Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File: p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier: N0bjF89oMc2zlXepMix1CRxzNE+enDmr5PtrU78uaxU=
Subject key identifier: 66:23:7D:90:48:11:A7:9F:EA:50:E7:AD:A2:74:8C:14:91:D4:98:CB
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 0197B820D29C4119B07FF68E9A4F4A8F6081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number: 0BBD
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: CEwLJW+1i2ri92Pid72YVz3z7nzfgxmkSW3RhywxmKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d2:9c:41:19:b0:7f:f6:8e:9a:4f:4a:8f:60:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=66237d904811a79fea50e7ada2748c1491d498cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:82:b8:7a:2a:4c:c4:97:a2:9d:af:6c:33:
53:68:bf:ec:b2:df:c5:91:98:fd:8b:0a:72:4c:23:
df:69:c5:0f:82:6a:0a:7e:6c:bf:11:6c:d3:3a:40:
cf:22:e1:38:49:29:bc:68:db:21:64:26:cf:a1:58:
8f:10:72:f6:ef:00:f8:9e:3e:df:ee:a4:6f:08:b3:
11:ea:e5:01:64:c8:ad:c0:67:fc:2d:02:71:71:27:
90:ad:6e:9d:58:a1:b6:69:40:80:30:b0:e8:97:5f:
0a:a5:6f:5e:88:d7:8f:fb:9c:0e:4b:74:c6:65:39:
a6:bf:38:67:d9:44:e3:c4:c1:77:2f:db:2f:33:59:
15:6b:e1:5c:e3:2e:d3:6b:54:ef:b5:ea:c6:89:6b:
69:26:cf:70:c6:5e:3a:81:a0:2f:12:80:70:8b:ec:
3c:ba:f7:7e:a2:9d:83:92:53:3c:5e:31:85:d3:c2:
74:35:d9:fc:65:95:b1:03:63:e2:6e:b0:7f:3f:a7:
db:75:fe:03:a4:eb:7c:e4:02:c8:37:ea:5d:8c:25:
55:ac:d2:5e:95:e7:a2:06:70:82:07:24:d1:4d:63:
db:33:b1:30:1b:57:be:94:21:35:76:ed:d6:0d:50:
9a:6b:b1:f5:9e:79:72:99:12:e4:c8:ee:db:0e:35:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:23:7D:90:48:11:A7:9F:EA:50:E7:AD:A2:74:8C:14:91:D4:98:CB
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c4:17:0c:9b:d1:d4:ca:d9:fc:0b:9c:e7:42:5e:b0:d6:5c:
0e:60:07:6b:fd:62:41:c0:be:15:1f:46:a1:f4:24:c2:22:0c:
42:eb:67:29:b4:46:53:78:8d:da:82:f1:a9:60:a8:57:08:3a:
e3:b6:92:a4:f7:ee:5b:3e:26:6a:04:c2:b0:54:e6:dd:e9:49:
76:9f:5f:eb:30:31:78:a6:51:81:47:00:dd:00:8d:b3:eb:e8:
c2:ed:76:33:a9:1d:ce:50:5a:9b:f9:fb:a5:d2:21:a2:ac:f7:
2c:b4:f5:91:29:6b:b2:8d:89:e5:84:57:1a:cb:82:d3:bc:f9:
15:31:ac:63:0e:67:d4:01:c2:3a:41:92:7b:a6:68:4c:01:f0:
8f:44:de:20:ac:30:24:82:b9:3c:3c:6b:db:fb:96:75:7a:0b:
94:fc:e9:e1:c6:2d:bb:50:fe:23:11:69:f5:0b:cb:30:39:f8:
6e:6c:13:9b:30:7a:13:dc:10:f0:e3:94:1e:61:6c:ea:81:96:
a9:ff:21:65:52:2e:01:9f:28:da:8f:1d:52:a8:f8:63:39:21:
f1:41:f1:34:c1:88:01:24:d4:11:ab:01:18:2d:5a:57:47:70:
c1:be:c2:e9:dd:1e:ae:e4:49:0d:07:60:2a:1f:85:93:d7:cb:
fb:d3:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:47 2025 by rpki-client