Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: 7Q64KOJPg9j4jmyl8UB2kzKyoimGHG3PrIO1lAYJyNI=
Subject key identifier: 0D:6F:D2:50:88:FB:4D:3A:BE:BA:12:8B:52:C4:60:8F:11:98:4D:45
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 01987B9D8DA69F94FD2994BA6E082EFB8853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 1252
Signing time: Tue 05 Aug 2025 19:02:59 +0000
Manifest this update: Tue 05 Aug 2025 19:02:59 +0000
Manifest next update: Wed 06 Aug 2025 19:02:59 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: NEKL5WceQhC9gFwa9HliHD8TFcc5stx8aB7Qo05KvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:8d:a6:9f:94:fd:29:94:ba:6e:08:2e:fb:88:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Aug 5 19:02:59 2025 GMT
Not After : Aug 6 19:02:59 2025 GMT
Subject: CN=0d6fd25088fb4d3abeba128b52c4608f11984d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:e3:32:9b:48:17:00:96:f7:32:2a:c2:fc:
d2:91:ba:06:f4:53:de:0d:fd:6c:20:0f:c0:f9:ac:
7c:81:11:b1:b1:97:a7:66:00:b6:03:ce:94:1a:67:
c9:6a:57:b7:7d:df:56:c5:77:34:29:65:f0:6a:14:
23:26:75:31:df:48:02:f9:d2:0d:6e:b4:ee:7a:0f:
b3:06:ea:f3:d8:59:29:ad:a3:84:21:b6:17:d3:b4:
7f:02:29:e4:fa:bc:4f:1f:96:a3:22:e1:7d:be:2b:
85:49:7b:47:27:30:db:90:d9:64:7f:b3:c1:b1:b1:
9b:a2:32:39:4d:f2:0a:06:1a:b9:a6:e3:41:a0:b9:
bd:a5:73:88:57:6c:8f:f5:4d:45:c8:f3:74:87:d7:
b5:cd:f1:d1:dd:8c:eb:64:28:f1:8e:e4:dd:94:9f:
a9:11:02:d0:e6:01:fa:4a:72:8a:49:d6:fa:1a:62:
a1:de:ee:f9:76:19:f0:da:cb:1d:1b:a3:f7:18:8a:
1b:97:e8:e9:5b:44:2f:33:1f:cd:1e:16:48:b0:2a:
5a:9c:1c:4a:29:a3:a0:d3:7c:e0:bb:77:f8:f2:6c:
d4:cf:34:d0:e0:7a:5e:d3:6f:18:26:e5:09:ad:ea:
3c:8e:a1:26:85:5f:7e:21:83:03:1e:dd:ca:90:45:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:D2:50:88:FB:4D:3A:BE:BA:12:8B:52:C4:60:8F:11:98:4D:45
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1a:f9:50:7e:fb:d0:50:47:d7:7e:c5:a8:7c:ea:cc:9b:4c:
ab:f6:40:16:78:ac:17:5f:79:5c:95:72:50:86:60:c3:66:bb:
4c:43:34:10:56:8c:e4:5b:fe:0b:b2:7a:9e:c9:e4:a3:db:c4:
73:09:fb:a1:1c:db:60:13:d6:35:2d:7b:f0:5e:3b:1a:b6:44:
ef:57:f2:f0:de:c2:6a:28:fe:51:2b:84:cf:af:6a:a5:86:93:
0b:93:37:cf:cb:01:f2:86:b8:90:85:32:99:3f:da:a7:08:6b:
1d:b9:6e:19:62:ff:00:54:3b:4f:f5:91:d4:a1:72:4a:a4:ca:
8c:f8:8c:59:4b:b2:01:70:13:3e:90:01:89:d9:6b:17:87:80:
26:ff:79:87:f8:8e:1e:a5:eb:7d:9e:7d:d2:ee:bb:00:4f:b1:
06:e0:98:95:5e:19:ea:69:49:1a:fe:94:fe:05:d2:c3:96:06:
f4:7c:04:3a:8a:bc:ec:cf:c6:85:77:b8:f3:88:98:92:db:89:
e9:12:da:53:3f:db:d5:55:8d:30:9b:b5:9c:c7:45:6a:ea:7b:
4c:b7:77:d7:e0:53:12:eb:9e:8b:8a:12:17:8e:a4:60:f3:f4:
52:e4:b7:bf:5f:0a:87:f0:52:70:12:f3:7f:b8:58:5f:e4:10:
11:d0:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:43 2025 by rpki-client