Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File: AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier: 0xCMQtH04E63ZFCrfLsz7XHfMRFG513w7BtfXLN7f4U=
Subject key identifier: F6:A0:17:57:D6:68:1E:A0:7D:4C:40:AA:40:49:8C:44:21:6E:5C:C8
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial: 01968058F2535A329458A777EBD74B2C1BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 07:00:34 +0000
Manifest this update: Tue 29 Apr 2025 07:00:34 +0000
Manifest next update: Wed 30 Apr 2025 07:00:34 +0000
Files and hashes: 1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: iXUNaq/zUlcRu4JnoGv7+ugnnxW9EG0KbTsBphdteZw=)
2: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (hash: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:f2:53:5a:32:94:58:a7:77:eb:d7:4b:2c:1b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
Validity
Not Before: Apr 29 07:00:34 2025 GMT
Not After : Apr 30 07:00:34 2025 GMT
Subject: CN=f6a01757d6681ea07d4c40aa40498c44216e5cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:f6:f3:40:16:fb:c5:43:27:6a:88:af:84:
0c:f9:3c:e3:95:4f:8a:81:a8:59:17:4e:7b:e0:18:
15:d8:0d:f6:5a:5c:6a:36:76:ee:6b:7b:2f:ee:53:
3d:3a:b3:7e:e2:a5:44:45:52:b9:ad:9e:0d:00:56:
8f:28:4d:d5:a4:fe:7f:a4:fa:6f:de:fc:78:4d:41:
e9:d5:ee:cf:a5:67:c9:4d:72:e5:96:0f:5d:40:27:
d5:6e:ba:52:bf:a4:1b:cc:ec:bf:cc:c2:49:79:db:
c6:cf:96:74:29:cc:10:40:ea:23:2a:9f:06:86:96:
e8:26:ad:f9:82:0f:97:d9:7a:20:15:59:60:68:ab:
ca:40:ba:29:a7:a6:a9:0d:b8:eb:2e:e2:d2:c7:df:
64:a9:c8:d8:4b:4a:5e:56:fa:75:0d:5a:2b:73:66:
44:c7:a2:da:cc:a3:9e:38:c5:22:6a:f9:87:41:80:
37:00:f8:00:27:73:ba:7a:07:cf:94:05:11:d7:c1:
8f:31:18:9e:0f:57:3f:08:07:44:bf:b2:cd:c1:8f:
c9:e3:0f:51:a0:43:66:c3:61:ac:42:d0:8c:74:2f:
2f:80:a6:f4:42:f3:bd:45:83:36:97:6b:46:17:bb:
c9:21:8b:4f:6d:ae:a0:57:af:1d:ee:a1:d5:cb:0a:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:17:57:D6:68:1E:A0:7D:4C:40:AA:40:49:8C:44:21:6E:5C:C8
X509v3 Authority Key Identifier:
keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:7f:ee:20:e2:0c:df:df:d3:35:9d:95:74:d6:0e:59:1e:
5d:ab:4f:72:2b:88:35:3a:6a:b4:a2:22:d1:91:e7:24:c1:16:
aa:c1:23:50:0a:dd:cf:50:3a:5e:b3:e6:d9:8d:02:b6:5b:e4:
ec:74:0e:aa:d4:e3:77:2e:f7:64:2a:73:70:6e:d3:be:68:36:
77:0e:3c:78:c9:7b:60:bf:d6:03:03:b0:4a:f3:0a:33:cf:93:
56:07:32:1e:4a:c1:71:42:5c:6c:6e:22:18:a6:17:16:5e:23:
af:aa:dc:e5:cb:07:96:b1:40:c2:32:c8:1c:c4:a7:16:31:80:
3d:71:c4:25:aa:7e:cb:2b:a6:8e:4a:cc:72:8d:90:de:53:91:
2f:e8:dc:a1:c3:ad:cd:de:11:3d:5b:38:7f:67:74:cf:3c:29:
b6:25:07:3c:e9:3b:c9:13:84:0b:5c:c6:a9:fa:c5:75:23:9a:
6f:4a:56:27:8b:b5:73:05:6e:df:6d:52:bc:e8:45:b8:60:bb:
14:35:60:2a:8e:20:5b:7e:e3:55:70:a7:25:18:e6:72:c8:6a:
98:eb:21:49:8a:ed:b2:78:17:a5:a1:ce:7d:f8:ba:39:aa:ad:
0b:a3:47:99:c9:0c:bf:4c:00:05:50:27:cf:aa:3c:1d:9a:03:
38:58:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:39:45 2025 by rpki-client