Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
File: anosbb5RGgdHJDepoPtPzNEr6J8.mft (raw, json)
Hash identifier: NoNbq/M2Hz3TeUAMPP0391+40rB4d00OFYPFWriSRY0=
Subject key identifier: 84:6C:AA:77:1C:75:2C:2D:C3:0C:D3:34:85:9F:37:C7:43:62:68:4C
Authority key identifier: 6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Certificate issuer: /CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Certificate serial: 01962BCE89185E7B02A19317BBFC0F262F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
Manifest number: 14EB
Signing time: Sat 12 Apr 2025 21:01:17 +0000
Manifest this update: Sat 12 Apr 2025 21:01:17 +0000
Manifest next update: Sun 13 Apr 2025 21:01:17 +0000
Files and hashes: 1: MTWR2-fK-zXP_vo66N4nyK1kX1Y.roa (hash: 6274b1F9aoiTzplMN8aMf75bval3AD8cdeJgbZU5gLo=)
2: anosbb5RGgdHJDepoPtPzNEr6J8.crl (hash: oxHw5ATl/jwfS/PHKmxdEN6DyedglAySCWSUhjmuoWo=)
3: xWfN2IU-diJGvyXLhrBtpHOen6U.roa (hash: dGi8XxSgvv52xppxzLayzkV/Yel0ZIVTBr2h42n6ktI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:89:18:5e:7b:02:a1:93:17:bb:fc:0f:26:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Validity
Not Before: Apr 12 21:01:17 2025 GMT
Not After : Apr 13 21:01:17 2025 GMT
Subject: CN=846caa771c752c2dc30cd334859f37c74362684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:d9:17:15:3a:14:b6:83:b3:9f:25:8a:14:
7f:88:64:4f:1b:84:cc:de:56:4e:e9:54:df:3a:49:
e9:86:c5:23:e8:aa:44:77:97:55:df:3d:22:72:18:
6e:52:fc:54:8e:ee:c2:18:f5:89:9f:62:6a:e3:57:
83:dc:b1:87:d1:b0:a7:d2:53:d7:2f:ba:d6:e2:cf:
eb:a3:fa:ed:9c:08:67:f4:91:a5:5b:bc:58:c6:c2:
e9:a6:9d:aa:d4:7b:5f:56:f4:4f:ee:93:78:36:35:
2a:6d:eb:13:81:31:77:a0:4e:90:6e:30:d0:41:38:
b9:34:3f:61:88:89:5c:9b:c2:9d:7d:67:d3:92:a8:
14:ef:f3:13:ef:d0:2d:87:d9:a0:65:03:44:6a:42:
c8:52:07:1b:ef:48:31:fb:93:b6:39:3e:aa:43:b8:
1c:7c:98:28:8d:30:6a:50:92:ee:16:66:2b:4f:b9:
9f:fa:6b:30:d6:0b:7c:f4:54:f3:32:39:69:47:ac:
6f:b2:9a:cd:89:d6:a9:b8:38:aa:cb:b7:45:02:23:
2a:93:ee:e6:80:7c:1a:dd:cd:ad:fe:7f:cc:6c:68:
28:03:19:4c:b5:12:ba:29:39:3d:71:3a:68:56:b6:
5f:82:eb:50:06:b7:4a:df:0c:b6:d9:24:89:95:fd:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6C:AA:77:1C:75:2C:2D:C3:0C:D3:34:85:9F:37:C7:43:62:68:4C
X509v3 Authority Key Identifier:
keyid:6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:06:09:41:04:dc:cd:51:03:5a:2a:7c:82:a7:08:9b:d1:66:
41:dd:19:3f:6c:1f:f7:98:95:bd:2c:3b:f9:d1:ec:6a:e0:23:
46:9e:5d:1b:07:c0:9a:71:1e:53:8e:71:3f:1f:8e:31:c3:9f:
5c:b6:75:4f:34:52:f2:89:f7:e4:ea:b6:38:d9:b1:db:aa:9e:
12:7f:e4:12:f0:8e:b3:b5:e5:14:9b:37:93:ed:17:cb:74:08:
b7:06:15:d4:20:2d:cd:01:ed:8c:a4:e2:ca:3a:8f:43:34:f3:
fd:c2:7c:dd:43:5d:7a:d2:79:53:48:49:4b:84:9b:93:03:db:
c3:ff:cf:f4:40:ef:70:08:cf:26:6f:6e:f9:51:32:10:d8:09:
32:73:9a:0d:49:5c:55:78:a5:1c:59:61:fb:03:b7:e2:6f:6c:
25:7b:b9:67:e6:68:27:03:dd:ed:a9:29:6e:21:77:91:3e:5e:
0c:fa:91:ca:77:e0:af:4d:55:a6:62:c8:8f:f5:2a:4f:60:b3:
b3:ed:e1:0b:a6:c1:31:6e:c0:8e:e8:b4:b1:af:e3:ac:e3:e9:
d6:49:e9:4b:80:40:b6:99:87:77:9b:32:d9:a5:e1:50:53:bd:
7f:03:36:19:6f:8a:1d:56:da:66:9c:f5:a7:59:4f:bb:81:88:
f3:79:c7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:07:06 2025 by rpki-client