Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: 3UDZ3XA6lhOo4t0cNlTI3azrxEYnB7kaWxaoOnVLUnY=
Subject key identifier: 64:51:29:F0:BC:DE:4F:A6:EA:B6:4A:67:E0:3E:8B:38:25:34:E8:44
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01967A8D863147668D0F66CABF489F3D1DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 04:00:17 +0000
Manifest this update: Mon 28 Apr 2025 04:00:17 +0000
Manifest next update: Tue 29 Apr 2025 04:00:17 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: QHVAXTPLXXqv4jBNFVuyZduyRkIqTNsuq7ng6dRfzJs=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:86:31:47:66:8d:0f:66:ca:bf:48:9f:3d:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Apr 28 04:00:17 2025 GMT
Not After : Apr 29 04:00:17 2025 GMT
Subject: CN=645129f0bcde4fa6eab64a67e03e8b382534e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:92:0a:a8:4c:63:be:34:47:e7:bb:36:d3:
83:b4:49:d7:5e:66:91:21:ba:72:83:87:62:d0:8c:
f8:2e:df:99:4f:7c:6b:cb:e7:6f:a3:85:1b:a3:ba:
d8:32:1e:b9:e5:37:4e:2b:58:f4:ec:3e:43:f6:10:
92:4f:ce:c5:d7:dc:b5:77:eb:bd:ea:d8:1a:a6:a0:
8a:c5:e3:10:75:52:9e:ca:bd:77:41:d7:89:78:ba:
b0:64:bd:61:80:da:f8:21:a7:35:11:b9:de:f0:19:
2c:a9:bd:e4:90:f2:36:0c:ca:7e:28:00:27:dd:82:
df:f9:dc:13:f5:76:14:ed:84:a9:94:48:c2:26:21:
f2:09:2c:74:5d:6b:3d:0f:ba:48:8e:22:e8:c7:c8:
01:ff:cb:63:b9:64:46:08:05:ad:84:1b:a9:46:2f:
ed:18:ee:bd:97:63:61:5f:63:73:e9:f6:f8:97:83:
91:40:79:e7:79:8a:47:22:b9:c1:e9:a8:aa:9c:dd:
bf:f8:2b:21:dd:32:88:95:42:39:41:5f:5b:fb:ba:
71:15:c7:3d:58:d5:56:2b:1d:25:3e:f0:62:14:b8:
49:02:9a:86:9d:7b:fe:b6:8f:23:10:12:cf:f6:ed:
1d:1b:be:68:24:5f:f1:c0:d1:b2:15:e9:ac:4d:11:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:51:29:F0:BC:DE:4F:A6:EA:B6:4A:67:E0:3E:8B:38:25:34:E8:44
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:0b:3b:fa:88:32:dd:de:e2:e0:fa:60:e3:cc:10:1f:63:
4f:fc:36:2f:71:8b:8c:1a:c1:d4:4e:48:c8:ba:73:4d:64:23:
43:b3:36:35:d0:81:9f:bf:da:43:ec:6b:76:8d:74:b1:92:60:
a1:d4:77:58:09:a7:ea:1b:5c:ae:1b:da:a2:31:68:10:ff:a8:
d6:5c:7d:7b:69:ee:f9:22:3c:11:d1:24:b8:e2:1a:d0:7f:57:
4d:46:2f:4b:b4:0a:90:cc:3a:33:70:33:cf:a0:ca:c5:97:ab:
19:01:19:3d:f6:84:2e:b5:0b:fe:95:7d:50:44:da:85:bf:18:
a9:20:59:bb:ab:36:18:a0:0c:70:c4:7d:47:39:74:90:3f:93:
ea:53:74:f5:a7:78:70:ae:da:66:68:bb:d7:41:35:2b:ee:d4:
3f:1d:2a:77:c7:ef:ed:9a:4f:fe:bc:f0:ff:1a:34:53:99:0c:
9d:06:5f:26:58:fe:48:24:5e:fb:ec:46:d1:70:8f:a9:e8:c0:
92:c5:b9:b8:71:0c:1d:1e:d3:b9:a1:5a:66:df:d2:55:b4:6f:
55:4f:9a:b4:27:18:c2:11:de:fc:79:a5:16:e9:06:ba:22:f7:
ce:41:f0:e1:b4:1d:d8:00:75:c0:2b:25:a4:2f:f7:6a:4a:ca:
09:b2:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:03:29 2025 by rpki-client