Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json)
Hash identifier: FlX4KypQhjVcdPhHA+thsWczBxc4xrvQLfk5og9/TJ4=
Subject key identifier: 5C:FD:10:29:4C:CF:71:1D:B6:82:82:D7:85:84:60:7E:C0:6B:58:7D
Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b
Certificate serial: 0199FD6AE7B5BB5E96F66DF25D94AC0148FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
Manifest number: BE
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: AJ1CFYcbOc+zUUQbc7/6kGpZAOZNCJsSLkv/CHRJs6Y=)
2: CqyAVWGwUYFXk3xLCbAbOd-2w64.roa (hash: 9le//z+aFU9uWnp3Sn0UvoQZVhblLhWFcW8v/Wf8MNc=)
3: JtBlmMT7cUdJQUPlH125JfjLyeU.roa (hash: qs9GfTMJL3N2x8/XSRJs2Wor36v2IAZDXoDEFrwPV/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e7:b5:bb:5e:96:f6:6d:f2:5d:94:ac:01:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=5cfd10294ccf711db68282d78584607ec06b587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:79:63:e4:7c:25:69:3c:ef:0f:f7:f2:d6:
e1:c7:eb:b5:ae:51:4f:91:46:f9:bf:42:77:06:bb:
c3:5c:84:77:7b:19:a5:b7:d6:9f:53:ea:bd:3d:3a:
26:dd:bd:41:8c:2d:43:7d:4e:d7:bc:c7:ef:97:06:
52:f5:1b:9e:f1:aa:c5:b3:15:e6:ac:14:04:6e:93:
4a:a9:80:33:d8:45:16:40:69:25:3d:db:35:88:de:
ad:7c:04:ab:5c:96:56:b7:0c:c1:4f:4f:da:57:47:
fa:12:89:73:99:cb:07:36:f3:a7:c3:6e:c1:65:19:
2c:af:81:06:2e:e8:51:fa:76:5d:45:c1:e6:9b:9d:
c2:01:3b:84:fc:4c:e9:08:df:d3:37:5a:82:78:b8:
94:b8:79:f6:8f:2d:5c:20:9f:87:37:13:c9:1e:75:
8c:9d:4d:19:53:66:d9:91:77:65:46:ab:a4:d5:cd:
77:c2:39:3f:ae:e3:2e:4b:63:9a:fb:c1:7a:d7:f5:
ba:64:49:17:bc:27:0b:24:d0:a2:d2:4f:46:59:de:
65:d1:14:68:5f:20:c0:31:11:07:24:25:7b:97:71:
41:64:fd:c0:6a:da:5f:87:29:89:a7:61:aa:69:60:
2a:15:fd:7f:88:97:12:d9:3e:cf:9a:3e:ba:f4:f2:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:10:29:4C:CF:71:1D:B6:82:82:D7:85:84:60:7E:C0:6B:58:7D
X509v3 Authority Key Identifier:
keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:6f:6b:f0:27:4e:78:6b:19:12:ba:b4:af:1e:86:8b:ae:
74:8e:d5:27:a2:69:3a:ba:68:88:c1:f2:45:ed:63:43:30:2b:
5b:63:b0:1e:65:6d:73:61:29:d2:42:54:a9:1d:8f:7b:cf:81:
5d:8a:bf:77:6d:83:d6:71:67:36:17:29:5d:bd:ca:59:45:53:
6d:6b:87:f3:18:5f:0b:90:4f:20:35:c0:48:ec:6b:50:48:fb:
95:31:f7:67:30:ff:19:35:b6:75:cd:44:55:b4:2a:58:07:cb:
88:f9:32:cd:db:18:7c:7a:24:31:6a:8d:b3:f8:03:2f:ad:4c:
40:fd:4c:bf:7a:03:11:aa:e9:c6:81:11:9b:8e:bd:13:fc:e9:
a8:00:5c:3d:a4:5f:90:69:36:2a:a6:5f:4c:75:ab:14:85:76:
8a:83:a2:1c:9d:7f:3c:3b:b0:c3:e3:78:1e:45:87:99:32:59:
ae:c2:53:92:78:61:88:1e:ca:73:41:f0:dc:ae:8b:52:4a:00:
c7:00:a2:fb:87:2b:da:d5:63:a9:4f:3c:4c:92:27:e1:d2:c8:
6b:e3:79:b2:63:d0:3f:62:4b:6f:da:f2:3c:4c:b5:9c:b4:d6:
81:31:a8:2d:04:22:b5:ec:d1:cf:fe:fc:62:c1:e9:80:bb:0b:
33:5b:e3:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9aue1u16W9m3yXZSsAUj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjU2Mjg3ODY5NmU2MjgzYzRkZjgxNGEzOGI3MzVjNTAw
Y2FmOGIwHhcNMjUxMDE5MTcwMTA1WhcNMjUxMDIwMTcwMTA1WjAzMTEwLwYDVQQD
Eyg1Y2ZkMTAyOTRjY2Y3MTFkYjY4MjgyZDc4NTg0NjA3ZWMwNmI1ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gt5Y+R8JWk87w/38tbhx+u1rlFP
kUb5v0J3BrvDXIR3exmlt9afU+q9PTom3b1BjC1DfU7XvMfvlwZS9Rue8arFsxXm
rBQEbpNKqYAz2EUWQGklPds1iN6tfASrXJZWtwzBT0/aV0f6EolzmcsHNvOnw27B
ZRksr4EGLuhR+nZdRcHmm53CATuE/EzpCN/TN1qCeLiUuHn2jy1cIJ+HNxPJHnWM
nU0ZU2bZkXdlRquk1c13wjk/ruMuS2Oa+8F61/W6ZEkXvCcLJNCi0k9GWd5l0RRo
XyDAMREHJCV7l3FBZP3AatpfhymJp2GqaWAqFf1/iJcS2T7Pmj669PKFHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz9EClMz3EdtoKC14WEYH7Aa1h9MB8GA1UdIwQY
MBaAFAK1YoeGluYoPE34FKOLc1xQDK+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTIt
OTJkM2FhZDMyZjQ5LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTItOTJkM2FhZDMyZjQ5
LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHRva/An
TnhrGRK6tK8ehouudI7VJ6JpOrpoiMHyRe1jQzArW2OwHmVtc2Ep0kJUqR2Pe8+B
XYq/d22D1nFnNhcpXb3KWUVTbWuH8xhfC5BPIDXASOxrUEj7lTH3ZzD/GTW2dc1E
VbQqWAfLiPkyzdsYfHokMWqNs/gDL61MQP1Mv3oDEarpxoERm469E/zpqABcPaRf
kGk2KqZfTHWrFIV2ioOiHJ1/PDuww+N4HkWHmTJZrsJTknhhiB7Kc0Hw3K6LUkoA
xwCi+4cr2tVjqU88TJIn4dLIa+N5smPQP2JLb9ryPEy1nLTWgTGoLQQitezRz/78
YsHpgLsLM1vjnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:01 2025 by rpki-client