7:0c:ca:57:1e:
66:ee:b4:ed:20:10:12:88:8e:a6:83:a1:a9:b2:c9:
42:3d:d7:e2:13:11:4a:7a:62:f4:64:31:f7:dd:c6:
09:2b:ce:6a:50:3c:66:ce:f5:3d:1f:65:62:06:5b:
78:d2:ee:43:55:68:90:d3:8c:44:e9:52:55:8e:92:
3a:68:e7:08:a1:88:bd:10:8f:a8:56:df:57:ef:f8:
ae:b7:28:10:93:c6:77:be:9b:09:a8:db:05:cc:25:
2e:0f:99:3d:1d:0f:f9:69:86:1a:ca:5f:cf:8b:8e:
29:c1:17:9d:6c:13:b7:5f:ea:9f:2d:0c:ac:b9:65:
06:f3:2d:ab:74:47:60:25:6a:d1:be:ee:9b:e4:8f:
fe:b2:a8:64:61:fc:dc:d1:4b:ed:a9:44:3d:aa:65:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:DE:4E:C2:EC:4C:97:7D:E3:0E:52:00:2A:A5:F2:30:33:68:B6
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f0:2e:9d:bb:d0:25:53:56:05:20:2c:1a:16:4c:72:46:d5:
55:de:92:94:2f:60:67:ab:91:b8:51:37:5e:84:ef:50:40:7d:
54:54:47:51:b6:dd:14:91:36:bc:49:ab:59:03:87:aa:7f:de:
e1:75:24:31:42:ea:c7:fc:1b:a4:d1:9b:fc:2d:16:83:d9:a5:
1d:3c:24:44:e4:a7:c8:b8:1b:25:47:c0:31:18:16:de:a1:0b:
e5:31:88:32:a0:08:f5:c8:77:55:06:25:3d:37:45:00:cd:ff:
65:d7:72:23:c5:91:5c:b0:20:65:3e:22:45:f5:74:60:ed:88:
1e:62:e5:64:a8:23:01:d1:d8:35:0d:7c:f2:0b:f0:f4:6e:e9:
76:1e:62:11:4f:27:7c:8d:5e:f7:7d:09:d3:5f:e3:aa:f9:d2:
0e:36:c9:bd:16:0d:f4:0d:43:55:91:1b:8d:ce:54:49:ec:02:
ec:05:ef:36:65:9f:52:5f:ff:b2:09:94:e5:73:d7:17:f4:dd:
ae:66:1c:db:f4:b8:45:43:d0:b7:80:8d:41:bf:41:f4:ce:10:
d7:8b:83:dc:2b:d9:9e:7d:75:2e:30:5a:ff:08:f3:10:1c:00:
93:a9:db:99:0e:3d:91:08:d8:2e:cf:a2:d1:9d:23:68:3f:f3:
8e:d8:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:34 2025 by rpki-client