Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: RnhxKfxNnU16y15C0Kt81LuOwWM9KMl0TKkYOowhwTA=
Subject key identifier: 7D:16:C3:63:94:BC:BF:B6:2B:83:AD:28:09:94:4D:F3:A3:01:78:2A
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 01988F58EC20C3F86E07260ED6600D962DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 0493
Signing time: Sat 09 Aug 2025 15:00:26 +0000
Manifest this update: Sat 09 Aug 2025 15:00:26 +0000
Manifest next update: Sun 10 Aug 2025 15:00:26 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: XSYgIlWFYNN1KT4wuDQaIWWcqc+kb+2oSS5Sqbko8+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:58:ec:20:c3:f8:6e:07:26:0e:d6:60:0d:96:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Aug 9 15:00:26 2025 GMT
Not After : Aug 10 15:00:26 2025 GMT
Subject: CN=7d16c36394bcbfb62b83ad2809944df3a301782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:a3:1d:5f:00:94:b2:4d:99:04:d8:15:68:
7a:7b:e0:a0:86:5a:1d:1d:79:60:9a:85:1e:59:90:
e7:62:5f:16:72:0e:57:f5:e6:7a:71:9d:0d:bb:62:
18:8c:f5:22:d4:e0:29:3a:2e:67:db:74:41:c0:c5:
88:ff:08:d1:65:7c:87:d3:9b:6b:ed:21:95:08:ae:
4d:a9:4f:f0:5d:c8:e8:92:45:b1:8c:14:f7:b5:53:
2a:11:68:d7:ea:f7:6e:53:bf:d5:65:b6:54:1f:69:
62:45:7a:c0:9b:6e:8e:0e:ae:98:60:58:db:89:7a:
87:d8:07:cd:9c:e7:4f:96:e7:75:33:0f:d5:38:d0:
30:77:ca:b5:86:6a:0a:1b:61:59:8b:b7:df:8a:cd:
09:b2:46:26:db:59:43:df:83:fc:70:58:70:a6:6c:
2d:6d:14:89:18:4c:58:83:90:74:72:52:51:f0:8d:
a9:fa:4d:c5:ba:9c:df:25:fa:a2:22:9d:00:b2:dd:
54:d0:49:b8:03:66:0c:8f:29:2d:e3:82:70:55:06:
ed:c6:1b:86:26:76:4b:98:34:21:ca:dd:4a:91:57:
5a:ef:00:16:0e:af:4b:e3:35:22:d9:d4:a5:56:95:
a8:70:88:52:e8:02:21:28:ba:12:31:6f:ed:02:b9:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:C3:63:94:BC:BF:B6:2B:83:AD:28:09:94:4D:F3:A3:01:78:2A
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:96:ab:a5:ae:e5:75:9e:0e:47:f5:a3:83:51:a1:a1:89:
aa:18:71:97:fd:40:d6:89:37:d3:25:ab:a2:78:c4:8e:fe:61:
a7:61:8d:49:c1:dc:3b:40:cc:00:32:eb:87:cc:e7:f3:85:4d:
2a:af:5b:66:bd:b9:f9:fd:2f:eb:56:75:f9:f0:80:2e:8b:56:
0c:ad:55:b0:e3:84:e8:9c:fb:69:1b:48:d5:7c:a0:c0:3d:fd:
87:17:04:6f:e2:d6:a9:70:ca:a7:fe:60:e9:e3:93:27:b6:bb:
2c:09:fe:2d:9a:5b:d1:d1:1f:c3:e2:75:bb:da:77:ae:07:7e:
67:83:c2:a1:77:27:03:44:4e:8f:bf:df:96:55:20:c6:f1:a6:
e4:cd:f5:c5:ab:63:68:85:e9:22:bc:26:1f:16:6b:71:7b:2e:
ce:93:2a:0d:90:3e:ea:fb:40:59:d5:84:52:f7:cd:ee:2e:97:
e2:56:81:30:7b:47:15:89:3d:03:a7:88:7c:59:74:69:cf:a5:
b5:d5:26:76:9b:21:ab:4a:82:b3:ba:6b:05:1a:96:a1:78:96:
df:f1:e5:79:d0:60:37:91:cc:e8:16:80:64:a0:e5:53:c9:d9:
ba:1f:0d:d1:44:9d:dc:08:5d:64:30:5d:03:2f:97:cc:1d:6b:
1c:8a:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:28 2025 by rpki-client