Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: 703F6hzJf/kX2cEb4DixPgjudswoEoMYPJadwdl2nSQ=
Subject key identifier: 14:3A:6B:42:D9:48:20:D5:8A:64:E2:C0:7B:F0:F6:44:1B:87:D9:80
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 0199FC8F19A4DF6FBEAE868BF370DA235132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: pWqyyUAvpCAFQjLnv9P3oQr7sEJHgiCz8749LgDWMyc=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:19:a4:df:6f:be:ae:86:8b:f3:70:da:23:51:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=143a6b42d94820d58a64e2c07bf0f6441b87d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:a3:70:20:c1:e9:b9:20:dd:15:94:bc:cb:
56:76:a2:dd:fa:86:3f:b3:4a:a9:6d:70:00:9b:1f:
83:9e:1c:69:4b:13:be:8d:f4:50:38:5c:ca:5c:9c:
de:d0:66:11:85:96:06:48:03:f0:62:76:c1:53:dd:
6f:ef:2e:6b:6f:86:5c:93:de:09:6d:2b:21:06:9c:
ec:56:c2:b1:c4:fb:f0:56:cc:68:e4:5d:0f:98:15:
a1:c5:da:ad:3e:db:ba:93:b0:aa:9d:6f:48:cc:50:
b6:e3:f2:82:c6:f2:a2:45:c8:2f:b7:ff:dd:d5:14:
b8:13:cd:fd:29:97:75:de:b1:0a:12:61:93:99:b4:
d8:22:3e:d7:7e:35:52:3d:31:85:83:ac:5e:5c:18:
6c:2e:28:d1:54:14:bb:2f:9b:38:33:b7:b5:4c:5a:
e6:72:ab:3c:13:29:4b:53:ec:7d:cc:22:17:e1:ed:
24:00:0a:83:7f:c6:72:3c:0a:7f:a6:e6:23:67:15:
e0:0f:62:ca:b4:94:99:e6:82:79:cd:99:3e:c1:ac:
e3:cf:44:85:6c:cb:bb:62:d2:76:c2:68:93:a2:68:
a2:e3:93:a9:eb:fa:63:e3:a5:57:6e:a6:72:08:19:
9a:5f:fe:cf:a6:b3:c6:3e:c3:38:b3:3c:77:0c:3f:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:6B:42:D9:48:20:D5:8A:64:E2:C0:7B:F0:F6:44:1B:87:D9:80
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:30:71:cc:b7:08:1a:c3:2b:5c:63:f3:84:04:8d:10:c2:c9:
f8:cc:80:9d:19:c1:9b:76:61:dd:cf:40:a3:70:b4:bf:78:bf:
72:54:35:39:91:f5:9f:f3:80:09:26:22:5f:72:ea:60:ee:cd:
bd:59:a8:2e:f5:9f:56:75:21:88:b0:70:35:08:b5:c6:d3:71:
57:a3:0d:f1:1f:8a:e6:c7:51:38:d3:ef:0f:9d:0c:37:af:fa:
87:47:32:40:45:15:1a:96:41:56:03:de:c9:2c:97:60:79:b2:
06:35:26:75:46:26:68:18:24:b6:7d:1f:fe:b4:26:f5:2c:2f:
96:47:c8:33:d2:7a:65:60:9b:61:de:93:13:31:6b:4b:6c:bd:
79:13:45:c7:48:3b:f6:38:ac:bc:c0:8f:46:b8:59:eb:f2:d5:
24:99:63:d4:ae:eb:eb:44:16:e7:68:26:44:5b:f0:a7:3a:79:
02:ee:62:db:fe:f8:39:df:9e:14:3c:78:c6:61:3b:dc:48:1e:
af:ec:63:85:bb:7b:a1:ca:b5:b3:fc:55:f7:41:62:0d:0a:de:
bc:53:d6:73:db:0a:02:21:ac:fa:a1:dd:4f:d8:57:07:1e:e2:
ba:fa:a0:ac:1a:67:87:03:5c:fc:ba:4c:11:d9:e2:3e:e5:19:
58:05:43:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxmk32++roaL83DaI1EyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh
NGEwODIwHhcNMjUxMDE5MTMwMTAwWhcNMjUxMDIwMTMwMTAwWjAzMTEwLwYDVQQD
EygxNDNhNmI0MmQ5NDgyMGQ1OGE2NGUyYzA3YmYwZjY0NDFiODdkOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pSjcCDB6bkg3RWUvMtWdqLd+oY/
s0qpbXAAmx+DnhxpSxO+jfRQOFzKXJze0GYRhZYGSAPwYnbBU91v7y5rb4Zck94J
bSshBpzsVsKxxPvwVsxo5F0PmBWhxdqtPtu6k7CqnW9IzFC24/KCxvKiRcgvt//d
1RS4E839KZd13rEKEmGTmbTYIj7XfjVSPTGFg6xeXBhsLijRVBS7L5s4M7e1TFrm
cqs8EylLU+x9zCIX4e0kAAqDf8ZyPAp/puYjZxXgD2LKtJSZ5oJ5zZk+wazjz0SF
bMu7YtJ2wmiTomii45Op6/pj46VXbqZyCBmaX/7PprPGPsM4szx3DD8C3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ6a0LZSCDVimTiwHvw9kQbh9mAMB8GA1UdIwQY
MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt
NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk
LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjBxzLcI
GsMrXGPzhASNEMLJ+MyAnRnBm3Zh3c9Ao3C0v3i/clQ1OZH1n/OACSYiX3LqYO7N
vVmoLvWfVnUhiLBwNQi1xtNxV6MN8R+K5sdRONPvD50MN6/6h0cyQEUVGpZBVgPe
ySyXYHmyBjUmdUYmaBgktn0f/rQm9SwvlkfIM9J6ZWCbYd6TEzFrS2y9eRNFx0g7
9jisvMCPRrhZ6/LVJJlj1K7r60QW52gmRFvwpzp5Au5i2/74Od+eFDx4xmE73Ege
r+xjhbt7ocq1s/xV90FiDQrevFPWc9sKAiGs+qHdT9hXBx7iuvqgrBpnhwNc/LpM
EdniPuUZWAVDqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:07 2025 by rpki-client