Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: oFTKKQEJwaaR0xsjoh0EKDvqTWU93w3kkUFt61IqC5A=
Subject key identifier: 3D:CA:E2:33:E3:7D:0C:76:E2:9F:71:98:32:84:79:D5:07:36:2D:EA
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019A4EF412AA1AA55D0A091530FCB3FBE301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 1344
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: szJMhZsm9nrO/jcthP24mf4JtCLNvV8QI58b6ce8gfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:12:aa:1a:a5:5d:0a:09:15:30:fc:b3:fb:e3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=3dcae233e37d0c76e29f7198328479d507362dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:0d:24:63:1d:d7:b0:19:fc:ac:55:ee:56:
21:a5:a5:34:ef:44:7d:6c:76:28:0d:d5:00:b2:31:
53:39:21:75:6b:47:b3:02:38:8e:e1:3b:b9:6a:06:
26:06:03:e1:49:b1:71:da:3c:97:4d:7c:07:f0:a0:
37:41:3e:5d:62:0b:b7:e8:84:94:1b:02:ec:76:1f:
c5:db:6e:fa:42:4f:8e:68:4f:59:31:ba:d5:63:42:
8e:0f:b1:e6:e6:fb:a2:bf:b3:6d:ee:e0:07:d8:7a:
21:cc:a5:83:51:fc:5c:a0:8e:31:48:d0:4a:8d:a5:
64:b8:b5:94:c9:7b:49:aa:3b:76:85:55:9b:76:a0:
ba:58:ee:45:2e:13:c2:9c:04:2c:14:fb:01:16:ef:
12:ea:f7:50:b7:be:16:e5:56:6f:e3:29:7b:55:55:
69:b4:8f:3a:cc:55:7e:96:12:a5:49:f2:8e:29:c5:
b1:15:47:c8:93:e9:c6:2e:9c:0a:6f:cd:46:36:ed:
36:14:77:b3:67:ac:a5:d9:a0:cc:34:2a:e5:4c:9e:
79:8c:f5:c6:b5:85:a2:ad:ca:9e:a6:81:9f:db:78:
05:2c:ab:de:bb:60:42:95:13:0f:f8:c0:cd:46:ec:
13:79:84:d7:8e:b3:7f:03:4d:a2:be:24:3c:c9:40:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:E2:33:E3:7D:0C:76:E2:9F:71:98:32:84:79:D5:07:36:2D:EA
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ae:15:6c:12:27:1d:e8:c4:58:cf:01:71:a2:2f:0f:4c:f0:
d0:f0:50:36:d6:26:d0:5f:11:d6:1b:6c:0c:4b:b1:33:a8:62:
7c:83:75:43:5d:3a:1e:c7:cf:34:88:7c:4e:84:67:c8:79:26:
88:b9:04:9d:1f:98:99:ee:6e:43:40:fc:a1:cf:d5:1d:8a:3b:
28:53:b6:fd:fc:49:e1:ec:64:ad:19:fc:61:20:3f:dd:6f:00:
0e:64:02:55:c8:ef:59:68:33:29:5f:5d:c3:8d:d1:a2:93:90:
8d:02:5a:e3:cb:71:fd:cf:6d:f9:f6:2f:c8:5d:db:a5:50:0b:
79:90:d2:cb:5a:60:79:28:cb:15:03:3f:9f:43:81:a7:1a:1d:
2c:24:af:e9:56:10:f6:a5:43:d7:6b:d0:22:32:21:a1:da:2a:
99:15:79:c6:0f:4a:90:74:38:41:4b:1a:b0:7a:9d:2b:97:b1:
ca:d4:ce:ee:5f:07:42:75:96:c8:93:35:b6:25:c5:ac:b0:15:
7c:0d:5a:28:1b:29:49:2d:f1:03:6c:de:4e:96:b9:55:60:b9:
4c:2e:d9:b3:f0:45:11:3b:61:f0:68:71:c0:26:79:7b:a3:80:
1e:a9:d2:54:93:12:af:dc:f4:c3:6e:0a:c8:75:8d:a1:c6:e1:
b5:14:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:16 2025 by rpki-client