Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier: xSN5obS0YqfzshAO1LYXSomNDEGVAwoRtAOGj1hJlzQ=
Subject key identifier: AD:F0:EA:5B:E7:46:E4:4A:F3:0E:A9:E9:2E:A4:DD:13:64:EB:18:58
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 019A4F2B8F8548D8378DC8CF5BDB2ACF5AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number: 1247
Signing time: Tue 04 Nov 2025 14:00:45 +0000
Manifest this update: Tue 04 Nov 2025 14:00:45 +0000
Manifest next update: Wed 05 Nov 2025 14:00:45 +0000
Files and hashes: 1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: N4B+IIWcP5488Lq5+yP7bXfLc9+DjyfR52GCcF4J5IM=)
2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8f:85:48:d8:37:8d:c8:cf:5b:db:2a:cf:5a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Nov 4 14:00:45 2025 GMT
Not After : Nov 5 14:00:45 2025 GMT
Subject: CN=adf0ea5be746e44af30ea9e92ea4dd1364eb1858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:a9:2f:8b:46:ec:96:33:5d:ee:2d:42:8e:
7d:85:f5:59:cb:c3:8f:29:87:24:1b:d6:69:a6:e1:
2b:b0:79:b6:a1:4f:05:97:6e:fe:01:03:50:2f:eb:
47:3f:94:ae:b7:b9:0e:bb:b3:31:a7:91:18:09:6c:
12:6a:54:36:c5:bd:bc:92:85:79:9f:49:10:7f:e7:
a6:b7:b2:41:e3:c8:ec:7a:e4:4c:b7:34:1a:33:f8:
08:62:a5:03:09:14:b3:93:50:3b:b6:1e:56:6d:d0:
6c:29:7e:a9:a2:62:cf:fa:cc:00:ce:f8:ac:30:ef:
9b:72:f4:e9:6f:dd:61:a7:91:72:79:de:a3:c2:8c:
e2:c3:36:cb:c6:bc:75:45:a8:20:94:54:3b:60:cf:
d9:7f:6e:b5:9e:1d:20:75:6e:08:23:c7:ca:dc:36:
16:29:aa:37:34:b2:85:3d:30:fe:49:69:3d:95:ec:
b1:0c:d8:75:6f:e2:00:30:31:94:fc:a7:7b:6c:ee:
77:74:b5:64:36:6c:d8:3b:70:35:74:b2:55:2f:b2:
08:d4:75:05:bf:cb:d8:79:c6:0d:e5:d1:73:40:d8:
02:1c:a0:ff:95:37:01:d2:0f:e8:37:9e:ba:23:3d:
d8:18:34:a8:ca:b1:11:bd:fa:7d:3a:f0:7e:cc:62:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:EA:5B:E7:46:E4:4A:F3:0E:A9:E9:2E:A4:DD:13:64:EB:18:58
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:e1:cf:f4:0a:7a:bc:86:21:7c:59:26:be:56:5e:8e:4b:
09:3b:0e:3a:5a:54:dd:7a:71:35:0d:49:9d:d4:bf:4d:c0:be:
f8:08:00:4a:b2:62:b0:92:f1:63:0e:85:46:97:18:e9:5d:e7:
0b:69:44:5a:da:91:7f:0c:39:b4:ce:a5:78:9b:c5:89:60:5b:
78:99:88:59:63:f7:4f:be:42:76:e1:88:99:3c:72:f9:bd:93:
92:80:81:8e:1a:22:17:43:24:89:b1:c2:ce:a0:16:13:b7:f1:
c4:29:12:8b:d3:82:17:8b:16:6f:d0:20:5a:02:d6:f5:93:52:
f5:b8:71:ff:fc:c9:27:2c:88:8c:c9:ae:73:e3:60:d3:36:16:
8e:d6:1c:26:54:a4:79:33:28:e9:ed:ad:1a:ce:e4:50:3d:d7:
42:82:ec:6e:f9:64:1c:61:69:d7:56:1f:65:78:05:a1:6a:f3:
25:9b:70:64:fb:16:12:8c:3e:91:0e:14:1d:39:9f:44:06:f6:
1a:91:df:d1:15:20:a2:13:9b:66:62:19:d9:8f:c1:30:09:fb:
50:62:ca:5c:09:f4:15:06:78:51:07:d6:fc:73:bd:fc:c5:78:
2a:73:96:9a:99:2e:37:4b:70:8c:ca:1f:7f:0c:f6:b7:fc:a4:
3a:26:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:17 2025 by rpki-client