Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: OsAXsFhNxATfvUCoXPaOndsFjny9oj3wguxpZnYItrE=
Subject key identifier: D9:90:73:83:0F:2E:B5:67:32:3A:2B:3F:4B:F6:0B:CF:DE:CA:E6:EC
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 01988EEB1B2A7D6D17A48E81373BD0FAF382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1620
Signing time: Sat 09 Aug 2025 13:00:29 +0000
Manifest this update: Sat 09 Aug 2025 13:00:29 +0000
Manifest next update: Sun 10 Aug 2025 13:00:29 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: qlSEnZTTEGDwLCxl0M2WuCY9/qgjnjSVETn/s6o0yLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:1b:2a:7d:6d:17:a4:8e:81:37:3b:d0:fa:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Aug 9 13:00:29 2025 GMT
Not After : Aug 10 13:00:29 2025 GMT
Subject: CN=d99073830f2eb567323a2b3f4bf60bcfdecae6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:e1:63:cb:e7:66:00:0e:39:ff:a2:71:89:
27:2c:45:7e:ff:e4:3a:92:ab:62:47:be:4d:66:fb:
87:69:7c:14:14:36:4e:bd:c6:16:3c:f2:d1:b3:cc:
41:67:13:ef:07:4b:f5:95:22:ea:bd:9b:5e:68:96:
6a:22:96:ed:c2:cb:57:67:d8:0c:f0:c0:8b:f9:85:
34:a8:23:fc:17:63:e9:2f:84:ab:53:ad:29:1f:8c:
f5:4c:d3:8e:de:bd:ca:40:7c:0e:33:40:81:de:ea:
23:af:7c:b9:5b:51:29:84:11:7c:a6:08:b3:92:eb:
1f:36:d5:b1:db:c5:28:80:ea:f6:3b:08:a6:c3:d7:
1c:c8:f5:cc:a5:de:69:dc:00:73:e3:f8:2f:51:d2:
de:a8:02:4c:10:c7:08:42:ff:5b:3a:06:22:ed:d5:
8d:9a:5a:0e:a3:e4:17:a6:d2:f2:d9:34:2f:d6:0d:
6d:7f:79:23:4e:4a:94:57:ab:40:3d:8d:22:7a:0e:
aa:bb:56:95:c9:33:a4:06:47:aa:c7:d3:37:80:e8:
21:eb:a4:fe:f1:92:b4:75:92:ac:43:c9:6f:af:20:
c2:35:13:5f:cd:44:d5:ce:3e:94:4c:6c:e7:14:58:
c4:94:52:e3:5e:4d:ab:5f:b6:a8:e5:64:65:68:47:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:73:83:0F:2E:B5:67:32:3A:2B:3F:4B:F6:0B:CF:DE:CA:E6:EC
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:97:72:e1:3d:85:9f:8a:fd:8b:32:93:53:bc:09:ad:97:83:
b1:e2:5b:1a:e6:39:22:5d:e6:37:ce:4a:6a:7d:99:6f:3e:46:
f1:fa:9f:dd:64:e3:51:37:30:da:16:c9:8b:a2:30:21:2a:83:
75:62:9c:96:b7:52:34:46:74:02:15:b8:11:70:7c:5e:fc:18:
f8:c2:1b:44:fe:70:0e:d6:30:aa:08:47:cd:9d:73:0f:5c:50:
3d:d8:89:b9:d0:d0:53:49:8b:e7:cc:ee:51:2e:1d:a7:f9:e9:
51:d6:35:de:e6:77:dd:41:eb:ad:ed:e7:d9:96:c2:ed:bd:9e:
3f:0b:30:4a:fb:63:d4:67:93:4d:2b:a2:5f:a9:7b:fb:aa:cd:
d0:ce:bd:2e:3b:04:a0:d2:0b:e4:e6:06:28:d2:b4:33:e0:4d:
ca:06:4a:2e:34:e9:78:b2:44:fb:12:d5:93:fb:66:8e:36:b7:
48:69:ab:b9:80:fd:d3:84:cb:be:7a:94:96:1e:ab:83:16:a5:
4d:32:b7:28:96:5a:0d:ad:0b:e1:d6:19:02:85:66:0c:d0:de:
23:cf:ee:ff:e3:a8:d9:f2:0c:6b:20:6d:01:38:e4:ae:9b:3a:
e9:20:2f:a8:c4:b3:b6:4a:e0:71:5f:b4:b3:c2:e4:73:ac:a1:
74:20:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:44 2025 by rpki-client