Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: wxr2AkhVbrDHbXRorO1TouFL8bKNjsxneH6F4YjgAxo=
Subject key identifier: B7:3B:18:46:90:6F:53:69:82:A6:CE:4E:CD:64:7F:1D:94:C1:55:B8
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 01987E2EDF85D31C976E9EEE25E8325424E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 07:00:57 +0000
Manifest this update: Wed 06 Aug 2025 07:00:57 +0000
Manifest next update: Thu 07 Aug 2025 07:00:57 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: qLLUpXgDsPyKELUbJDuwOcteeCQDyzNkI6T+E5hkTK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:df:85:d3:1c:97:6e:9e:ee:25:e8:32:54:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Aug 6 07:00:57 2025 GMT
Not After : Aug 7 07:00:57 2025 GMT
Subject: CN=b73b1846906f536982a6ce4ecd647f1d94c155b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:2b:7b:e7:f1:5b:56:22:d4:69:c9:48:8e:
8f:4d:d5:95:e9:bc:13:f8:cc:c3:c1:cd:66:07:79:
1c:98:a8:37:da:bc:a3:0d:f2:e5:48:95:7b:c7:41:
fb:33:d2:2e:57:d5:9b:2b:c3:d9:35:79:35:7d:95:
62:bb:de:74:8d:b2:69:85:52:ca:92:08:06:31:7d:
71:6d:d8:d7:d3:40:c8:79:83:b3:ba:d6:3a:40:b2:
25:c5:da:6f:7e:56:80:cf:d8:eb:74:fa:08:c5:af:
46:21:4e:63:37:95:4a:c5:44:4c:ea:49:4f:e6:ca:
d9:7e:c0:c7:e2:b0:fa:76:71:dc:6c:e1:fe:44:8d:
23:e0:5b:34:06:79:32:41:b3:33:b3:7d:2c:cf:b5:
d7:fe:77:8f:be:33:08:d0:95:ef:e2:cf:65:09:e0:
c0:72:96:3d:68:2e:d7:17:34:54:bc:19:09:88:5d:
af:06:2d:86:01:66:a0:a9:af:cd:6e:5e:14:3f:2b:
82:86:57:54:bf:83:bb:57:5d:63:2f:37:cf:85:d1:
4c:ea:bf:a8:1f:a2:ce:64:f8:4d:ab:ec:ba:e8:fc:
2e:7d:06:01:dd:27:a2:c5:e0:dc:90:db:40:aa:e3:
13:e0:f0:5a:8d:44:4a:36:e4:16:0f:d4:5e:a2:0b:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:18:46:90:6F:53:69:82:A6:CE:4E:CD:64:7F:1D:94:C1:55:B8
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:85:5d:73:5e:69:6c:65:ad:b2:22:40:cd:a6:20:3f:aa:31:
7b:d7:9f:89:87:f2:21:33:ab:da:ac:51:7a:61:08:54:31:c5:
d0:d3:32:a7:b4:14:f5:94:55:f0:76:b1:55:51:04:bf:f1:f4:
a5:2a:3b:f1:52:96:fc:1a:a1:3f:15:9a:c9:e6:59:04:96:7d:
41:6d:0f:8b:61:e1:f0:97:a8:93:c0:57:fe:97:38:14:e3:b1:
e6:2c:0a:28:78:b2:68:c7:2a:b3:98:21:65:da:c2:94:16:4b:
de:57:53:cb:af:5b:f0:a3:4b:7b:e2:ce:66:c2:0d:44:55:3e:
67:f4:92:95:00:14:b6:65:b7:5a:c6:53:09:f4:ab:48:0f:4b:
4c:b4:08:bf:70:40:6e:df:28:01:da:e9:fa:1f:93:24:19:21:
60:f4:72:48:ac:91:88:cb:57:60:91:6b:f6:50:e7:37:af:b7:
b6:65:3d:98:aa:dc:f6:25:94:47:85:2e:26:ad:80:6c:db:86:
0b:62:c9:18:62:43:a2:ea:98:77:49:b4:67:6f:72:17:1e:56:
0e:67:96:1a:a3:f3:89:ae:a4:f9:0a:9f:55:84:fc:cf:bb:c6:
9b:6c:d1:37:0f:49:d4:26:d4:5a:00:d5:32:bd:a0:da:77:3a:
59:e7:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:29 2025 by rpki-client