Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: B4xtlZ3UbcVdE19S4AKGvoS4LUqlVo2Z6V9UPDPdT1c=
Subject key identifier: 47:FA:88:07:86:A7:18:84:25:EF:52:CC:1E:CE:95:4E:9E:A1:FB:29
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0196B6D96B301F40D1F3B9E2C66CF684FB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0975
Signing time: Fri 09 May 2025 21:00:24 +0000
Manifest this update: Fri 09 May 2025 21:00:24 +0000
Manifest next update: Sat 10 May 2025 21:00:24 +0000
Files and hashes: 1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: Gqu3OfcmOWKl/u/Y2jx/Tt7HeBxmZyCbT3pc76AZj2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:6b:30:1f:40:d1:f3:b9:e2:c6:6c:f6:84:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: May 9 21:00:24 2025 GMT
Not After : May 10 21:00:24 2025 GMT
Subject: CN=47fa880786a7188425ef52cc1ece954e9ea1fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:9a:2d:94:35:cd:6d:08:51:99:87:dd:a2:
8e:b6:f3:b2:18:0d:d7:79:74:c6:81:d8:3a:42:3d:
11:70:bd:a5:bd:f2:df:b0:99:b7:30:92:00:4d:84:
39:ab:94:9d:64:bd:8e:ef:19:75:42:79:b4:4d:7d:
9b:a1:8a:b0:0e:fa:9d:30:91:d9:68:b8:8e:70:4c:
6d:1a:99:06:08:a3:2a:14:c1:93:f7:29:df:94:50:
17:f5:9d:04:e9:c5:51:b4:bd:3c:3e:25:99:30:7e:
c6:b9:67:61:79:a6:94:9a:da:b6:5f:17:b2:dd:a5:
a8:ae:dc:09:2f:31:22:c8:51:c8:d3:67:a3:fb:7b:
13:b3:f0:ac:e5:73:ca:89:c1:39:d9:ca:b2:93:ac:
74:f0:c4:67:09:6b:82:ae:0e:09:7a:2c:32:ec:93:
ff:3c:02:ac:c8:6f:24:20:c0:53:ea:f7:3a:50:2b:
e0:74:e6:db:63:66:f5:66:0e:60:27:f2:32:26:a2:
87:d8:42:77:3d:bf:31:40:35:2d:be:fa:ae:89:6f:
46:ce:d9:c2:33:6f:f7:39:22:df:f7:1f:90:2e:09:
72:e3:de:0b:75:ca:dd:3a:39:c9:f4:09:2b:18:37:
ac:31:2f:dd:80:2f:d0:4d:a7:a0:9b:b2:cb:18:88:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:88:07:86:A7:18:84:25:EF:52:CC:1E:CE:95:4E:9E:A1:FB:29
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ac:81:60:63:b5:c7:dd:4f:23:8e:d7:ff:95:51:21:d4:65:
ef:30:29:95:9d:3d:4e:74:a2:ad:7b:fd:2a:f3:dd:ed:07:0e:
f4:84:e5:ae:82:24:7b:ac:79:ed:0f:b4:ec:64:c7:e6:9c:84:
25:15:52:a3:be:3c:4e:61:19:2a:35:35:59:6f:b3:aa:c3:82:
fd:e0:0b:c9:ea:be:b5:dc:f2:39:8d:64:17:12:95:1a:4c:23:
4d:4e:6b:f8:f2:19:49:f0:05:6b:0e:4b:b5:ec:d9:37:38:a9:
4d:dd:e3:2e:47:1a:3b:90:0e:84:06:fd:ad:c9:7a:8e:e7:c2:
29:7d:0a:e7:38:32:fe:66:3f:3c:de:58:f1:80:64:41:33:b5:
ae:b0:a4:22:92:7b:79:0d:12:63:4e:16:9f:14:d2:da:20:c3:
34:67:d0:b7:6f:c9:09:e7:2d:a0:f8:d6:f7:6b:6a:46:d1:08:
a4:37:c2:76:f7:d5:0f:9d:4e:69:81:57:8b:0a:be:0a:71:e6:
d2:3b:5b:a4:50:03:01:a8:98:ff:20:a9:3e:6d:5d:e0:5d:28:
58:63:80:52:41:45:4a:81:e8:fb:70:12:5e:13:af:89:dc:9b:
f5:7a:e6:7a:d5:b6:d6:15:91:bf:3b:52:bc:67:34:d9:f9:dc:
44:be:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:14:31 2025 by rpki-client