
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: qd7hXvn4C+Sd+4lIEgzQYKMEeHTzSKQprLODWzD0m/Y=
Subject key identifier: AB:DA:48:15:3D:E5:97:24:5B:A6:CF:1F:66:9C:8D:80:4A:EF:54:FF
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01988EEB45365C4ECCD3CF0C3E5ACE35E295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0A6C
Signing time: Sat 09 Aug 2025 13:00:39 +0000
Manifest this update: Sat 09 Aug 2025 13:00:39 +0000
Manifest next update: Sun 10 Aug 2025 13:00:39 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: Lo0Mp33gQYG4jHkt1AhH2QunoKy5Kx0RzNppFDSqV88=)
2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:45:36:5c:4e:cc:d3:cf:0c:3e:5a:ce:35:e2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Aug 9 13:00:39 2025 GMT
Not After : Aug 10 13:00:39 2025 GMT
Subject: CN=abda48153de597245ba6cf1f669c8d804aef54ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:ac:26:e6:2b:f0:38:98:55:09:90:da:cb:
b3:65:c2:94:0c:d5:53:a1:49:f1:49:4f:c3:f0:d2:
88:91:c5:ea:94:ea:64:c9:a1:8f:2d:b3:fc:c7:28:
2e:94:07:07:13:96:f9:1c:64:6a:75:27:49:e6:c9:
7b:f5:1c:de:d9:14:5e:f4:39:1f:4d:7d:2d:76:52:
d8:33:58:06:04:69:da:79:e7:e6:89:32:10:86:99:
6c:5a:92:52:07:de:ca:36:09:b8:e2:e2:d1:88:72:
31:97:1b:ae:1f:4b:4b:28:9a:38:10:bf:04:f9:30:
92:41:57:99:fe:40:dd:2b:f0:b4:5b:59:10:0f:69:
50:c6:07:7f:3d:fc:07:69:7b:74:ba:ee:56:35:38:
ff:11:1e:f4:d3:e4:73:08:72:07:90:83:c0:73:13:
b2:23:f9:2a:e9:49:ec:78:b7:00:80:12:fa:e0:ec:
e0:18:d3:c2:9e:45:cc:33:6a:cb:c9:dc:06:f4:56:
f3:a3:68:93:b2:cc:fb:5a:ae:9d:33:40:07:35:af:
22:2f:60:37:93:77:3c:8a:81:05:e5:ea:ec:2f:c7:
a1:42:75:9e:41:70:fe:da:8f:07:2c:19:71:28:50:
86:77:d6:7c:c5:11:a3:44:9d:20:e2:6c:9b:68:48:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:48:15:3D:E5:97:24:5B:A6:CF:1F:66:9C:8D:80:4A:EF:54:FF
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:53:6c:c6:14:b5:fe:a6:99:ac:f9:ca:83:a6:ff:62:10:dd:
64:e6:0f:60:5a:9d:ad:9d:5f:26:f2:a7:1f:f5:27:c1:70:e1:
16:59:2d:54:ff:44:5d:ea:77:b0:ee:5b:93:04:c5:53:98:dd:
a2:95:de:21:e5:f7:33:0a:e4:35:64:dc:f9:96:8f:59:01:c0:
0a:cd:cd:77:c5:3e:7a:2e:a8:82:10:59:96:33:ff:2a:4f:ef:
20:32:42:b7:11:b0:a0:cc:1c:88:69:7d:63:f6:f0:2b:63:bb:
ad:cd:85:13:c7:c0:9d:23:8e:53:6d:75:ff:92:a2:83:57:4c:
ad:26:4f:96:a3:73:c5:1c:53:6c:75:36:d4:9e:e5:a1:d3:0d:
7f:54:1a:da:d6:b7:14:3a:f8:46:cf:3d:fd:1d:b6:09:14:ef:
d6:ef:0b:5b:a5:6d:3a:6e:bb:03:3f:06:cb:fd:78:93:17:e3:
ce:d9:b8:bf:c1:60:4b:92:4e:79:0e:fb:51:a0:c0:b2:db:9c:
1c:af:45:fa:03:e5:b1:91:7d:e1:a3:fb:74:73:5d:d0:49:ac:
d0:a1:0b:24:66:60:fc:20:40:ed:1b:5b:51:54:25:f0:90:bb:
c2:a8:f5:eb:03:a2:38:a8:89:ea:51:69:ff:88:31:f2:46:8b:
ff:81:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:10 2025 by rpki-client