Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: Nc493v94P0OHueIEBWe1vxSfh6q7N80vN3mQYtLFm2o=
Subject key identifier: 85:48:89:F0:79:1F:8C:F2:73:09:FF:5F:9E:20:19:F7:48:6E:53:8B
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019A51510C002095B02B1DFDD6C566B3523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 057C
Signing time: Wed 05 Nov 2025 00:00:57 +0000
Manifest this update: Wed 05 Nov 2025 00:00:57 +0000
Manifest next update: Thu 06 Nov 2025 00:00:57 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: 1lynkRNG6wy00Duvn5DcBV2hJCNm9uDtB1bI2/6Yawg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:0c:00:20:95:b0:2b:1d:fd:d6:c5:66:b3:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Nov 5 00:00:57 2025 GMT
Not After : Nov 6 00:00:57 2025 GMT
Subject: CN=854889f0791f8cf27309ff5f9e2019f7486e538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:b5:27:e8:29:0f:1f:98:06:78:d2:f8:27:
0b:48:a5:51:32:87:23:b2:21:a5:b3:4b:d3:49:41:
2c:e9:40:a8:56:40:28:74:c4:39:2e:ce:b1:c0:48:
cc:35:2f:c6:5a:88:a1:73:d9:c4:22:23:ea:f7:66:
10:4a:b9:0a:b7:6f:f2:17:33:2f:0e:8d:a5:69:5e:
ab:07:12:7a:e8:e5:72:22:8a:ea:1f:09:a8:9d:26:
f4:46:e7:33:53:39:41:05:97:65:7e:dd:47:01:4f:
34:d0:8b:66:c2:e6:69:7b:8b:34:60:24:48:d3:7b:
6b:14:db:2f:12:45:c3:fd:ea:7f:e9:6c:7c:a9:4b:
92:5d:d6:56:9e:6e:3c:93:72:61:d2:17:97:3a:75:
95:0d:7b:4d:bc:a6:b3:a7:90:be:e1:ea:7b:87:cb:
6a:83:e0:82:db:33:b3:8e:7d:fb:b1:40:7b:59:a5:
d2:84:0b:d1:54:8d:b8:41:97:9d:b7:8c:b1:d5:78:
72:42:0c:19:34:15:ca:62:99:ca:57:8f:b8:fb:c4:
d5:21:44:fd:57:6c:8d:64:1b:f3:6f:2e:00:10:c9:
c3:1d:70:47:ea:81:ea:f4:1f:29:4e:99:68:f0:53:
fd:70:bd:0f:8f:bb:fd:d1:d3:0d:e0:83:e0:f7:34:
b9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:89:F0:79:1F:8C:F2:73:09:FF:5F:9E:20:19:F7:48:6E:53:8B
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a0:70:49:ed:fd:e0:37:65:9b:63:3b:e0:5e:69:ca:6a:64:
81:90:71:28:43:a7:97:96:5e:33:7a:3b:b6:a0:1d:76:a6:ac:
b4:c5:90:39:eb:b7:1d:d3:84:f5:5a:82:b8:ab:a1:9c:0a:60:
2f:ec:52:b3:d7:5d:92:53:33:d3:34:99:89:0c:42:19:e2:1f:
58:11:13:a9:3b:8b:bb:e5:61:34:9e:da:9b:f0:8d:a2:3d:d8:
4a:09:ee:06:89:c3:6e:da:e2:bd:ca:59:d5:92:8d:30:02:4c:
9f:2d:ed:83:07:02:68:fd:4e:b9:81:81:bb:04:5e:7f:b0:63:
6f:36:23:7f:ff:7e:9e:64:18:08:29:74:f2:29:11:47:a6:02:
bc:18:57:39:29:01:43:08:84:34:8c:19:c9:bf:10:f8:98:c7:
d4:51:50:2f:86:e8:0b:9f:e6:77:7d:b0:36:41:7c:38:a5:11:
f1:b4:9c:17:d2:db:72:02:26:32:15:b3:20:d0:64:bc:d4:e5:
e6:a2:53:a7:44:e0:72:51:12:ee:b1:a0:65:f4:b4:a8:c4:bb:
71:fc:2e:7e:a6:0b:96:da:66:a9:e4:c2:61:52:77:a5:c8:f8:
8a:c9:ac:8e:b8:50:1c:7a:a2:1b:e3:3f:bd:93:f7:ee:ff:c3:
5b:ab:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:17 2025 by rpki-client