Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: 74KENbRqsc0vqvxgG0Mbl5Rtj4mxqFPfiovotILiFCs=
Subject key identifier: 41:CD:03:8A:67:59:2B:FF:44:6C:ED:45:91:35:A7:EB:E4:D8:DA:AD
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019853B1EF6DDCB983EA5A0726D7D2572067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 01:00:26 +0000
Manifest this update: Tue 29 Jul 2025 01:00:26 +0000
Manifest next update: Wed 30 Jul 2025 01:00:26 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: yYto2DIwO2xSAYxMpWhbgTndQ4PhAEcrp265gbhl6TA=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:ef:6d:dc:b9:83:ea:5a:07:26:d7:d2:57:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jul 29 01:00:26 2025 GMT
Not After : Jul 30 01:00:26 2025 GMT
Subject: CN=41cd038a67592bff446ced459135a7ebe4d8daad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:f0:a3:2c:7a:82:0e:d6:2a:a3:d1:04:17:
87:8e:c8:6d:3b:1e:de:61:ba:74:e1:5e:41:cb:8b:
76:8d:ca:42:72:72:3e:3b:09:ba:25:88:b8:1a:61:
e0:ba:5d:86:02:59:ef:5c:59:f2:8b:10:21:8f:df:
2f:a7:e2:07:50:1c:cf:52:6e:4b:03:57:05:05:df:
1b:ae:b8:36:f0:61:fe:83:26:9b:cd:22:23:43:bd:
95:5e:ae:c3:fd:4e:b8:59:8c:01:57:93:da:f0:bf:
7e:0e:6a:b0:57:66:40:60:58:bc:2e:3a:de:e5:87:
0a:5a:77:26:15:cd:91:37:5b:35:68:2e:62:23:45:
4d:7c:d3:cb:ef:66:b7:a9:d5:4a:9d:75:d8:94:3c:
c9:c0:0d:45:13:c2:10:05:de:98:c5:0d:db:ac:5e:
2d:ad:0d:ba:38:2c:20:a0:67:a9:10:44:ee:e0:15:
b3:b0:dc:c3:3a:1f:7e:e2:f1:b6:6c:75:3e:ad:44:
40:f0:96:58:84:a2:2e:af:5c:c7:3a:b0:7e:b9:f5:
c1:ad:6c:69:83:88:27:d1:92:86:01:2b:54:b7:da:
98:d1:5e:ca:36:15:d1:f4:c2:7d:40:2e:55:ae:40:
b7:d1:43:d6:9d:70:a0:be:35:25:d8:6e:76:c5:08:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:03:8A:67:59:2B:FF:44:6C:ED:45:91:35:A7:EB:E4:D8:DA:AD
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:11:58:41:31:64:b5:d0:48:be:3c:eb:49:25:f1:be:99:44:
96:37:e7:5c:3d:05:72:0b:1d:c3:0c:b6:bf:5e:2b:97:7e:79:
bb:54:03:b4:c1:ae:82:a0:b9:6c:ff:c4:f5:33:a5:d9:31:6d:
93:08:bc:83:51:b8:21:6c:2c:37:46:10:0c:4c:90:b3:ba:0b:
b4:21:f7:f7:b1:9a:6e:8a:b3:10:1e:37:7c:a5:d8:ac:00:65:
e9:18:f0:96:39:df:1f:64:f1:63:73:fe:01:45:7c:1e:78:7b:
3f:a7:9e:21:c9:a4:c6:bb:15:68:ac:c5:94:76:79:20:9a:0a:
d0:df:1e:1a:98:29:34:10:80:bd:b1:9b:af:9a:a3:b1:73:4c:
fd:af:ce:12:c4:10:75:af:76:87:5a:7f:a3:6f:3c:3c:68:6b:
0f:f0:d5:e0:30:5b:b1:2f:a4:a0:58:ea:46:33:52:c2:e5:fb:
fa:35:f8:8a:6b:e9:bd:ce:6f:81:5e:b2:9e:8f:92:51:05:17:
45:cf:8b:50:1e:51:ad:15:6b:25:75:13:8a:54:16:7d:25:44:
2b:a1:a3:3c:ab:a0:6a:1e:73:d8:c5:9f:45:34:4f:98:cb:47:
02:49:c7:57:c1:35:23:f6:56:46:1c:8d:e5:ab:eb:2f:8b:a2:
c9:58:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:10 2025 by rpki-client