Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: JdtCoiqFxtAXv3dERXbVxLeks8rEx/wO6ucMCg/F2oQ=
Subject key identifier: 45:BB:2B:B6:1B:18:27:07:0E:E9:86:F8:EA:99:EC:14:CE:48:34:DA
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 0197B745127B2FD3AF34250DAD2A279EF036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: Rldx2SHWfOlyljLNt1bBBVSChs8MCZ3YnFRfeZpDSyY=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:12:7b:2f:d3:af:34:25:0d:ad:2a:27:9e:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=45bb2bb61b1827070ee986f8ea99ec14ce4834da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:13:7b:ad:10:c3:7c:f2:44:b9:3f:53:4d:
26:b4:77:4b:49:10:3a:e7:8e:98:95:9a:db:84:08:
af:1c:f3:09:98:44:be:15:db:40:81:f3:05:c3:be:
d5:8c:0e:ab:8b:8c:ac:e7:e9:d9:ce:aa:f4:9a:5b:
6f:a9:a1:20:52:2e:6d:0f:9a:58:45:35:54:fb:19:
95:a3:d7:cd:fc:75:fd:31:27:ed:b8:70:04:b5:05:
2e:fa:c0:88:15:ca:44:62:01:7c:bd:c4:0e:f9:d8:
06:e1:d4:ca:76:ba:e4:a8:3c:e4:e9:f2:7e:40:0a:
1f:0c:68:68:3a:49:da:4b:19:6e:51:ba:a7:8d:c6:
1c:fc:06:d7:33:96:6e:38:29:86:3f:59:12:40:97:
01:70:b5:c2:f2:20:de:08:86:dc:bf:59:e0:15:ce:
89:58:2a:44:2a:5f:aa:14:6d:a4:8f:54:62:2a:09:
df:57:76:f4:bb:8f:4c:e3:e2:69:60:05:36:18:01:
77:9f:c2:d8:b5:2b:09:46:1c:9f:69:2c:de:df:91:
48:bd:d7:02:ab:a6:36:28:1f:65:3e:cf:4c:22:22:
e0:b5:a2:50:c2:0b:83:a8:fb:be:3e:be:24:fc:e9:
fb:6b:7f:0d:9d:db:92:f5:73:f2:66:8e:63:5b:cc:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:2B:B6:1B:18:27:07:0E:E9:86:F8:EA:99:EC:14:CE:48:34:DA
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:4d:2d:d5:06:2e:32:f4:de:02:bf:9c:ae:c3:51:dc:1e:
45:0d:8b:a6:9e:04:08:a8:1e:a9:09:32:c7:b2:05:62:21:94:
02:fe:68:af:e5:44:40:7e:35:d7:3b:ea:90:38:05:3b:9b:d5:
65:05:25:c1:f6:29:95:41:97:49:86:d0:bc:5d:f6:3e:51:d6:
e0:0b:8a:df:f5:19:68:69:7e:1e:63:be:b0:15:43:b4:2c:60:
6d:c0:a4:76:db:f1:a6:49:3d:20:5b:8e:73:2e:29:d3:15:e4:
18:17:c8:c7:2d:bd:cb:6e:ec:d6:da:9e:8c:38:92:28:95:cc:
fe:31:29:e2:c3:dd:dc:a0:0e:94:93:2b:e8:16:55:5b:86:17:
a3:db:9b:a3:4e:ff:05:e9:0a:35:d6:a6:5a:62:6f:d9:54:c0:
97:13:30:14:9c:f0:c0:5d:84:aa:e9:69:bc:a3:c8:7f:0b:c5:
56:b6:69:7b:74:13:cc:2c:98:8c:23:66:2b:5f:72:c5:fa:3f:
88:04:34:e4:34:be:a1:a4:4a:fc:20:82:21:63:f9:c5:a3:3e:
a4:2d:dd:53:cb:ef:84:e6:2b:6b:43:e5:7a:cc:a1:07:19:c1:
7c:9b:3c:83:4f:28:5a:8c:cb:ec:ba:90:39:66:c1:26:16:0d:
9a:94:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:41 2025 by rpki-client