Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: lVXxi/6ORAImiKzrisZ4I3SYWAGTZOsya1eHek++A+8=
Subject key identifier: 26:87:20:F2:CF:F1:B9:01:6D:1D:7D:CA:BA:58:71:42:46:D8:6C:D3
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019A4DAB09A9F2794C7DEE90D90CB706E003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: g29WB1u/p3CxUPIQdmIycKO+g+STGaZK1N3ssr4bS8c=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:09:a9:f2:79:4c:7d:ee:90:d9:0c:b7:06:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=268720f2cff1b9016d1d7dcaba58714246d86cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:4c:d4:b5:6e:70:46:9e:1d:65:89:00:3b:
fa:c5:3b:26:12:f3:d1:1e:c7:95:17:4f:b2:10:b1:
95:ac:46:50:39:d4:52:15:7c:c6:36:f9:78:69:01:
90:d7:b5:1f:4c:18:68:8b:4a:78:43:ec:ab:0a:c7:
47:8c:a8:8a:f2:d1:b6:0f:b0:8b:1e:5f:85:dd:fa:
8c:d8:13:61:3d:fb:fb:cf:64:6f:eb:c6:4a:19:09:
cd:ae:7f:77:dd:6d:fc:9f:b4:d9:0f:d7:0a:5c:19:
60:04:c1:e9:c4:54:3a:e6:00:50:ed:34:5c:80:5d:
e7:f8:dd:e5:59:26:64:27:fc:66:ed:a2:9f:0d:f5:
b0:95:70:4f:63:2d:c9:0d:ea:7b:ac:3f:a1:26:9a:
b4:ed:5a:6e:fe:a4:0f:e4:0e:cb:da:18:75:ff:93:
9d:11:25:61:67:41:f5:d6:45:da:6f:a9:84:ee:23:
97:a1:58:f7:d5:00:e7:d1:cb:e9:8f:8e:7c:7d:54:
6f:df:55:2c:ec:31:0e:23:a2:54:94:35:23:af:fa:
89:5d:3b:56:b0:d5:49:76:76:e6:e6:a6:70:16:6f:
5b:53:85:f7:c4:df:ec:a0:5a:43:4c:80:4b:5e:c6:
d9:30:c9:2a:0e:d6:39:99:22:f3:eb:e5:be:fc:60:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:20:F2:CF:F1:B9:01:6D:1D:7D:CA:BA:58:71:42:46:D8:6C:D3
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:56:6c:4d:ca:7f:7d:35:0f:68:02:c9:01:5c:68:43:6d:
20:7a:bb:c0:d8:07:9b:69:31:e4:59:b5:36:18:0d:14:7b:4d:
e7:25:bd:91:4d:92:7f:35:e6:a0:06:57:15:4a:1c:7d:f6:53:
84:b4:80:2d:ad:82:7a:52:35:c3:d0:f0:d0:64:6b:24:3c:20:
46:01:e5:04:a6:6c:1d:43:e8:a3:87:6c:b3:0d:55:9d:7c:57:
bd:a1:aa:3c:f9:ec:ae:cc:e4:4b:3b:8e:d7:78:a3:e0:6b:af:
72:bf:8f:d4:43:44:c7:01:3c:5c:0f:0d:3f:0f:7e:de:47:4e:
92:39:8f:40:a3:32:cd:53:17:bc:92:61:ec:a9:c7:93:c8:08:
bd:17:f7:3c:4b:9e:63:e7:07:21:ab:2f:e8:22:b5:1b:13:ab:
af:5e:2d:73:dd:f2:a2:41:19:e1:a9:72:ee:d3:0a:ed:22:b6:
0c:3b:40:52:af:35:48:16:31:6f:c5:b3:0c:57:ab:d4:3a:a5:
b1:f9:2f:54:f3:93:e4:80:d5:a3:cb:ef:1c:26:18:70:18:f0:
22:d7:3f:c4:54:a5:51:fd:7b:56:0c:21:1d:d6:8b:14:09:22:
93:8d:2c:58:0e:8a:fa:ab:01:0f:fd:6f:f7:56:9e:6a:77:a3:
1d:7b:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:28 2025 by rpki-client