Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File: p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier: syPf+uYNy9xPJ0N/ve9OP6wYgX7El0RMPB3Imct04tk=
Subject key identifier: B2:20:E8:50:81:98:E5:69:53:14:27:B3:7F:82:A6:CE:CF:CD:FF:C9
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 01976EBDDD9B79C40403EDE3FFF31D7C4360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number: 0B97
Signing time: Sat 14 Jun 2025 14:00:26 +0000
Manifest this update: Sat 14 Jun 2025 14:00:26 +0000
Manifest next update: Sun 15 Jun 2025 14:00:26 +0000
Files and hashes: 1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: Y3YW5Ua9E7EkJm1Yyfip9HIguQqhUUq3RzoXEr5CS/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:dd:9b:79:c4:04:03:ed:e3:ff:f3:1d:7c:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Jun 14 14:00:26 2025 GMT
Not After : Jun 15 14:00:26 2025 GMT
Subject: CN=b220e8508198e569531427b37f82a6cecfcdffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:73:ca:be:01:ff:0f:13:82:d7:11:97:c0:
cb:2a:03:a8:92:6a:5a:9d:b7:61:0f:76:b3:8a:27:
0c:52:b0:8b:7e:eb:46:ba:44:11:78:da:86:ee:c4:
34:ef:9c:ec:73:cc:63:29:53:13:55:d9:8d:62:11:
42:ae:76:dd:75:8e:61:c9:da:ab:be:5c:1f:b9:4a:
85:3a:aa:6d:dd:3c:c8:16:77:77:0b:09:96:90:73:
d2:76:70:95:18:42:7e:b7:da:18:84:7c:86:52:27:
82:a6:e7:eb:64:5d:66:61:f4:0a:b0:ea:49:11:b4:
e5:af:c2:84:4e:17:86:82:53:f9:ec:14:5b:a3:b6:
8b:4d:29:f3:12:b9:69:97:2d:b8:a4:4f:2b:2a:e1:
d7:ee:e4:60:ce:6b:98:02:79:90:d6:ee:92:48:20:
23:79:41:76:39:0a:89:99:1e:67:40:a9:7b:05:7b:
78:ca:97:b8:db:98:77:0b:d5:e7:f1:7b:7e:77:37:
8e:1f:57:6d:b7:31:22:c9:6c:17:de:c2:e8:de:b0:
5b:be:ff:3f:00:ad:53:15:4b:be:07:ac:e4:e9:3d:
c3:29:5d:5b:1e:37:ff:c4:d0:67:5a:16:67:fb:ba:
97:2e:65:f6:ac:c9:a0:f4:6f:68:88:9e:89:cb:f5:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:E8:50:81:98:E5:69:53:14:27:B3:7F:82:A6:CE:CF:CD:FF:C9
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:1d:dd:47:74:a9:d3:6b:7a:76:5f:68:88:c6:7c:31:60:
43:8b:32:b7:12:47:96:35:9f:62:f5:95:08:e7:53:6c:2b:94:
d4:30:cf:b4:2e:a5:12:72:4a:9e:8b:ef:ea:7d:29:76:93:9e:
84:cf:46:e9:91:ac:d6:89:92:ea:30:9a:6a:2b:9c:8f:88:9a:
0d:3c:b4:94:d6:c6:48:fc:c4:10:98:27:7b:e2:59:57:24:1b:
c6:c7:2a:76:94:2f:47:5e:a1:d4:40:59:c1:2b:2a:5c:fb:d7:
66:a3:c8:7e:2b:bf:e3:6f:f0:dc:78:a6:e4:1b:99:94:60:a3:
43:45:45:44:12:48:9f:db:f8:bb:10:dd:67:1b:bc:1b:96:8b:
64:55:fb:b2:ac:8f:f5:76:1f:c8:0b:4a:f6:7d:81:fd:0a:26:
51:3a:46:d8:f2:0f:50:ec:05:35:b9:bd:76:84:49:ef:61:df:
5a:c8:9a:c0:47:a1:18:b3:81:2f:75:57:39:9a:1b:70:1b:54:
4e:14:c7:f5:29:9d:ba:7c:dd:f6:cd:21:bc:05:2a:d8:3b:e4:
c1:50:83:45:e4:01:0a:5d:93:ae:8a:f7:9f:4c:54:b2:72:b1:
1a:1f:78:2b:9b:42:2f:c1:6c:60:75:ae:73:24:ae:fe:c2:27:
49:4d:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:57 2025 by rpki-client