Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: BJeQf/CQ2dRfD5FgPmasKwAuKPs42KeJ5YlmzDeZo8g=
Subject key identifier: 5E:0F:A6:AB:75:9E:BE:9C:5C:4D:11:F0:0C:5C:F7:47:5E:71:40:D8
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 019A725C7DDEB039F10B0FD60FA2B1253074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: CEkS0/iO5Z0Ctlg+UVw1HJniaQMLkxFTPdfKggdLWR0=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7d:de:b0:39:f1:0b:0f:d6:0f:a2:b1:25:30:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=5e0fa6ab759ebe9c5c4d11f00c5cf7475e7140d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:69:a9:3d:59:77:9d:02:15:50:d3:17:72:
d8:90:89:73:eb:f9:80:f9:23:21:c0:4d:0f:02:02:
2a:fe:47:c4:9a:5a:75:e3:6c:63:4a:50:e4:4c:fa:
37:26:c5:8c:22:8e:75:a4:6e:b1:9c:5b:70:10:6a:
4f:32:e9:5d:fc:38:8b:41:01:c7:6a:e5:b7:b5:2c:
12:71:e0:f5:1a:2e:4e:e2:e8:b0:50:a5:44:71:20:
1f:c7:02:d5:3c:89:4b:73:6e:99:2f:b7:22:98:b5:
ec:51:89:e3:34:25:25:76:06:66:05:e7:d7:74:01:
71:b3:52:7b:b1:9c:4d:4b:d3:22:d8:00:be:20:95:
69:f6:90:83:47:71:00:8e:e4:bf:f1:b4:9f:cf:d6:
0b:15:84:60:cc:71:03:88:03:7f:a2:c6:71:f1:76:
52:07:e7:95:0d:02:f7:a4:b0:23:7b:5f:94:28:f2:
ca:bc:80:4c:9f:e8:c1:42:70:3d:fd:e8:43:32:22:
55:3c:67:ee:3c:8e:40:0f:ad:ce:a6:ad:b4:b0:ca:
18:c3:60:d0:f4:44:7a:8e:5c:27:24:bd:a4:44:b6:
14:46:7f:fc:ca:aa:e4:d8:ea:ad:bc:ef:14:df:9b:
04:2f:12:f7:b3:9d:fe:7d:ac:43:e8:f5:43:53:fa:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:A6:AB:75:9E:BE:9C:5C:4D:11:F0:0C:5C:F7:47:5E:71:40:D8
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:11:22:0a:db:01:1a:b1:82:aa:1c:8a:53:69:34:60:90:
6f:2c:77:a7:a4:b3:83:12:b2:57:b1:6d:00:a3:24:ee:2c:5c:
6a:89:2b:d9:37:65:8f:64:22:53:02:b4:61:7e:dc:16:93:60:
e5:35:5e:61:ec:44:88:f7:2d:8f:fe:d0:bf:ce:7e:ca:01:2c:
7a:31:de:51:ef:ff:8f:e9:5d:14:e2:6c:19:55:9c:54:ef:22:
0c:af:a6:25:0d:51:90:9f:84:fc:4f:23:3e:48:88:0b:c6:74:
69:ec:81:0c:52:2b:c4:3c:85:da:7f:cf:ed:66:9f:07:38:12:
f4:79:9c:2c:aa:4c:8b:5b:60:fe:e4:14:aa:30:28:2d:ab:27:
c3:f6:fa:86:c9:99:ef:f3:cc:c8:0c:47:33:88:b9:df:8d:7e:
95:64:82:0e:37:f1:72:10:bb:14:c9:7e:34:c1:f1:b5:bc:13:
e6:9b:7b:78:9e:e9:0f:7a:9a:29:67:71:70:8c:7f:78:a1:8e:
2b:6d:a8:c6:3a:11:7d:5a:ed:9e:27:1a:3e:01:e8:cc:34:d2:
af:06:3d:2b:ee:d3:27:eb:07:b7:12:5e:ac:ee:38:22:5a:21:
d5:f5:70:c3:eb:15:d5:6c:06:e7:c7:37:eb:07:44:50:ef:e5:
85:fd:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:53 2025 by rpki-client