Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File: ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier: jZa28HobjE5MTfe6j9EHlfh951aQjn8nz0UMce6yltA=
Subject key identifier: 82:9A:AB:46:40:E1:03:BC:26:4A:B4:D8:33:9B:5F:9A:40:59:BB:06
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 019873E406C003DB03516B92486674B2A3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 07:03:00 +0000
Manifest this update: Mon 04 Aug 2025 07:03:00 +0000
Manifest next update: Tue 05 Aug 2025 07:03:00 +0000
Files and hashes: 1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: /mLzEoCtvMMEte6a59Iugtm4d2q+ObMMsdEfVtycQtQ=)
3: Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa (hash: FuW53gbYqPmWdJbbqmlfjqZ0BgNfy4rZW67679JKp0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:06:c0:03:db:03:51:6b:92:48:66:74:b2:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Aug 4 07:03:00 2025 GMT
Not After : Aug 5 07:03:00 2025 GMT
Subject: CN=829aab4640e103bc264ab4d8339b5f9a4059bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:37:ce:d7:9c:25:f3:18:0f:74:14:c0:fd:
db:8a:48:b1:1a:ec:4f:67:da:3e:fd:04:b7:bc:32:
35:ec:12:d4:43:5b:81:e6:ef:d2:d7:0e:81:a6:9c:
d0:32:dd:83:91:d9:ab:bc:bf:33:47:44:d6:12:28:
dd:98:74:44:71:cb:29:9d:ff:b6:ca:d9:9b:90:eb:
ca:0b:b0:e5:be:59:16:e9:16:87:3e:fc:cb:1d:d4:
46:31:f0:74:93:a4:1e:99:81:a7:ec:1f:64:e9:50:
79:1e:8e:4d:33:07:36:dd:f4:cd:18:ce:ac:3a:eb:
d7:6d:40:c3:45:2d:bb:a4:8b:92:c6:9a:ed:6a:aa:
6a:50:87:8e:c4:87:41:c2:45:f7:ce:8e:2d:df:d4:
fa:3d:6e:5c:c1:bc:29:e1:14:2b:a1:00:a7:6e:80:
cb:de:6f:b0:16:6c:6c:d5:dc:86:8c:89:63:23:e7:
fd:9a:e8:4d:b0:9c:5a:c8:66:ab:f3:3a:66:2e:a3:
6c:69:e2:38:2f:43:28:4f:28:5d:0c:aa:a5:b8:ed:
01:41:a1:23:d7:19:30:f2:4f:8a:2f:cb:72:5b:62:
6a:07:50:e3:14:44:db:be:40:73:4e:9a:9f:29:2d:
81:1e:25:cc:91:b2:aa:f0:72:00:eb:31:c8:e6:7a:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:AB:46:40:E1:03:BC:26:4A:B4:D8:33:9B:5F:9A:40:59:BB:06
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:76:d3:44:18:1a:51:c9:3c:88:e2:3b:b0:9b:e8:8c:76:dc:
14:59:91:ed:14:a5:79:7c:e1:cb:66:57:4b:70:c3:ca:ab:b6:
b8:d2:1e:5f:05:c6:de:0f:6b:7d:d4:f0:2f:3b:a9:bd:22:2a:
2b:fa:a3:8c:a2:60:8c:fb:e3:fe:2f:22:13:2e:6f:a1:ad:9e:
75:90:a5:0e:ea:15:bb:a3:44:78:1c:36:26:6a:e1:e3:d9:82:
39:68:57:1a:93:dd:48:64:3a:10:e0:c3:c6:b9:56:6f:48:52:
8a:df:2b:57:03:3a:64:c9:4b:b4:91:32:77:f0:8e:b4:49:5a:
3b:2f:31:9d:63:ce:26:95:de:68:b5:83:bb:dc:cc:17:ec:0d:
a0:17:bd:f8:66:0a:3a:8f:0c:fa:a1:ec:99:78:13:b8:49:1c:
a0:69:61:60:34:14:51:69:93:f3:90:9c:e7:aa:e2:51:96:6d:
24:39:d3:b7:8e:f1:e0:f1:d3:cd:8d:ee:5a:e7:2a:72:62:bb:
8c:f0:47:69:6d:43:08:b4:23:70:f6:e4:9b:b8:fb:06:5d:af:
61:36:2a:37:b9:4f:31:4a:16:89:9f:6e:39:17:6d:84:57:e7:
11:7d:74:67:e2:53:de:60:9d:04:52:e6:a6:29:55:32:af:75:
40:df:d9:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz5AbAA9sDUWuSSGZ0sqPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5
ZmJmNzEwHhcNMjUwODA0MDcwMzAwWhcNMjUwODA1MDcwMzAwWjAzMTEwLwYDVQQD
Eyg4MjlhYWI0NjQwZTEwM2JjMjY0YWI0ZDgzMzliNWY5YTQwNTliYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYI3ztecJfMYD3QUwP3bikixGuxP
Z9o+/QS3vDI17BLUQ1uB5u/S1w6BppzQMt2DkdmrvL8zR0TWEijdmHREccspnf+2
ytmbkOvKC7DlvlkW6RaHPvzLHdRGMfB0k6QemYGn7B9k6VB5Ho5NMwc23fTNGM6s
OuvXbUDDRS27pIuSxprtaqpqUIeOxIdBwkX3zo4t39T6PW5cwbwp4RQroQCnboDL
3m+wFmxs1dyGjIljI+f9muhNsJxayGar8zpmLqNsaeI4L0MoTyhdDKqluO0BQaEj
1xkw8k+KL8tyW2JqB1DjFETbvkBzTpqfKS2BHiXMkbKq8HIA6zHI5npU7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKaq0ZA4QO8Jkq02DObX5pAWbsGMB8GA1UdIwQY
MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt
OTAxM2NhOTk2YjE2LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2
LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenbTRBga
Uck8iOI7sJvojHbcFFmR7RSleXzhy2ZXS3DDyqu2uNIeXwXG3g9rfdTwLzupvSIq
K/qjjKJgjPvj/i8iEy5voa2edZClDuoVu6NEeBw2Jmrh49mCOWhXGpPdSGQ6EODD
xrlWb0hSit8rVwM6ZMlLtJEyd/COtElaOy8xnWPOJpXeaLWDu9zMF+wNoBe9+GYK
Oo8M+qHsmXgTuEkcoGlhYDQUUWmT85Cc56riUZZtJDnTt47x4PHTzY3uWucqcmK7
jPBHaW1DCLQjcPbkm7j7Bl2vYTYqN7lPMUoWiZ9uORdthFfnEX10Z+JT3mCdBFLm
pilVMq91QN/ZKw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:00 2025 by rpki-client