Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File: AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier: Drz/Qb0CMBLbkUTX962SLzrQp1BfL6+4tb+oNVL/u9E=
Subject key identifier: 38:13:F1:4A:F9:EE:34:1E:29:74:FA:9E:17:21:70:1D:76:88:DD:2C
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial: 0196BE25C94C858B675B5FCEBA783B3771AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 07:01:09 +0000
Manifest this update: Sun 11 May 2025 07:01:09 +0000
Manifest next update: Mon 12 May 2025 07:01:09 +0000
Files and hashes: 1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: H90fkfrceBYl0YWQn3MpAfLVEteQmhBtUjSd/8A4iyg=)
2: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (hash: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:c9:4c:85:8b:67:5b:5f:ce:ba:78:3b:37:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
Validity
Not Before: May 11 07:01:09 2025 GMT
Not After : May 12 07:01:09 2025 GMT
Subject: CN=3813f14af9ee341e2974fa9e1721701d7688dd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:bf:4a:18:27:21:b5:f4:92:85:1e:03:d5:
d4:4d:c7:f8:a2:25:81:4f:da:31:37:68:1a:9c:ca:
19:75:2e:ce:25:96:83:d2:cd:57:f2:dc:9a:d3:d0:
29:0a:7a:71:c8:b4:97:8a:4f:9e:e1:dd:fd:2b:fa:
06:41:95:74:6e:8a:5f:42:33:a3:00:0e:7e:41:19:
13:df:0f:59:6f:4d:78:17:81:38:40:37:42:2a:92:
f0:83:c2:aa:b5:dd:b7:4a:6b:be:6c:1a:98:7f:69:
9b:44:91:0c:aa:4f:fb:f0:a4:4e:28:f5:11:42:2d:
ea:2b:69:ec:51:08:04:a4:6a:b4:6e:d4:dd:c4:43:
bb:f0:94:90:46:49:68:63:ef:59:fe:e4:bf:a3:8c:
94:08:c7:a7:a7:c4:43:be:84:f1:7f:9e:c1:6d:68:
0d:a0:d1:69:89:cd:bb:43:60:65:2c:62:14:83:d7:
bb:1a:75:d0:91:dd:d8:79:a3:d8:f8:b8:7c:c0:35:
c2:04:b8:0c:32:8a:e8:50:89:33:50:4f:76:03:b3:
b6:61:b5:34:f8:91:5c:72:8d:2f:bd:f2:43:34:7f:
f7:b4:55:6f:f6:a7:6f:a6:02:9f:d9:50:1d:be:15:
81:22:e6:dd:e9:e2:72:72:19:15:50:50:05:cc:f6:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:F1:4A:F9:EE:34:1E:29:74:FA:9E:17:21:70:1D:76:88:DD:2C
X509v3 Authority Key Identifier:
keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:2d:38:31:d2:e1:75:94:fe:5c:02:8b:ae:65:2f:50:93:
74:91:42:b8:85:8c:71:e2:ef:35:20:cb:4d:6a:a6:1f:40:5c:
ff:fd:0b:20:44:51:ce:fd:8f:48:4b:39:55:a6:04:9c:1a:b8:
1f:21:dc:5c:aa:09:df:d8:fc:c4:8c:b5:d9:43:41:2d:b8:e6:
db:38:68:06:0c:f7:73:36:7c:8d:31:7c:61:85:9b:f2:1e:38:
51:c8:ba:14:91:06:8f:61:d1:e3:0c:e3:a2:dc:51:3c:c9:7f:
38:b6:95:df:dc:10:73:b4:03:ae:7d:79:a4:7d:fe:82:56:90:
59:e7:68:53:17:e9:91:c7:b0:ec:4d:02:b8:52:f8:9f:0e:16:
00:d7:db:f0:92:ee:e6:85:ca:9e:5d:1c:6e:cf:89:87:57:1d:
37:d3:cf:6a:c6:eb:d3:97:a2:2b:0b:1a:bd:f1:a5:62:0b:12:
b7:8c:08:a8:55:1b:ee:3a:11:7a:18:52:21:b2:6d:19:50:79:
0b:1e:b6:06:82:8e:6c:cb:2c:1b:2f:51:73:56:3c:43:c6:85:
44:08:f1:0e:71:93:02:a9:dd:08:30:be:3e:3d:33:8c:a3:0d:
b7:3f:17:0e:95:42:2e:2b:4b:33:c8:40:57:b2:b8:11:3c:7e:
78:c4:6e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:36:02 2025 by rpki-client