Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: 1bOUG+iQ+ZdVTdYYIhrx6Ynf4e9J5Nqe+hFUZoo9juU=
Subject key identifier: A7:2C:CD:88:22:50:98:D0:4D:0B:0E:72:79:69:6D:11:2E:EC:E3:90
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 019A4DE1C53C046BB593AD071F8378EB1E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 0FE5
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: 48Yb9ce1zYsYnUHseNI3g8F/c/9Q1xZ75YDPettn62M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c5:3c:04:6b:b5:93:ad:07:1f:83:78:eb:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=a72ccd88225098d04d0b0e7279696d112eece390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:66:43:e2:47:23:d3:c8:f6:ba:7d:ad:2f:
48:90:11:0f:d0:e7:fe:6b:ad:c7:02:e9:a8:ae:b3:
37:14:c8:26:1a:6c:63:36:e3:1a:3a:37:4b:a9:45:
07:59:3e:5a:ce:28:81:7f:56:55:05:6a:6c:7a:9d:
0e:f2:56:35:04:eb:7c:a1:0c:71:ec:99:0b:78:38:
c8:5b:02:2e:90:3f:1c:0d:58:7c:b0:ea:82:16:d2:
7a:70:38:82:26:0a:5a:cc:96:1c:d8:2a:8d:b7:d3:
4c:d8:c3:9f:40:dd:ea:75:5f:36:c7:7c:f8:a7:de:
89:60:51:32:d1:d6:3b:0b:a5:62:2a:31:36:8c:ce:
80:2b:ed:1d:a9:e9:55:05:b7:1b:79:c3:71:29:a3:
35:ab:b5:97:11:0e:8a:37:e2:3d:38:dc:75:1e:82:
8c:5d:59:2b:16:ec:af:3d:1c:ac:36:dd:a3:f2:a9:
a2:97:73:74:d8:4d:ca:47:6e:e5:99:c0:23:aa:86:
c5:3d:d7:9f:6a:38:c8:f3:08:f9:c6:51:01:46:a1:
3b:a7:46:2a:a2:7a:39:bb:df:54:e3:d5:c7:ee:2e:
0a:1d:7d:92:39:36:31:8d:d7:08:63:eb:b5:a0:0b:
3d:23:93:d1:33:0b:c5:76:07:eb:34:e8:8a:8d:19:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:CD:88:22:50:98:D0:4D:0B:0E:72:79:69:6D:11:2E:EC:E3:90
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:dd:c1:d6:80:2f:b1:4f:ac:52:2b:50:dc:e2:40:0a:bc:4f:
d6:07:d6:08:39:e7:99:ec:be:ad:03:dc:3b:fe:22:28:c4:e0:
db:06:ea:e7:77:fc:a2:65:df:35:a6:5d:a8:66:08:c7:49:66:
47:43:0b:02:87:f6:b0:40:ec:98:8e:2d:2c:96:4b:c1:c1:63:
90:7a:7e:73:55:4a:e6:8d:cf:1e:39:5c:c9:47:4a:a7:b7:ab:
11:90:5b:15:39:86:58:13:57:60:98:6c:b2:a9:10:da:1a:5f:
7b:90:37:63:c0:ff:ef:50:85:8b:82:be:97:b2:e9:f5:37:35:
53:f2:90:dd:2c:02:23:5b:40:09:c1:bd:d9:c7:e9:7d:f6:ad:
7b:bc:ef:8a:99:65:35:c9:78:ea:4a:d4:35:25:b1:d6:e4:da:
e2:fc:04:7f:e6:7e:c8:f4:24:e1:c8:89:2d:b4:6a:c2:63:99:
4b:2a:3a:4a:9f:fc:08:f9:2f:94:8e:0c:7f:f6:43:45:14:28:
5b:14:f4:b3:2a:d2:f5:fa:53:3e:07:ad:fe:3d:1a:04:19:db:
18:c8:ec:44:2c:fa:38:5e:dc:30:06:32:6f:c7:d3:e9:bc:02:
8f:21:c6:0e:68:0c:b8:38:e2:7c:6d:40:f9:c4:a4:da:47:ae:
d4:30:7e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4cU8BGu1k60HH4N46x4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYmE5ZGIyNjc0ZjczNDU2NWYwOTUzMzkzZjBhNTY5NjFj
YTU3YzgwHhcNMjUxMTA0MDgwMDMyWhcNMjUxMTA1MDgwMDMyWjAzMTEwLwYDVQQD
EyhhNzJjY2Q4ODIyNTA5OGQwNGQwYjBlNzI3OTY5NmQxMTJlZWNlMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4tmQ+JHI9PI9rp9rS9IkBEP0Of+
a63HAumorrM3FMgmGmxjNuMaOjdLqUUHWT5aziiBf1ZVBWpsep0O8lY1BOt8oQxx
7JkLeDjIWwIukD8cDVh8sOqCFtJ6cDiCJgpazJYc2CqNt9NM2MOfQN3qdV82x3z4
p96JYFEy0dY7C6ViKjE2jM6AK+0dqelVBbcbecNxKaM1q7WXEQ6KN+I9ONx1HoKM
XVkrFuyvPRysNt2j8qmil3N02E3KR27lmcAjqobFPdefajjI8wj5xlEBRqE7p0Yq
ono5u99U49XH7i4KHX2SOTYxjdcIY+u1oAs9I5PRMwvFdgfrNOiKjRlXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcszYgiUJjQTQsOcnlpbREu7OOQMB8GA1UdIwQY
MBaAFAK6nbJnT3NFZfCVM5PwpWlhylfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgt
ZmY4NjE0NmY4Y2M4LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgtZmY4NjE0NmY4Y2M4
LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN3B1oAv
sU+sUitQ3OJACrxP1gfWCDnnmey+rQPcO/4iKMTg2wbq53f8omXfNaZdqGYIx0lm
R0MLAof2sEDsmI4tLJZLwcFjkHp+c1VK5o3PHjlcyUdKp7erEZBbFTmGWBNXYJhs
sqkQ2hpfe5A3Y8D/71CFi4K+l7Lp9Tc1U/KQ3SwCI1tACcG92cfpffate7zvipll
Ncl46krUNSWx1uTa4vwEf+Z+yPQk4ciJLbRqwmOZSyo6Sp/8CPkvlI4Mf/ZDRRQo
WxT0syrS9fpTPget/j0aBBnbGMjsRCz6OF7cMAYyb8fT6bwCjyHGDmgMuDjifG1A
+cSk2keu1DB+WQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:10 2025 by rpki-client