Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: 1TlqE5Qch4+dToVdXZ8FkNE7AfvOnjvfIOs6SSCi5x4=
Subject key identifier: 6F:87:7A:21:1F:DD:97:D9:C9:0A:AD:30:F0:04:F4:18:B6:A4:E8:4D
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 01987B9B762AA7A086ECC251FF8330925176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 19:00:42 +0000
Manifest this update: Tue 05 Aug 2025 19:00:42 +0000
Manifest next update: Wed 06 Aug 2025 19:00:42 +0000
Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: 5zl02KG4s29Aj7q5gwahkSFZw0UsyzPrLeLNzZ8aO6A=)
2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:76:2a:a7:a0:86:ec:c2:51:ff:83:30:92:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Aug 5 19:00:42 2025 GMT
Not After : Aug 6 19:00:42 2025 GMT
Subject: CN=6f877a211fdd97d9c90aad30f004f418b6a4e84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:e6:95:29:5a:8d:cb:14:44:20:13:e3:f6:
6c:4b:cb:82:e1:8d:f6:76:e2:5f:17:86:38:ff:45:
03:3c:cc:27:a8:2c:c5:6d:ec:fd:45:63:02:c1:92:
b0:12:a3:7e:8f:0e:42:13:60:75:0a:10:7c:7f:ac:
d1:af:16:8a:0a:29:c5:1b:a8:fe:34:f2:ef:41:85:
f1:d4:2f:52:6b:5c:d9:f3:f1:99:85:7b:8c:54:88:
70:2d:af:f4:c9:a7:24:e9:b5:47:9f:6c:b9:b6:9d:
1f:31:93:57:de:6f:db:5f:f7:d6:92:77:d4:29:a2:
14:6a:6e:87:33:aa:01:17:b9:77:27:5f:05:62:de:
c6:bc:4c:3b:9e:71:48:4a:d2:07:43:99:21:76:40:
b0:71:57:35:8b:c4:af:f7:fd:43:a6:f4:bb:40:ad:
0d:72:cd:5b:2f:ca:8f:97:8e:12:02:40:55:17:e7:
ca:57:c6:5a:02:ae:27:f2:7e:4e:5d:db:e6:c8:91:
89:79:39:73:fd:f4:cf:32:a3:7a:0e:fd:4f:08:3a:
a4:80:cf:5d:a5:d3:db:e8:82:37:82:77:52:7a:87:
b9:5e:1f:04:11:37:54:d1:86:3c:90:e0:23:e7:8c:
d9:4d:7f:e4:a3:4d:db:3a:4b:42:58:16:ca:8f:cd:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:7A:21:1F:DD:97:D9:C9:0A:AD:30:F0:04:F4:18:B6:A4:E8:4D
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:45:51:85:80:13:74:4e:61:d1:d2:f7:c2:91:04:8c:ec:c6:
75:1a:8f:ff:88:2e:8c:ec:56:1f:9c:19:9f:c4:38:42:dc:ff:
f1:10:1e:75:42:06:b3:fd:ce:55:4e:7e:23:b6:91:c4:45:fb:
b5:d1:9c:a6:88:43:89:46:03:31:89:38:b9:8b:d1:80:0b:3d:
4c:ab:69:dc:52:b4:28:a0:54:b3:ac:3e:19:e7:71:95:56:87:
ec:69:27:03:e4:ad:8b:58:3d:28:86:46:4e:f4:74:1e:3f:f5:
2d:df:ab:2c:9a:0e:c9:ff:29:75:1f:29:5a:1b:11:9d:be:2b:
bf:82:3b:a2:c2:c3:ca:54:83:18:35:c4:c9:0d:b4:27:7c:f8:
69:d1:e3:96:0b:89:2f:48:b1:fd:cc:b4:d3:e4:ad:6d:23:23:
59:a1:98:84:43:3b:eb:55:58:7d:22:2f:27:38:91:a8:a1:5c:
f9:50:3c:38:e7:d9:5c:76:2d:36:d7:b8:34:95:04:79:59:c7:
5a:68:6b:89:0d:27:46:98:26:b4:72:23:4b:03:2b:c1:9e:7e:
58:f0:49:d5:42:7a:f7:6c:86:c6:0e:80:db:45:02:76:6e:f0:
22:c5:2f:6e:30:79:e9:d6:c1:95:1f:4c:50:a1:e9:4b:27:d7:
a6:7c:f7:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m3Yqp6CG7MJR/4MwklF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDBhOTViZTBlNjAxMTA5Y2IxOTg4NDI2OGJhMjIwNDQ1
NWM3OTAwHhcNMjUwODA1MTkwMDQyWhcNMjUwODA2MTkwMDQyWjAzMTEwLwYDVQQD
Eyg2Zjg3N2EyMTFmZGQ5N2Q5YzkwYWFkMzBmMDA0ZjQxOGI2YTRlODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBXmlSlajcsURCAT4/ZsS8uC4Y32
duJfF4Y4/0UDPMwnqCzFbez9RWMCwZKwEqN+jw5CE2B1ChB8f6zRrxaKCinFG6j+
NPLvQYXx1C9Sa1zZ8/GZhXuMVIhwLa/0yack6bVHn2y5tp0fMZNX3m/bX/fWknfU
KaIUam6HM6oBF7l3J18FYt7GvEw7nnFIStIHQ5khdkCwcVc1i8Sv9/1DpvS7QK0N
cs1bL8qPl44SAkBVF+fKV8ZaAq4n8n5OXdvmyJGJeTlz/fTPMqN6Dv1PCDqkgM9d
pdPb6II3gndSeoe5Xh8EETdU0YY8kOAj54zZTX/ko03bOktCWBbKj82dkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+HeiEf3ZfZyQqtMPAE9Bi2pOhNMB8GA1UdIwQY
MBaAFADQqVvg5gEQnLGYhCaLoiBEVceQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAt
ZDFmZDRkYTJkNWNiLzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAtZDFmZDRkYTJkNWNi
LzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0VRhYAT
dE5h0dL3wpEEjOzGdRqP/4gujOxWH5wZn8Q4Qtz/8RAedUIGs/3OVU5+I7aRxEX7
tdGcpohDiUYDMYk4uYvRgAs9TKtp3FK0KKBUs6w+GedxlVaH7GknA+Sti1g9KIZG
TvR0Hj/1Ld+rLJoOyf8pdR8pWhsRnb4rv4I7osLDylSDGDXEyQ20J3z4adHjlguJ
L0ix/cy00+StbSMjWaGYhEM761VYfSIvJziRqKFc+VA8OOfZXHYtNte4NJUEeVnH
WmhriQ0nRpgmtHIjSwMrwZ5+WPBJ1UJ692yGxg6A20UCdm7wIsUvbjB56dbBlR9M
UKHpSyfXpnz30g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:07 2025 by rpki-client