
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
File: Ane1_sq3Pj5N0YapraBl-uio3hw.mft (raw, json)
Hash identifier: RLu4edAf10WYZh33sZsNhgl7WJPXQdhzeH9pBTi9Ffw=
Subject key identifier: 73:2A:46:15:58:EC:5E:AE:8E:36:16:DE:A8:2C:A9:BC:3A:07:D8:9C
Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
Certificate issuer: /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Certificate serial: 019A50E38E41BDA01A6290A97B83C5645F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
Manifest number: 0109
Signing time: Tue 04 Nov 2025 22:01:21 +0000
Manifest this update: Tue 04 Nov 2025 22:01:21 +0000
Manifest next update: Wed 05 Nov 2025 22:01:21 +0000
Files and hashes: 1: Ane1_sq3Pj5N0YapraBl-uio3hw.crl (hash: VcBuLFbSV1wiD1Ez7gjKmQEiylhdquVZFLiapBS1G2Y=)
2: IuEjicT0WSpWeXHw9hSCQ6sEmtU.roa (hash: t9o/QAcTRDQlfzjUzcjAJs1f83t2e8roxzyXaOe6NX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:8e:41:bd:a0:1a:62:90:a9:7b:83:c5:64:5f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Validity
Not Before: Nov 4 22:01:21 2025 GMT
Not After : Nov 5 22:01:21 2025 GMT
Subject: CN=732a461558ec5eae8e3616dea82ca9bc3a07d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:af:fb:1d:f7:e8:8e:d7:6a:dc:db:b5:05:
84:b8:68:bb:ba:70:ab:11:6f:f1:76:28:80:38:09:
a2:05:e9:5c:c7:9f:a6:e4:8f:1d:fe:89:30:d7:68:
e4:c1:df:cd:33:5e:15:ea:39:d7:29:70:c6:00:18:
15:4b:4c:e1:9c:67:31:e3:a8:a8:5f:e9:1f:5b:cd:
d4:86:29:a8:3e:5c:16:01:37:17:2b:64:a3:f1:6f:
73:64:02:7b:40:e5:e5:2d:97:a2:75:a3:82:0e:53:
59:85:d8:ff:70:18:21:a5:7e:cf:6f:f9:21:c2:3c:
c0:60:0c:33:d4:90:14:6b:4d:10:9b:f1:d5:42:e3:
e8:f4:d3:b8:c2:b8:d0:5e:f6:63:3e:2e:52:8e:56:
ad:a9:ee:78:1c:54:7d:cc:c9:c0:1d:c4:b4:f0:9a:
a7:76:fe:04:28:27:14:a3:66:bf:83:fe:61:3a:98:
b8:e8:60:29:13:ce:57:84:44:91:73:81:30:d9:31:
48:a1:95:30:fd:60:5b:3a:09:bd:e9:04:f9:83:e8:
38:b2:db:fc:e2:27:c1:a3:9d:f7:c7:9c:fa:27:b8:
e7:49:89:bf:bb:e0:01:03:44:e3:3a:0c:8b:fb:35:
07:46:ef:d6:c0:e3:09:08:16:f3:3a:fd:1c:84:ea:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2A:46:15:58:EC:5E:AE:8E:36:16:DE:A8:2C:A9:BC:3A:07:D8:9C
X509v3 Authority Key Identifier:
keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:10:da:9c:ee:97:2b:62:63:e6:b2:33:7c:fb:ea:13:e3:
d6:7d:66:92:5c:d2:12:80:dd:00:de:04:2b:b1:12:c8:8d:e0:
a1:68:1e:18:2b:a6:78:86:16:b1:87:66:63:d9:0f:ba:4d:f3:
0d:26:9c:aa:67:26:94:03:cb:01:a6:d1:a9:e0:3b:31:da:4b:
14:64:a0:84:f9:64:d1:ee:a6:04:3f:dc:35:5f:b1:ab:42:fc:
9d:0a:be:cc:9a:6f:2b:54:75:f6:fc:d5:f4:5c:d2:5e:ff:a5:
6b:b1:69:aa:e5:2f:f3:8a:59:ec:d7:40:66:a6:25:55:e7:06:
e8:fe:fc:cf:f1:59:68:7f:35:5d:77:40:fd:2e:09:22:a9:11:
4e:37:08:f9:73:a6:24:51:5a:20:8c:07:64:5f:d1:45:4e:00:
a1:8c:26:98:cb:55:20:dc:ba:6e:13:99:90:76:f0:ab:8b:67:
a8:0b:d9:a0:f7:2a:1e:a0:33:b0:4a:8e:7f:58:c8:6e:d3:85:
e0:40:b4:11:0c:7e:c4:96:1e:4f:87:c0:3a:27:56:71:88:d5:
89:98:d5:d1:b8:ed:b7:70:63:da:d0:da:4a:89:6e:52:24:a0:
74:21:a8:d2:e2:8f:84:c9:b0:7f:ee:15:c2:fe:f9:52:6b:8f:
0b:ab:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:48:08 2025 by rpki-client