Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: 98UfvezZ12DieHAQR9GP7yeOIpIU2gK3J2+SsSaRZDY=
Subject key identifier: A4:AC:8C:96:DA:45:18:F2:CE:E7:A7:16:AD:10:55:CB:13:E7:5A:30
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 0198D473977D5EA8AF2BCBB6FC8D9E7F8645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:21 +0000
Manifest this update: Sat 23 Aug 2025 01:03:21 +0000
Manifest next update: Sun 24 Aug 2025 01:03:21 +0000
Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: Qtq053o4GcrvCWkKO2n1I4/Dr0/0N/PcxTnR/DDxL/g=)
2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:97:7d:5e:a8:af:2b:cb:b6:fc:8d:9e:7f:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Aug 23 01:03:21 2025 GMT
Not After : Aug 24 01:03:21 2025 GMT
Subject: CN=a4ac8c96da4518f2cee7a716ad1055cb13e75a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:5f:10:26:b6:2d:1f:3e:6a:b7:52:43:5d:
c2:0e:f9:25:61:d6:87:d4:cd:81:1f:0b:78:e4:2c:
6e:27:36:2a:6b:c5:59:26:5e:dc:17:d6:83:64:f6:
1b:c2:eb:c7:10:19:0e:63:7d:44:47:a2:d2:cf:11:
ff:ac:a9:82:a6:b7:dd:e6:d1:bc:d8:f0:be:94:39:
09:ea:98:7d:92:5e:31:9e:fb:17:20:23:2e:dd:cb:
8f:c2:03:ad:fe:f9:65:29:45:8d:9d:90:2e:86:b9:
91:52:26:8c:92:6d:a3:f0:1f:0e:85:62:16:6c:4d:
4a:cb:27:6d:ae:99:f5:5b:e5:a4:b3:d0:13:4c:2a:
23:3d:c4:a8:f0:df:d6:aa:1a:5b:fb:9b:a5:1d:50:
59:61:71:62:09:62:d5:d8:97:87:da:4d:23:eb:30:
a1:4b:0b:9d:96:8c:99:7e:67:7d:cb:43:1a:e2:32:
9c:56:22:02:8b:c3:23:69:31:4c:d5:27:7e:45:59:
d9:ea:91:69:2d:20:c0:77:b1:26:5d:c0:6c:4b:6a:
38:11:0f:fd:7c:59:9b:99:22:3f:43:6a:71:4f:19:
76:cd:31:3b:71:63:9d:0f:81:64:b7:ae:ac:06:97:
a8:2e:90:ea:a7:de:5e:b0:68:cb:e6:1c:07:1b:86:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AC:8C:96:DA:45:18:F2:CE:E7:A7:16:AD:10:55:CB:13:E7:5A:30
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:e3:df:3e:5b:84:b3:2c:f5:b2:29:65:c4:2a:4d:47:ef:
97:29:1e:d1:55:ff:cd:8c:3b:ec:46:78:af:fb:db:98:d4:01:
d2:55:17:61:4b:22:3a:f0:15:bc:dc:49:c8:dc:d7:4a:9d:6e:
1b:12:f0:be:34:e1:0c:37:77:c0:d2:f6:22:c4:1b:69:9d:24:
ab:8d:22:6f:e1:c5:d3:74:8c:1c:a0:ab:ce:93:ff:fe:6e:70:
04:57:0a:9a:e3:4c:37:b5:80:7c:fc:f5:35:09:ce:25:94:89:
bb:3c:28:7b:e8:70:e9:ef:a5:3f:19:39:bc:1c:4e:a3:57:01:
6a:8c:32:de:1a:40:17:59:fb:9a:1a:2f:04:b4:05:4d:69:a5:
13:6d:ac:86:6a:a4:81:c4:d5:a5:b2:bc:c0:86:00:14:33:ea:
3d:c4:c6:df:a1:94:e5:e0:6d:3c:ef:95:0a:d0:6d:ea:b5:75:
ff:42:ca:73:25:8a:05:84:fa:90:6a:a9:d2:58:67:63:ff:e9:
30:d4:dc:3a:2f:b8:6b:51:8b:07:18:c5:b6:57:0c:86:dc:c7:
ef:b5:bb:c9:57:47:09:be:69:ae:17:59:83:69:a8:7d:a6:f4:
e4:7b:9e:2a:74:a3:62:c9:38:44:d5:99:c9:82:5a:2f:c3:11:
d2:72:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:23 2025 by rpki-client