Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: DVovRsVjgBusSfgXVCvHzSBE1kwu29Fv+P50oamC0R4=
Subject key identifier: 42:D4:E9:69:DE:A9:7D:DD:99:69:C3:3A:71:53:C6:5F:64:A8:97:77
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 01977187DB82A99E705AADBCF1636F497387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 03FF
Signing time: Sun 15 Jun 2025 03:00:18 +0000
Manifest this update: Sun 15 Jun 2025 03:00:18 +0000
Manifest next update: Mon 16 Jun 2025 03:00:18 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: cpbPhsBQ0K6xUlP39N1EDuDfCFsQSFIhddDpaWf9t0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:db:82:a9:9e:70:5a:ad:bc:f1:63:6f:49:73:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Jun 15 03:00:18 2025 GMT
Not After : Jun 16 03:00:18 2025 GMT
Subject: CN=42d4e969dea97ddd9969c33a7153c65f64a89777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:5d:54:d2:d8:16:d3:be:a3:84:1b:d0:45:
75:40:0c:42:21:54:13:db:03:43:a3:7b:41:f9:5f:
f3:eb:70:58:47:3f:aa:93:1f:a3:e7:6f:0a:35:1d:
a0:17:6f:c9:88:21:87:6d:fc:ed:64:a1:78:9e:3e:
e7:90:86:bc:6a:0c:6c:c9:f3:52:c1:d0:a4:dd:b1:
b1:02:6a:10:2e:66:17:c4:3a:c7:5d:b3:d5:a2:1d:
ac:fe:f8:17:bc:ae:84:2a:81:3a:9d:92:95:73:20:
ba:a8:4c:97:31:fd:64:2a:2e:ed:3c:eb:87:ee:ef:
64:24:3b:83:bd:55:a2:bc:e1:de:1a:c8:4f:87:2d:
62:c7:d1:25:a3:e0:17:30:a3:4b:63:80:06:75:12:
45:1d:56:dd:d9:d3:7d:62:0b:1b:44:7a:f1:7b:f6:
39:7a:c6:c0:a8:60:f3:2f:2f:ca:7b:b4:8c:a7:0e:
b6:bf:f3:4f:2f:1e:5b:5b:de:e2:5d:d3:36:2e:07:
32:5c:31:9f:c3:51:ab:17:31:13:7e:22:c9:2e:a1:
a3:7c:1e:2a:5c:70:6c:12:d9:6f:3e:71:02:e2:d2:
bd:9d:c1:f7:cd:d3:58:ff:8f:ee:20:52:bb:f7:d3:
20:51:db:81:41:e5:a5:64:94:b4:60:ad:f8:d7:cb:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:E9:69:DE:A9:7D:DD:99:69:C3:3A:71:53:C6:5F:64:A8:97:77
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f4:8f:2a:ee:9e:ae:3a:eb:54:73:d0:3d:d0:e5:46:be:6c:
c1:29:5b:e5:29:0f:42:ea:2c:17:d7:0a:cd:56:c5:4d:05:af:
70:54:0f:4d:5e:62:19:ca:16:c1:1b:5f:0a:14:74:c8:4b:97:
89:a1:d5:fc:36:33:84:21:42:b1:15:c1:d3:58:9d:bd:7f:75:
92:f4:58:c9:02:09:f5:c1:e0:3c:02:51:3c:2a:ea:21:30:a6:
19:71:d3:d2:3c:29:18:b1:5d:90:a3:60:4a:c5:ca:49:c9:3e:
f6:44:68:ae:2e:dd:89:a4:45:b0:f8:45:25:a5:f8:89:0b:d1:
2b:ce:1b:42:53:17:e2:80:97:e3:69:75:d3:b5:c4:fc:d8:8d:
aa:0f:7b:74:44:28:7e:3f:e9:b4:38:f5:07:0b:80:54:da:53:
56:a4:8f:74:18:1e:05:44:fc:29:83:bc:09:ae:be:4e:e3:1b:
c8:f1:d2:1c:9b:f4:40:be:c1:62:7a:2c:35:da:5c:63:1d:93:
0f:81:af:c7:a4:93:4b:b0:7c:67:b4:14:71:4f:4c:b7:7c:12:
60:c4:f2:31:20:c8:2b:c8:52:5e:be:af:cc:f0:c0:87:20:f2:
94:06:f5:b9:cb:5d:7b:79:ce:33:59:7b:65:75:61:2f:e1:16:
c6:13:ba:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxh9uCqZ5wWq288WNvSXOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjQzNzllMTE5ZTcxMDAxY2NkZmVlYmY0ZjJhZjJjZjVm
MDdhMGEwHhcNMjUwNjE1MDMwMDE4WhcNMjUwNjE2MDMwMDE4WjAzMTEwLwYDVQQD
Eyg0MmQ0ZTk2OWRlYTk3ZGRkOTk2OWMzM2E3MTUzYzY1ZjY0YTg5Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdFdVNLYFtO+o4Qb0EV1QAxCIVQT
2wNDo3tB+V/z63BYRz+qkx+j528KNR2gF2/JiCGHbfztZKF4nj7nkIa8agxsyfNS
wdCk3bGxAmoQLmYXxDrHXbPVoh2s/vgXvK6EKoE6nZKVcyC6qEyXMf1kKi7tPOuH
7u9kJDuDvVWivOHeGshPhy1ix9Elo+AXMKNLY4AGdRJFHVbd2dN9YgsbRHrxe/Y5
esbAqGDzLy/Ke7SMpw62v/NPLx5bW97iXdM2LgcyXDGfw1GrFzETfiLJLqGjfB4q
XHBsEtlvPnEC4tK9ncH3zdNY/4/uIFK799MgUduBQeWlZJS0YK3418vZOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELU6WneqX3dmWnDOnFTxl9kqJd3MB8GA1UdIwQY
MBaAFGq0N54RnnEAHM3+6/Tyryz18HoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAt
MGE0MzM4Y2RmOTdiLzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAtMGE0MzM4Y2RmOTdi
LzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/SPKu6e
rjrrVHPQPdDlRr5swSlb5SkPQuosF9cKzVbFTQWvcFQPTV5iGcoWwRtfChR0yEuX
iaHV/DYzhCFCsRXB01idvX91kvRYyQIJ9cHgPAJRPCrqITCmGXHT0jwpGLFdkKNg
SsXKSck+9kRori7diaRFsPhFJaX4iQvRK84bQlMX4oCX42l107XE/NiNqg97dEQo
fj/ptDj1BwuAVNpTVqSPdBgeBUT8KYO8Ca6+TuMbyPHSHJv0QL7BYnosNdpcYx2T
D4Gvx6STS7B8Z7QUcU9Mt3wSYMTyMSDIK8hSXr6vzPDAhyDylAb1uctde3nOM1l7
ZXVhL+EWxhO6+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:11 2025 by rpki-client