Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: JYvHJU9lxF+fk/zZE00wVbE2yAGiecyS8o+DP6qDm2U=
Subject key identifier: FD:61:DD:7F:F7:59:BC:CA:0B:2F:6E:6C:97:45:D3:48:A5:54:A7:69
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01974B1FA311CA68DEFCBF5AA2DD036B73B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 16:00:53 +0000
Manifest this update: Sat 07 Jun 2025 16:00:53 +0000
Manifest next update: Sun 08 Jun 2025 16:00:53 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: ZqnbgE/+rs++/aEdtOrumrv7kOqT2pIvmJ2auYP6dtI=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:a3:11:ca:68:de:fc:bf:5a:a2:dd:03:6b:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jun 7 16:00:53 2025 GMT
Not After : Jun 8 16:00:53 2025 GMT
Subject: CN=fd61dd7ff759bcca0b2f6e6c9745d348a554a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:90:b7:2e:cd:c6:4a:1e:e3:8b:6a:6b:10:
55:4e:ea:97:ed:60:09:0e:93:5f:02:b8:6b:5d:6b:
27:08:7a:5c:eb:8f:ef:0d:00:a7:8a:02:c0:f7:f7:
87:0f:7c:37:98:12:26:53:b6:c3:f8:31:02:d3:a4:
95:f7:e0:36:10:70:48:01:76:c7:cd:59:7e:7a:7d:
ca:39:bf:44:ec:26:d5:ea:d5:6b:30:d0:f9:51:63:
f9:b2:1e:4b:69:7f:71:da:b3:f6:11:27:77:50:c8:
cd:f4:3c:98:a1:ab:e2:56:00:62:3b:64:78:62:08:
b6:73:c7:31:92:19:e2:51:65:49:b7:28:b1:7d:a6:
be:f4:11:a2:aa:3a:28:0c:9d:72:4a:c1:ae:2f:cc:
f5:89:53:d9:cd:73:ff:db:7a:fb:d0:3c:26:01:b4:
b3:84:bf:e8:b2:7e:c0:33:15:66:44:eb:f9:e1:e2:
6d:e9:e2:5f:70:d4:ec:9f:a7:27:8d:4d:dc:c1:cb:
07:62:c7:34:f2:cd:e3:8d:af:77:01:d3:b9:7c:95:
85:f3:dd:51:0f:c6:5d:b4:16:68:5e:17:b9:7e:59:
f8:19:fd:ef:ea:7b:28:b4:8c:cf:5e:3b:00:95:4c:
b4:99:b4:8a:f4:b2:eb:9c:9a:f6:36:15:33:9e:b7:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:DD:7F:F7:59:BC:CA:0B:2F:6E:6C:97:45:D3:48:A5:54:A7:69
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d8:81:c7:f9:1d:76:05:7a:81:93:10:46:67:b4:41:3c:09:
9f:fe:35:55:cd:27:03:d1:6b:04:af:19:2b:e7:f5:8d:55:3c:
7e:e6:18:bb:0e:f0:92:20:2c:8f:43:be:57:22:60:df:fb:5c:
a2:8e:69:27:14:8a:c3:0f:48:56:22:8b:89:4b:ea:fb:d9:12:
e4:a6:62:7f:47:5f:7f:db:c4:45:76:99:f2:76:d0:54:c0:b1:
6c:48:b9:fe:a3:62:46:46:5e:f2:8a:c2:6f:55:ba:52:8d:c1:
d0:0f:8b:65:ff:4d:f8:38:81:eb:fa:7a:97:05:9a:6f:4d:12:
99:e2:b4:37:88:94:91:ee:da:0a:ae:8e:56:41:b7:60:5c:a4:
81:b9:45:b3:bf:d7:63:99:d1:85:eb:88:6f:b2:4f:84:07:93:
c8:22:f3:be:6e:a2:ba:df:b4:e3:0c:fd:e2:26:4b:73:71:ec:
47:bc:3c:32:df:34:ee:f1:fe:14:be:c7:e9:e1:e3:0c:d5:2e:
4e:79:94:75:0f:45:75:64:d3:44:f8:20:f2:9a:3b:7e:6b:16:
e2:0c:1b:ea:3c:7e:4d:ce:aa:89:0b:e3:c7:3c:17:07:17:37:
61:a3:6b:39:a2:d0:8e:06:73:22:19:4d:7f:a8:1b:0c:43:fc:
c5:6c:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:55 2025 by rpki-client