Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: eKsvFywZ6QSP7HearvuQfmqyAP7awQmd23ttPWf1Jio=
Subject key identifier: BA:E7:D6:9C:CC:5E:76:37:84:04:AE:8F:AA:1B:79:7F:48:21:04:AA
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019A50E401DD353B7D356E9A6DB591C08ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:51 +0000
Manifest this update: Tue 04 Nov 2025 22:01:51 +0000
Manifest next update: Wed 05 Nov 2025 22:01:51 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: mpYVet4pF2zD6JY6FhtcaIsxDwuVR7lEjPO0Cau/IQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:01:dd:35:3b:7d:35:6e:9a:6d:b5:91:c0:8e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Nov 4 22:01:51 2025 GMT
Not After : Nov 5 22:01:51 2025 GMT
Subject: CN=bae7d69ccc5e76378404ae8faa1b797f482104aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:84:f6:e6:a2:d9:25:f8:25:5f:23:49:37:
c8:5f:67:27:3d:12:de:3a:d2:3d:cf:ed:3f:df:46:
0c:ea:42:6d:af:32:fb:ac:22:7f:ec:b6:bc:44:e7:
c4:bc:4c:2d:8e:de:3d:36:16:e3:cd:76:f0:84:eb:
13:41:1b:07:93:fb:0f:fc:f3:45:ce:c3:1c:6d:03:
59:e2:9a:05:cc:90:52:b5:58:98:31:d7:c0:74:28:
b7:97:ca:e0:86:90:c7:5c:b3:d5:04:b6:06:73:93:
d9:4a:6a:7d:cd:d3:89:5a:3b:63:37:f2:b6:30:f1:
a0:cc:6b:56:be:6d:c6:69:8a:5c:4b:6e:c8:5c:be:
9c:9b:6b:ef:f4:8d:ce:6c:91:d0:31:ec:35:c3:f8:
15:ca:ad:29:a1:f4:51:de:98:85:12:34:01:af:ee:
d6:72:e8:7b:ca:d5:bc:89:13:67:bf:71:ff:b6:2f:
ba:40:97:7c:a3:97:be:f9:bb:99:10:64:9a:95:94:
d7:9f:c3:ae:07:6e:5e:72:fa:96:b3:20:ef:ea:a6:
d7:48:d3:9f:17:73:ff:5f:d7:86:e0:77:30:50:40:
a2:4b:c4:97:63:04:83:cb:6c:9d:6d:34:4e:7b:0b:
0b:88:24:cf:76:0b:fd:a6:79:f4:ce:6c:27:72:07:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:D6:9C:CC:5E:76:37:84:04:AE:8F:AA:1B:79:7F:48:21:04:AA
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:f9:7e:9b:c0:74:f4:d7:24:d4:57:d7:65:a6:6a:04:7d:
47:cc:c4:b9:d4:fc:ff:07:42:08:6e:83:79:93:7b:8f:fd:85:
64:cd:47:40:52:f3:29:ad:27:6f:32:c6:f5:e0:3f:51:73:b5:
6e:a1:c0:dc:da:bf:9f:83:55:4d:d4:3e:6a:2d:39:26:01:b6:
18:24:d3:0c:87:53:29:20:65:8c:83:30:50:f4:a3:74:6c:bc:
d4:17:51:02:65:8b:bf:0d:2e:8b:00:ec:83:79:9f:1c:28:3e:
5c:d0:02:17:fb:6f:05:ee:1f:ae:ef:57:24:39:0f:47:93:73:
f1:97:e5:9e:83:31:dd:de:90:aa:9f:5a:1c:3d:8b:f9:5e:4f:
ae:43:14:12:e1:53:41:ee:e3:77:1b:86:f0:97:91:7d:79:af:
9c:5b:cd:c6:6b:59:b6:c6:09:da:e1:23:98:85:a6:11:b3:ad:
0e:8b:bc:f3:5e:db:32:4b:08:5c:2a:54:5d:bf:a0:41:bf:cf:
ff:21:b0:80:b7:1a:80:58:cc:5c:9a:f3:46:93:d8:4b:1b:32:
59:6f:9f:1f:91:8e:8b:8c:50:24:a1:f9:83:1f:da:26:7e:40:
55:86:cf:fe:03:ca:a5:52:8c:ea:fa:50:f7:78:49:a9:e8:1f:
63:c4:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:33 2025 by rpki-client