Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File: Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier: D9xBXXRzRgK+nXiJA5RuCgIP5r8ISH+ydGM0jdIgypg=
Subject key identifier: B3:BC:37:8F:99:DF:4B:73:4F:8E:2F:61:2F:C0:7D:C2:92:D7:6A:DC
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer: /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial: 019747E7B7E3AB12C32A61CAAA1BBE2FB3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 01:00:57 +0000
Manifest this update: Sat 07 Jun 2025 01:00:57 +0000
Manifest next update: Sun 08 Jun 2025 01:00:57 +0000
Files and hashes: 1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: t3+jCZbHhUm0ZMjh0lSwrxmxWtDF4zhrdXuYFRAieJM=)
3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b7:e3:ab:12:c3:2a:61:ca:aa:1b:be:2f:b3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Validity
Not Before: Jun 7 01:00:57 2025 GMT
Not After : Jun 8 01:00:57 2025 GMT
Subject: CN=b3bc378f99df4b734f8e2f612fc07dc292d76adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:83:24:60:d6:4f:f8:29:18:64:90:80:e7:
de:cc:7f:3f:a2:0a:c0:12:3e:41:61:d9:4f:af:01:
07:be:b9:37:41:49:c0:2b:3e:a7:3b:35:56:8d:6b:
b7:de:ca:27:a6:cc:68:51:c0:15:c2:49:d9:cf:9c:
65:a3:a0:80:ab:34:84:a7:77:15:eb:57:e9:2e:c6:
b3:62:04:86:c3:23:dd:75:85:40:6a:ec:31:26:49:
b5:a9:f7:7d:5f:8a:9f:f1:61:83:2e:36:08:19:e0:
66:a5:dc:77:77:2c:c0:f3:8f:48:28:26:2f:b2:5d:
a8:02:fd:0a:44:fc:3c:96:7a:89:ee:c7:52:c1:2a:
58:52:e7:1c:4c:17:ac:71:f5:95:9d:5e:2b:5d:8d:
90:7a:61:2a:c4:5a:ea:76:71:a6:b4:79:9b:1a:7b:
cd:e0:6c:ba:0a:f7:24:19:fc:f0:0f:69:b9:1a:64:
20:3b:ec:d7:bc:5f:b4:d1:84:fa:27:2f:83:35:c4:
e0:da:3b:c4:6b:35:c6:61:29:4d:95:82:7f:be:28:
94:89:0d:ab:39:61:81:8c:78:3e:76:f8:4f:4c:d5:
98:ea:19:db:89:20:ba:dc:a8:ed:d2:3a:8f:f7:6d:
49:fb:a7:26:3c:1f:56:26:92:37:78:b1:fb:cb:53:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:37:8F:99:DF:4B:73:4F:8E:2F:61:2F:C0:7D:C2:92:D7:6A:DC
X509v3 Authority Key Identifier:
keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1f:ee:39:e4:a9:d6:1f:4b:0a:11:90:93:cb:6a:a3:05:3b:
52:55:ff:50:34:17:6f:1e:3b:0e:db:f9:23:e1:a2:35:99:8c:
40:01:33:c9:cc:7b:87:2a:d5:03:a2:96:e7:65:72:04:7d:49:
01:80:03:f3:eb:65:0f:63:97:7b:e6:60:32:16:87:c1:37:5d:
89:bb:60:bf:1c:dd:06:6a:0b:fe:47:8a:e2:c4:c1:5d:64:8f:
83:89:10:e9:de:83:a0:bf:6a:50:bf:28:03:25:89:e8:d1:3d:
26:94:32:2f:84:1f:71:17:9b:76:31:3b:ae:f9:3e:af:df:65:
eb:4f:59:74:68:d5:1d:47:13:85:34:34:86:b0:5f:98:4f:2a:
10:74:e1:6a:ea:57:9b:df:3f:f3:a8:92:b7:2f:0d:17:c8:32:
c1:ea:7f:d4:85:d3:4e:fd:10:27:cd:32:37:a8:7f:6a:85:90:
5e:47:72:25:ce:e9:4b:06:2e:3d:03:d5:89:8d:df:21:21:d3:
71:b9:0c:c9:0e:a1:cb:5b:7a:0e:1c:66:4e:cb:df:75:99:bd:
a1:47:7b:8d:aa:0f:4c:33:29:72:2b:b2:84:fe:07:fe:8d:52:
9e:ca:3e:98:0e:34:3d:e9:b8:c3:59:24:a9:10:3c:e4:dc:dc:
81:38:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:51 2025 by rpki-client