Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: O1UeY4kSoBmWsHq56NpkkiSklad6oXqYMQqFJbh7msM=
Subject key identifier: 4A:44:0D:6B:8F:BC:1C:DA:0A:9E:FD:49:26:03:F6:D8:EC:5F:F5:8C
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 019872987D763FF519F5F210EF784C86CC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 052E
Signing time: Mon 04 Aug 2025 01:00:52 +0000
Manifest this update: Mon 04 Aug 2025 01:00:52 +0000
Manifest next update: Tue 05 Aug 2025 01:00:52 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: M6C5tJLBvnJhpINi6ZJ68aiCLJ2IpgCko/UvPfNmvZs=)
2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:7d:76:3f:f5:19:f5:f2:10:ef:78:4c:86:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Aug 4 01:00:52 2025 GMT
Not After : Aug 5 01:00:52 2025 GMT
Subject: CN=4a440d6b8fbc1cda0a9efd492603f6d8ec5ff58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:c9:fc:63:1b:e0:16:cf:c3:2d:30:65:86:
4c:3a:0e:e6:a5:6b:6e:6f:a7:0e:17:2c:cc:91:a4:
81:df:4f:da:19:fe:ee:45:1b:84:4b:aa:16:75:d2:
65:53:d6:ab:ae:b5:99:fa:a7:b8:8f:ad:ae:8c:e3:
ae:5a:3b:9e:70:f0:02:cc:81:9e:a8:8b:ca:c0:82:
c0:52:34:d6:70:75:72:7f:6f:22:8d:a9:1a:a6:ff:
8e:e6:5a:1e:03:eb:be:d2:bf:b2:e5:77:9a:53:7a:
f3:d2:73:06:b4:ac:a6:ee:81:5e:e8:18:db:c2:6a:
43:11:c5:83:45:77:36:00:76:11:bc:f3:a7:9d:c2:
0f:88:b6:84:e6:f5:68:ee:37:aa:35:3b:96:ee:e0:
d8:16:48:17:86:c3:f4:cc:e4:2a:aa:03:dd:2c:db:
76:d9:a2:bb:50:47:04:bb:7c:81:72:b4:3a:bb:06:
98:f9:45:28:14:cd:11:b5:15:48:4f:cf:3b:2d:6f:
a4:47:32:2e:cd:48:b8:96:e3:d4:c0:d2:14:c4:b8:
42:54:df:af:6f:5d:e6:17:7e:3e:9a:60:83:3c:7b:
02:b7:39:18:c3:2a:46:e5:f0:7a:e6:9f:b6:12:e7:
db:ad:79:2e:3a:a3:67:4f:cb:ad:0e:eb:3b:b3:eb:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:0D:6B:8F:BC:1C:DA:0A:9E:FD:49:26:03:F6:D8:EC:5F:F5:8C
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:8d:79:f2:1d:bd:75:1b:07:28:33:8e:99:2e:87:ce:74:
d5:21:f0:5d:0e:ae:ca:40:e0:74:db:dd:c8:bf:ac:d9:84:32:
a8:da:52:1c:1e:8c:09:53:5f:ab:6b:64:3f:34:c9:d4:6f:a4:
8d:f9:7a:2e:c2:0b:7f:ea:8b:27:bf:f2:5e:ef:73:a9:43:18:
cd:08:30:5e:fd:af:fb:c8:aa:12:22:6a:04:4c:71:38:c4:1a:
ba:a9:b9:29:d1:86:22:71:a4:24:6e:5e:0c:77:0b:4e:91:04:
58:0e:2a:4f:ff:9e:31:61:45:45:36:b4:66:45:b9:7c:ee:a7:
5c:d8:0f:8c:42:b0:b3:51:14:e1:0e:62:97:7a:88:19:ec:a5:
37:5e:cd:50:10:0a:3c:64:da:07:6a:14:4a:3a:b0:25:ac:e1:
b9:97:12:b2:d7:78:8e:a2:17:d6:a7:29:ea:0e:58:4b:5f:a6:
01:84:7c:2a:80:f0:4c:58:f7:d1:0c:34:52:fd:71:89:19:38:
53:1c:d5:5b:31:a8:b4:0b:74:a6:98:ab:3f:ae:6c:e7:55:d3:
a7:b0:55:c6:d9:f9:69:30:78:54:d0:d6:fc:63:c5:16:af:e0:
78:e3:a8:c9:9f:23:87:ad:dd:00:60:d0:b0:d9:82:c7:a1:39:
61:87:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:35 2025 by rpki-client