Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: ipquNNNQw0pl04yw3wjqz47sVZ1E+ZGoU2yQU/MrkYs=
Subject key identifier: 75:D4:C9:EA:D8:6E:13:D2:4C:09:D1:55:26:3D:12:8A:36:40:58:AF
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019A4EF5BCA92EB62389DFC5E59D0B87248D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: 6F+smiRHsi15a0t9t6hGY5KMWaW4+s1h42UgLoug3RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bc:a9:2e:b6:23:89:df:c5:e5:9d:0b:87:24:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=75d4c9ead86e13d24c09d155263d128a364058af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:75:1e:68:46:44:a1:e6:a7:97:fc:c1:ff:
83:39:07:0e:c9:4d:fb:29:10:f5:7e:c1:5b:72:32:
8e:d3:e5:d8:d2:c3:f3:35:e7:74:35:79:63:b3:3d:
6b:fc:2c:c4:0e:0b:40:78:b8:f6:5f:6b:a7:7f:7e:
fe:37:1e:95:1c:a7:74:55:5e:f2:1c:75:47:fc:35:
e9:ea:38:5f:4c:c8:4f:b1:2b:6e:f6:79:45:09:93:
39:cd:8d:6b:20:31:ff:c0:66:23:b8:88:f1:db:b1:
1f:e6:7e:89:96:a7:47:73:95:40:42:30:55:3a:3a:
20:7a:fe:e5:91:a9:54:c4:e3:92:42:63:f9:3a:64:
6f:3f:02:e0:40:4b:38:68:e9:a4:8b:eb:99:bd:d2:
8e:53:0a:60:7e:f5:d4:52:5e:c3:69:e0:10:96:32:
a3:ab:46:74:ab:99:c2:0c:22:80:86:d4:a3:64:d3:
88:ca:24:25:b4:de:f8:46:a7:55:6d:c1:d4:10:4a:
95:c4:67:b4:67:9e:4c:d8:fe:8d:64:a7:93:53:53:
39:14:85:7c:1f:07:0b:13:8f:55:cd:e6:4e:4c:6e:
80:87:4f:0c:58:d4:ba:f6:19:38:ad:60:c1:f4:db:
9e:f3:49:2a:70:1f:72:d5:d7:1c:9e:a8:3c:04:03:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D4:C9:EA:D8:6E:13:D2:4C:09:D1:55:26:3D:12:8A:36:40:58:AF
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:b7:88:c7:ce:da:4b:ea:a7:6c:27:e3:8d:00:39:23:95:
c9:da:35:f3:2e:b2:d8:e5:5a:aa:de:e0:08:6f:f7:b9:c4:bc:
69:22:dd:7b:c7:6d:2c:24:e8:fd:ce:80:b1:d3:4f:24:b8:9b:
5c:b1:58:4d:0a:01:34:83:5f:85:03:a8:67:c6:37:a7:22:33:
1a:5e:8c:f4:44:a7:a3:bf:43:ea:25:ba:ac:c2:76:5a:ed:20:
fe:72:db:5b:ad:91:e5:61:61:c8:c6:67:67:e8:5d:f2:9a:86:
e8:4e:d9:60:3f:d3:20:70:c4:36:42:76:81:10:3a:31:4d:b1:
6a:f5:2f:17:a4:46:b4:ab:a0:43:07:2b:e9:23:8a:e8:57:a4:
30:38:44:1e:7e:e1:54:a4:49:d7:a9:29:39:b3:95:56:00:94:
c6:62:2d:0a:ff:5f:b2:32:63:a9:ab:54:95:1c:5d:c2:9e:f9:
2d:e5:f5:e3:d0:3e:cc:a8:69:7e:e1:f4:ad:dd:d7:97:5d:19:
da:ed:6d:e3:f9:d1:1a:db:af:6a:b4:6a:5d:c0:e9:3a:ff:08:
b4:a3:6f:6e:95:4e:c4:1c:47:d5:1c:d0:9c:d6:de:58:e2:d7:
b3:21:7f:76:6f:f0:5d:e7:10:56:57:5b:93:1e:69:a3:13:83:
ea:26:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:00 2025 by rpki-client