Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: YIHYmgy7JV3iJ5N90MuLWVILmtEIkyJoOMACMcevcro=
Subject key identifier: 06:C3:42:B5:15:FD:80:AE:E2:A4:12:92:EC:16:9A:3C:A3:01:B2:9A
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019A4D73B84B508325324BABB15FA2E18396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0FFD
Signing time: Tue 04 Nov 2025 06:00:20 +0000
Manifest this update: Tue 04 Nov 2025 06:00:20 +0000
Manifest next update: Wed 05 Nov 2025 06:00:20 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: NYzKhDGsdiIf6FlQj5zIVebh140nho4Neb+hvzDSdxw=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b8:4b:50:83:25:32:4b:ab:b1:5f:a2:e1:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Nov 4 06:00:20 2025 GMT
Not After : Nov 5 06:00:20 2025 GMT
Subject: CN=06c342b515fd80aee2a41292ec169a3ca301b29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:a2:7a:f2:9b:9e:35:18:19:d2:0f:77:f8:
2c:d8:53:00:fc:dd:06:9a:7e:0c:19:b5:81:04:73:
ba:c8:30:fd:c7:46:d2:8a:59:26:67:a3:95:37:75:
1a:49:46:65:c9:3f:a2:46:49:b7:9d:f4:e3:83:e8:
b8:b5:d2:72:df:b4:f8:03:76:4e:39:9f:57:3b:8f:
cb:9f:8d:06:5e:02:05:58:a7:e8:0a:ee:9a:88:ca:
5d:e4:24:5d:a4:e9:df:cd:48:c1:b4:b9:ce:c3:55:
64:c9:aa:6e:a1:a5:3f:74:38:91:ff:be:71:46:4e:
15:03:cb:5c:94:d1:c9:1c:cc:74:7e:02:c9:10:5a:
bf:5f:b3:cb:7c:23:2c:37:79:db:28:d8:6a:5a:18:
73:13:d5:00:b3:c7:d2:d7:ca:85:6d:69:9f:b1:9f:
bd:fa:68:f3:52:21:1c:9d:cf:78:97:0a:65:4a:24:
36:5b:0d:53:ed:5f:b9:c0:c0:80:b0:12:e9:d4:a8:
31:0b:f8:11:a3:87:56:e6:09:eb:4f:7c:65:c8:b4:
7c:8f:2b:a2:e7:71:ba:6d:39:4c:22:cc:53:a3:40:
70:c6:a9:6e:61:42:e7:4d:fd:9b:aa:d7:e4:59:1f:
86:a6:a4:cc:81:0e:41:b5:fb:6a:01:d2:89:8a:4c:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:42:B5:15:FD:80:AE:E2:A4:12:92:EC:16:9A:3C:A3:01:B2:9A
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:40:74:f6:23:ac:20:d5:16:73:7d:45:88:af:76:09:3f:
63:62:ac:b9:4a:82:3f:c0:b5:f4:4c:9b:76:53:9d:8a:1d:7a:
24:65:a3:ec:9f:07:0a:ed:d2:65:15:99:96:85:33:34:93:81:
f3:24:04:7f:fa:81:94:a0:29:57:9f:35:9c:50:04:d7:18:9b:
90:9c:b1:95:d2:d4:ad:a8:50:ff:c7:3d:a1:1f:e2:b2:d4:48:
74:0b:54:d4:8d:70:91:ef:e8:3b:b7:e5:e3:fc:be:d3:86:2a:
20:8f:ce:51:22:35:ca:3d:8e:26:19:e0:19:50:7a:3a:4a:bb:
97:ae:c0:2c:18:cd:6d:7d:77:95:11:63:96:2e:f5:aa:a1:c0:
6a:65:4d:4c:37:22:00:f0:f3:7b:3f:8e:33:b0:0d:40:78:15:
91:e1:e1:f3:05:45:a7:b3:4e:8b:08:85:cd:c5:dd:f4:f5:dd:
0f:a7:60:45:bd:23:5a:75:84:10:90:6f:cc:cb:82:8d:c4:6c:
28:11:8c:8b:93:e5:b1:ad:b9:46:da:e4:ff:eb:f4:bd:68:58:
51:38:89:b1:4a:e6:d7:a3:8c:22:54:ee:c6:f5:6b:ec:c1:4b:
78:c3:5d:fc:3d:6f:10:b4:eb:c0:b9:ff:30:36:da:38:0b:58:
a1:ea:73:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc7hLUIMlMkursV+i4YOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWJmMDI5MjhjY2NiNTE2YjcxOWZlNTU4ODg0ODQyZjE5
YzA4NzcwHhcNMjUxMTA0MDYwMDIwWhcNMjUxMTA1MDYwMDIwWjAzMTEwLwYDVQQD
EygwNmMzNDJiNTE1ZmQ4MGFlZTJhNDEyOTJlYzE2OWEzY2EzMDFiMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypuievKbnjUYGdIPd/gs2FMA/N0G
mn4MGbWBBHO6yDD9x0bSilkmZ6OVN3UaSUZlyT+iRkm3nfTjg+i4tdJy37T4A3ZO
OZ9XO4/Ln40GXgIFWKfoCu6aiMpd5CRdpOnfzUjBtLnOw1VkyapuoaU/dDiR/75x
Rk4VA8tclNHJHMx0fgLJEFq/X7PLfCMsN3nbKNhqWhhzE9UAs8fS18qFbWmfsZ+9
+mjzUiEcnc94lwplSiQ2Ww1T7V+5wMCAsBLp1KgxC/gRo4dW5gnrT3xlyLR8jyui
53G6bTlMIsxTo0BwxqluYULnTf2bqtfkWR+GpqTMgQ5BtftqAdKJikyj4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbDQrUV/YCu4qQSkuwWmjyjAbKaMB8GA1UdIwQY
MBaAFAEb8CkozMtRa3Gf5ViISELxnAh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYt
N2U5YzBiMDIyNDhlLzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYtN2U5YzBiMDIyNDhl
LzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYB1AdPYj
rCDVFnN9RYivdgk/Y2KsuUqCP8C19EybdlOdih16JGWj7J8HCu3SZRWZloUzNJOB
8yQEf/qBlKApV581nFAE1xibkJyxldLUrahQ/8c9oR/istRIdAtU1I1wke/oO7fl
4/y+04YqII/OUSI1yj2OJhngGVB6Okq7l67ALBjNbX13lRFjli71qqHAamVNTDci
APDzez+OM7ANQHgVkeHh8wVFp7NOiwiFzcXd9PXdD6dgRb0jWnWEEJBvzMuCjcRs
KBGMi5Plsa25Rtrk/+v0vWhYUTiJsUrm16OMIlTuxvVr7MFLeMNd/D1vELTrwLn/
MDbaOAtYoepzQQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:40 2025 by rpki-client