Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: gM/hkzXf5t0JpoZqu4HWGoEV8asgafygHNJCiHUZIOQ=
Subject key identifier: 2B:63:2F:E7:AE:ED:89:FA:B5:13:B2:48:F3:3B:F0:31:0C:DC:5F:47
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019A4F9946F357B5A970D76CC4774F6DF547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: GAFwYtkQl5UETCRcuMlfCtUScME4NN1QZ3UTisSaBUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:46:f3:57:b5:a9:70:d7:6c:c4:77:4f:6d:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=2b632fe7aeed89fab513b248f33bf0310cdc5f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:54:b5:33:83:ac:75:05:22:43:ca:54:31:
42:64:df:c0:a7:2c:26:96:8e:46:ce:42:01:90:af:
03:48:6a:74:44:b7:05:d9:d9:c0:a3:42:56:30:28:
d3:5e:9d:57:60:94:83:46:10:cd:74:5c:d3:29:9a:
b1:1e:ec:44:4d:13:c7:e6:de:9d:7b:a4:8f:7f:b0:
1c:0b:94:38:8d:93:35:9c:45:8a:15:21:ca:59:0f:
4d:69:ce:49:ef:59:2d:5b:66:ac:19:bd:aa:8e:11:
c4:8b:ed:3e:48:ee:df:17:f7:39:cc:e2:c0:46:c3:
f0:bf:a8:da:58:27:92:a2:f5:26:26:11:47:d6:b3:
a8:20:a3:ea:25:27:d0:69:57:c2:ae:d5:08:4a:80:
70:3b:01:65:7c:b0:ce:28:1c:9a:72:06:ab:51:f1:
67:5b:01:0e:14:fb:e5:c2:e8:0f:20:2d:d5:b1:db:
bf:de:07:b7:c6:91:34:fc:38:a6:98:f2:d6:7c:e6:
a0:91:95:64:bf:09:b0:42:b5:29:d5:72:bf:7a:14:
af:e0:68:2c:88:68:c8:26:e0:9b:60:6b:dc:fa:8a:
ce:f3:d3:86:04:08:e6:4d:42:a4:23:5f:b8:f8:9d:
63:8e:ad:9a:34:2b:ec:65:a0:57:58:64:41:45:51:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:2F:E7:AE:ED:89:FA:B5:13:B2:48:F3:3B:F0:31:0C:DC:5F:47
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:79:70:68:d8:b0:b0:3f:6a:b3:2b:5e:b7:33:9d:ef:b4:9c:
5b:a5:d6:f4:1a:2b:b5:a4:43:fd:ef:c8:a4:8b:2d:53:dc:3b:
c8:8b:3e:eb:a1:f9:af:4a:e2:59:3d:99:11:7a:f1:bb:63:38:
94:d7:a1:ff:a9:38:b1:4b:26:9a:92:57:ae:4b:bf:43:6a:f2:
f0:5b:94:fb:f5:4d:3f:f0:0f:dd:2d:c0:85:8d:63:42:25:63:
e4:92:7b:dc:ad:37:50:aa:7d:82:c4:c4:17:19:02:82:31:a6:
0b:45:f3:c0:44:0f:80:29:f2:dc:16:4c:ed:8a:c1:6a:18:08:
df:8c:91:bb:bb:1b:57:4b:dc:16:29:00:33:c8:9f:b2:d6:99:
94:6f:ae:d3:d8:56:93:10:ba:3a:73:e8:9c:56:f3:41:9e:48:
88:ad:b7:e9:27:c7:4a:11:c3:f2:2c:f6:d4:a2:99:80:60:1e:
33:8e:9a:d7:4b:ca:33:16:e5:55:cd:18:3b:e3:c4:33:d1:0a:
2b:11:83:f5:f1:53:44:9a:d1:e9:63:4b:15:28:5f:17:0a:c0:
a2:aa:d8:d1:d5:ef:63:1d:f6:75:95:9e:eb:25:7f:54:c4:87:
7c:c8:1b:0c:9b:60:2f:02:a2:6f:4f:93:67:23:27:cd:d0:74:
f8:24:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:01 2025 by rpki-client