Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: 2Rml9lM7+JPwPvC/A5pu65OXvoxfJrLUHPy2HkkCYTM=
Subject key identifier: E9:74:19:02:8E:77:F8:D1:17:BC:C5:25:89:81:16:30:EC:FE:65:30
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01987298856784EAC0E4C83006D5D305E453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 01:00:54 +0000
Manifest this update: Mon 04 Aug 2025 01:00:54 +0000
Manifest next update: Tue 05 Aug 2025 01:00:54 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: 3TfxQ+GtgFPo2xu9Jq8y4qGMfcgR/ubLmmlmX04te6s=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:85:67:84:ea:c0:e4:c8:30:06:d5:d3:05:e4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Aug 4 01:00:54 2025 GMT
Not After : Aug 5 01:00:54 2025 GMT
Subject: CN=e97419028e77f8d117bcc52589811630ecfe6530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fe:bc:c8:f0:db:3f:6f:21:a1:6e:26:4d:f0:
99:19:06:19:b1:6a:07:9f:f2:69:89:0a:bf:2e:d3:
73:75:46:ec:34:25:73:e7:fc:9e:24:78:39:28:6c:
18:8d:ce:ea:94:f7:d7:0b:7b:c7:da:d7:da:e0:b8:
9f:4b:0e:34:da:33:35:72:5a:ad:54:68:76:16:eb:
72:a4:31:4e:83:c6:d6:e6:96:13:c0:b9:ee:25:10:
77:fb:f7:82:35:b5:d7:fc:1a:99:b4:b9:a7:70:79:
3c:1c:21:0b:6c:70:3b:51:eb:be:19:d9:58:98:ef:
15:b5:5d:11:0c:36:80:12:1c:00:9f:7a:dd:8f:78:
0a:9f:83:9b:27:85:47:c6:50:09:c1:27:ca:08:0c:
b4:3a:86:b4:9a:33:d4:e9:c7:5d:6a:15:a3:b9:0a:
68:c0:40:0a:ca:34:e8:b6:77:d9:16:7b:d4:ee:74:
ec:69:28:f6:65:ac:5a:1b:d6:4a:d7:77:a2:95:bd:
75:38:b7:3c:45:df:f8:19:7c:b5:e8:d9:33:74:57:
5e:37:dd:3a:c3:15:30:79:77:60:71:d9:80:5a:8e:
48:4f:30:2d:2b:0d:35:72:3b:59:9f:ea:f8:7d:85:
25:69:15:f5:0c:2f:0b:8e:1a:56:ab:2f:c8:d3:26:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:19:02:8E:77:F8:D1:17:BC:C5:25:89:81:16:30:EC:FE:65:30
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:d2:e7:40:51:00:af:8a:04:a5:76:fc:af:9e:6a:85:3a:
3c:e1:b4:97:4d:7f:cd:19:a1:d7:e9:01:d5:e1:56:32:43:12:
82:b6:32:d7:d5:c2:63:db:10:e6:b4:43:c2:84:f8:59:1f:6a:
92:8f:8c:04:1e:a3:d7:d1:0e:29:48:93:9b:2d:95:bb:de:5c:
0e:00:91:dc:05:98:c8:8c:18:df:20:b6:3e:e3:2d:0a:c5:c0:
54:c2:89:24:8a:a2:17:be:49:80:d8:1f:10:a0:9f:5b:ff:9d:
30:ce:64:01:4b:05:30:9f:af:ab:df:2e:3b:00:e8:bf:b4:4a:
e4:fa:62:ea:16:e4:15:8f:5c:56:4e:82:a1:3b:b6:b4:91:e4:
88:03:f6:f6:67:f8:ca:d7:3a:21:ac:58:d1:f9:0a:f6:76:ea:
fa:d2:85:8c:bb:15:80:ca:61:77:44:d1:2a:8a:3e:09:6f:38:
de:a1:94:57:29:f7:26:e7:30:96:92:da:cc:08:e6:ed:58:5a:
d3:99:fd:64:33:d6:ac:fb:25:4e:ce:88:31:99:ad:92:82:e6:
86:db:86:51:10:88:e4:d9:d2:1f:68:7c:b6:4f:63:65:76:3a:
ae:62:86:be:3d:c6:73:29:92:9c:6e:d2:d2:51:be:4a:1a:ac:
69:0c:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:19 2025 by rpki-client