Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: qsXLUOR5c6vo9IecX9WNczOb0THVJbODm784jmWMtTc=
Subject key identifier: 7A:11:7C:32:1F:B7:E8:A9:3F:61:41:93:C7:EC:25:EC:B6:94:70:04
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 01984B5476E8D0F8D09AEF84C3BE0D4646B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:01:23 +0000
Manifest this update: Sun 27 Jul 2025 10:01:23 +0000
Manifest next update: Mon 28 Jul 2025 10:01:23 +0000
Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: +HRC5X1+AWLTUqJy8zfUBPFCtZmpBTMhgxWJkIOHWes=)
2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:76:e8:d0:f8:d0:9a:ef:84:c3:be:0d:46:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Jul 27 10:01:23 2025 GMT
Not After : Jul 28 10:01:23 2025 GMT
Subject: CN=7a117c321fb7e8a93f614193c7ec25ecb6947004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:e0:38:33:1c:d2:db:ca:78:77:d6:35:4c:
a6:e5:a1:df:25:7d:56:df:23:30:7c:7b:de:21:7c:
e7:8d:6c:8c:00:27:2f:98:c6:2d:5a:a7:83:de:fc:
5a:39:e3:be:ec:4e:a9:e8:5e:fa:6d:55:5f:60:6d:
f6:cc:e1:aa:80:25:18:ee:8d:2b:7a:6d:bd:f3:7d:
03:1d:97:e8:bd:90:d6:b8:fe:ba:a9:cf:6a:fe:47:
89:e6:25:ab:a5:8d:32:e7:60:6e:c2:83:a8:e5:1d:
79:86:02:ab:03:27:e9:53:f2:a5:67:a5:3f:9f:42:
6e:03:b9:70:cc:3b:99:45:c2:fb:78:60:91:24:01:
ae:68:9d:1b:39:f2:d4:7c:de:66:d7:a4:14:81:70:
7a:c5:c2:f0:a7:a0:67:c5:05:ad:a1:11:22:d1:37:
a9:f4:20:c7:93:88:52:06:5e:78:2b:ed:d9:fc:2d:
5b:03:00:07:26:8e:6b:e9:ad:27:0c:4f:39:49:56:
bf:7b:d5:91:d2:b1:04:57:14:e4:5d:59:c9:67:fc:
8a:5a:25:c5:7a:aa:6b:4d:18:56:f9:43:c5:23:dc:
8f:59:4a:c4:48:5d:20:c9:de:b3:53:4e:22:75:4d:
a5:55:25:aa:3e:e6:ab:8c:84:25:66:b7:a3:da:15:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:7C:32:1F:B7:E8:A9:3F:61:41:93:C7:EC:25:EC:B6:94:70:04
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:87:98:71:54:df:54:0a:99:6a:50:fd:c4:16:f9:58:3c:9a:
e0:2a:30:7e:3a:53:fa:75:d7:df:1e:8f:4c:d1:0d:c5:57:c9:
0a:81:d2:08:c6:99:97:3f:a6:ab:3c:7b:8f:97:bb:67:d4:f5:
3d:1b:4e:44:bc:26:36:28:8e:0a:d5:27:4f:e7:29:4c:c2:24:
4a:58:99:11:63:a7:33:1a:d8:58:e8:74:43:47:63:5f:aa:a7:
dd:e1:a0:79:6d:92:64:c2:71:6f:40:a0:b5:59:8b:1e:6d:f9:
a8:19:0d:81:1a:09:00:0d:bc:e0:10:0d:0b:88:b4:3a:85:0e:
84:95:06:3e:0b:c4:8f:59:4b:d2:6d:1c:ef:31:c5:de:a4:ce:
66:4e:71:de:94:64:e3:31:da:23:4d:76:68:92:b0:7c:0e:06:
0c:5a:ed:58:c7:49:63:04:48:c3:25:2b:86:ec:31:cd:a2:17:
01:cc:48:28:96:ad:7d:3e:a7:ac:28:5d:0c:a8:15:8f:e6:0a:
52:66:83:73:8d:de:02:c9:54:a6:6c:ca:30:7f:2a:78:d0:4a:
4b:cf:a6:74:c7:5c:54:f5:9e:8b:66:ed:0f:78:65:d8:9e:84:
a7:18:8b:b7:c2:0c:1d:9b:e4:24:20:98:10:09:08:8b:85:48:
af:87:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:14 2025 by rpki-client