Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json)
Hash identifier: 1Z8APmkdP/R/xvrYH6PZ1d71C6B0aNSfPUEpjvQOBD8=
Subject key identifier: 71:72:41:EC:1A:D2:14:97:95:55:6B:12:56:5A:F1:22:07:62:24:E7
Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b
Certificate serial: 019A552DF9458DEA76C55352A55315221A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
Manifest number: EC
Signing time: Wed 05 Nov 2025 18:01:07 +0000
Manifest this update: Wed 05 Nov 2025 18:01:07 +0000
Manifest next update: Thu 06 Nov 2025 18:01:07 +0000
Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: Qwt+N55AvzHWCGj0W++ZyaKePQcFKOd6AwEULE0owRo=)
2: oZDlVRHFRnrptCcfA00p7uB3_TI.roa (hash: 4RY5Dt4Df4i349+ElvF5sCLuJsK1T7pn6qyR+T8cJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:f9:45:8d:ea:76:c5:53:52:a5:53:15:22:1a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b
Validity
Not Before: Nov 5 18:01:07 2025 GMT
Not After : Nov 6 18:01:07 2025 GMT
Subject: CN=717241ec1ad2149795556b12565af122076224e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:95:49:a5:f7:6a:36:ed:7a:49:c4:b7:03:
a2:33:b8:4b:52:ad:87:8a:f6:57:da:40:19:ba:11:
4c:a2:ca:dd:8a:d8:ec:9b:9d:a5:fa:43:9b:29:e0:
59:95:99:5c:76:e3:0f:1b:4d:c1:ae:ce:36:b2:7c:
cd:43:3e:b6:f2:ba:40:13:d3:c5:57:5f:64:ef:00:
a8:76:f2:e5:04:f8:f3:50:72:6c:d4:81:36:59:2e:
5e:2a:33:0e:40:2d:ad:24:95:25:58:78:ad:02:89:
54:9b:d0:cc:b8:5a:2f:4d:f2:6d:84:2a:3f:19:1b:
19:63:78:14:08:ee:17:ad:c2:7e:64:4b:32:3f:53:
2d:be:7a:d2:03:44:ff:43:07:df:cb:3c:2f:81:66:
b0:cb:53:b7:07:36:99:0a:19:2d:14:3e:44:57:91:
0a:d3:5a:07:1f:b2:f8:e7:25:ff:5a:8d:24:4f:49:
cc:e3:0c:d2:b8:cf:60:9c:d8:13:8e:a6:25:80:c6:
c1:eb:ee:7e:99:e2:18:be:d3:37:47:2f:b5:0c:f1:
3d:00:a7:eb:e5:ae:4f:c3:3c:1d:5f:8d:05:07:9f:
39:69:32:d8:df:e1:a1:a5:33:99:fc:5d:df:b8:8a:
ad:0f:b7:46:9b:1a:7b:b0:b9:c3:e8:ea:99:08:74:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:41:EC:1A:D2:14:97:95:55:6B:12:56:5A:F1:22:07:62:24:E7
X509v3 Authority Key Identifier:
keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6f:33:fe:3d:51:b8:80:8c:48:2d:2a:4a:0f:85:3e:db:2b:
fc:46:13:67:a9:6b:88:46:3d:ff:27:30:f1:c4:e2:5d:d6:a5:
9e:ec:78:76:18:8b:f5:fb:6c:7f:c9:70:7b:54:8c:78:ce:98:
3c:0d:38:34:fa:06:62:9c:f3:44:14:7e:fd:d8:74:5f:22:e7:
2f:9f:52:8f:6a:9d:89:a2:96:5e:5a:1d:a3:37:e4:6c:f9:c6:
c3:56:53:ef:ef:2c:2e:e2:26:37:ad:16:45:30:2c:75:7e:1f:
1a:4b:cd:c4:c3:00:64:5a:d8:0c:19:45:71:32:1f:10:5d:96:
39:3c:e7:5b:02:1d:f5:7f:04:cf:58:7b:2f:2d:7d:07:c7:e9:
bf:8b:a8:34:8f:51:7f:73:be:e1:2e:50:cd:5b:e9:4f:ee:aa:
14:ea:42:4e:7d:9e:38:b1:62:f7:0c:53:3b:4e:57:98:93:cf:
ac:3d:ce:2d:56:64:14:c3:53:12:02:48:74:82:75:27:d8:47:
cd:4c:ba:30:62:2b:8e:14:25:04:b3:dd:f0:ec:88:04:9a:65:
a1:0d:af:04:5b:86:b0:7b:08:1e:b6:11:a8:70:fd:dc:43:65:
22:3f:9e:c7:26:58:47:29:a9:24:93:15:b7:4e:c8:01:84:d6:
e6:b1:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:58 2025 by rpki-client