Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
File: anosbb5RGgdHJDepoPtPzNEr6J8.mft (raw, json)
Hash identifier: Qi3VaaKA0vAz52B8vkMzMYrWegbQT4cUbbLZh/f7DaM=
Subject key identifier: 4B:75:28:EC:52:44:04:3C:7B:3A:66:C8:38:1B:61:C5:A3:5E:D5:F9
Authority key identifier: 6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Certificate issuer: /CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Certificate serial: 019743D44697ABCA81726AC333380B97214A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 06:01:14 +0000
Manifest this update: Fri 06 Jun 2025 06:01:14 +0000
Manifest next update: Sat 07 Jun 2025 06:01:14 +0000
Files and hashes: 1: MTWR2-fK-zXP_vo66N4nyK1kX1Y.roa (hash: 6274b1F9aoiTzplMN8aMf75bval3AD8cdeJgbZU5gLo=)
2: anosbb5RGgdHJDepoPtPzNEr6J8.crl (hash: I0HL0Fc6xwVIY3PRluwmadegVhZMJnfcRGNK/qztnrE=)
3: xWfN2IU-diJGvyXLhrBtpHOen6U.roa (hash: dGi8XxSgvv52xppxzLayzkV/Yel0ZIVTBr2h42n6ktI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:d4:46:97:ab:ca:81:72:6a:c3:33:38:0b:97:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Validity
Not Before: Jun 6 06:01:14 2025 GMT
Not After : Jun 7 06:01:14 2025 GMT
Subject: CN=4b7528ec5244043c7b3a66c8381b61c5a35ed5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:42:a7:76:8e:11:ea:2f:4e:b5:0f:99:0f:
64:74:b4:9c:11:0a:40:31:4c:3f:64:19:de:d7:7c:
fe:79:09:a9:e4:b5:c6:99:62:9f:31:07:71:7f:a6:
52:c7:25:16:f9:af:05:93:68:a0:05:5d:ab:35:20:
49:c1:56:57:bd:c3:ba:00:a7:14:93:4b:f1:27:f3:
07:d9:c1:ae:12:1e:ea:7c:ac:2d:3e:4c:a7:f1:f9:
29:e2:01:53:be:5d:39:02:0c:81:7d:c8:c0:6f:8a:
bf:2b:1f:8c:6d:a0:21:59:92:da:f0:60:a3:60:5c:
4d:52:cf:ed:9d:a1:f6:c4:ad:83:98:15:aa:4b:6d:
1b:7d:1d:a9:43:4b:6c:90:eb:11:87:e2:da:a4:18:
52:cb:60:48:1b:0c:07:21:5a:71:35:1a:2a:41:b3:
ee:39:53:d6:81:5e:8a:c9:a7:14:6d:a0:d4:59:63:
6d:d5:6e:77:48:07:68:5b:4a:3b:8f:1b:7e:b5:5f:
be:f6:88:80:c0:04:d8:c1:c0:6f:d5:d4:6e:83:eb:
36:75:66:05:a7:ec:a6:8c:a7:7f:c5:5c:93:25:51:
75:a7:c1:3a:a9:d1:79:a1:a2:27:66:5d:7d:ca:10:
c8:cb:79:d7:74:79:d1:38:05:87:ad:36:b5:51:94:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:28:EC:52:44:04:3C:7B:3A:66:C8:38:1B:61:C5:A3:5E:D5:F9
X509v3 Authority Key Identifier:
keyid:6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:a1:d7:13:f1:db:41:cd:9c:02:db:7a:2c:a6:69:e6:0a:
0a:df:8b:1c:36:20:2e:a6:53:b3:6c:c7:bf:05:d7:47:d0:a8:
82:51:ca:83:7c:7e:ab:11:aa:3f:cf:70:58:fb:3a:05:b1:80:
26:06:93:56:25:29:4d:ea:d4:dc:b0:e0:b0:16:12:1e:38:b2:
55:3f:39:39:a5:ad:f2:88:35:c4:64:ec:62:ff:e8:29:a7:ad:
05:a6:f0:8f:82:2a:55:3d:25:cb:ba:4e:11:78:7c:7c:15:e4:
24:87:a9:2c:c9:1b:43:5b:c4:c9:33:41:6e:d6:47:a7:83:f9:
0a:c0:99:1b:3e:44:c8:b1:34:86:34:0e:6b:d3:de:c6:33:f6:
26:f5:cb:94:41:b0:0f:e2:12:01:27:be:3d:f2:38:d4:ba:a6:
26:a6:08:27:95:6b:66:30:6b:41:71:2a:2c:4b:e6:55:a5:b4:
27:93:6f:e4:24:ad:7c:ef:ff:9e:b6:55:7a:ed:3e:41:2f:09:
83:91:08:b4:68:36:e5:c2:b9:5c:e6:5b:a7:6a:3e:65:5d:29:
b2:d7:78:e6:d5:02:8e:1c:4c:be:59:01:94:09:3c:e7:ae:06:
86:d7:73:db:5f:cf:49:c8:50:2e:30:c3:e5:6d:7b:79:16:50:
b1:08:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:37 2025 by rpki-client