Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: CKNsC4E9jzScIyJzW2u6M4W1id5eFzHBd3Fy8Y88N9k=
Subject key identifier: 74:F8:1F:56:DF:56:1E:43:74:E0:1F:53:0D:12:ED:C8:B9:FB:22:3B
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 019677FB5B7FE00CF5A3609A371CB5375A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 16:01:23 +0000
Manifest this update: Sun 27 Apr 2025 16:01:23 +0000
Manifest next update: Mon 28 Apr 2025 16:01:23 +0000
Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: CNxKn8sx6yvtYU7RB35Z24/QpMH1vRSbGmKw2DL9LKs=)
2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:5b:7f:e0:0c:f5:a3:60:9a:37:1c:b5:37:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Apr 27 16:01:23 2025 GMT
Not After : Apr 28 16:01:23 2025 GMT
Subject: CN=74f81f56df561e4374e01f530d12edc8b9fb223b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:70:3d:2d:75:b6:a9:2e:c9:d9:b7:24:de:
d1:51:bc:60:65:f1:6c:f2:a4:47:f8:b9:27:42:8d:
65:60:d6:51:3f:28:9c:61:3b:56:bf:fa:06:43:73:
dd:b7:d5:31:01:9d:a9:20:37:19:ea:38:bf:7c:09:
44:74:23:ae:df:a6:64:1b:60:d4:49:65:d7:43:71:
a7:95:62:19:6e:0a:21:93:d2:82:1f:53:d9:cb:98:
b1:5c:e1:16:af:e2:3d:fd:95:4e:7c:69:b8:88:c2:
61:45:13:fe:5d:15:36:4f:a9:87:1f:b0:d7:ae:8e:
45:ef:49:de:51:f6:a9:ef:9a:02:bc:b8:65:6c:c5:
d3:79:12:f3:14:74:2d:67:c5:11:78:85:22:8a:cd:
eb:fe:f9:66:82:34:d4:14:78:be:16:79:65:25:86:
c7:fa:02:28:35:7b:a1:94:5c:30:2e:a4:ed:1c:79:
a5:2c:61:c1:c2:17:b4:d8:dc:f5:5c:07:02:c9:35:
41:05:9d:c8:60:ba:86:c7:24:0b:69:5e:be:a7:55:
fd:b3:20:cb:1a:24:c2:cd:cd:38:35:b3:0a:3a:7f:
76:e4:a8:b7:d2:c2:18:82:cf:5e:ff:4f:80:a4:29:
be:e1:7e:e7:17:67:69:17:38:88:03:bd:a0:ec:f8:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:1F:56:DF:56:1E:43:74:E0:1F:53:0D:12:ED:C8:B9:FB:22:3B
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b3:23:67:1e:e0:01:26:4a:65:67:81:d9:73:c2:68:16:c8:
5f:cc:5a:4c:a2:61:2b:da:34:db:af:70:ea:05:a2:33:d0:ac:
d6:28:94:c6:7b:d7:e9:24:58:f4:40:73:cb:5c:9e:f0:2d:ae:
56:ef:d1:43:34:c4:ff:08:80:85:ff:b2:e2:bb:82:35:19:20:
65:c2:42:44:1c:34:46:1a:d5:50:54:0e:c0:b5:e7:a5:4f:6f:
d9:35:85:f5:36:d5:e9:75:92:ae:59:29:82:ad:69:43:e6:51:
41:e6:ba:51:f2:df:2d:df:d3:74:c8:2e:64:ec:77:aa:09:76:
8d:11:f6:66:76:4d:c7:01:73:63:1a:50:fe:12:67:3e:bc:b4:
da:50:17:45:6a:6a:4f:82:d5:c4:24:0d:02:b4:a8:2e:d6:a7:
98:0d:fc:a9:31:8a:6b:ec:2b:08:f3:93:2a:52:d3:00:2b:77:
63:22:0f:f3:d1:e2:ba:27:6f:47:00:87:9d:c5:03:3e:19:9d:
d9:4a:eb:24:f1:b9:58:e0:b3:1d:e3:0d:86:24:32:ab:03:8a:
07:5d:33:a8:95:21:69:40:ff:80:93:a2:90:23:78:ff:7d:b6:
70:00:dd:75:75:35:74:df:fb:ca:b9:a0:11:7a:83:cf:cd:3e:
f1:f7:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:44 2025 by rpki-client