
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: MabvEqsuxsHkAkb4omb7JpX6gIU74mKpG3t6EE6mHxA=
Subject key identifier: D4:67:B6:98:91:0D:0A:2E:95:7F:39:C4:3E:3B:D7:74:60:00:BA:89
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 0198D6CD481722011F886D7411B8526A0665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0C76
Signing time: Sat 23 Aug 2025 12:00:34 +0000
Manifest this update: Sat 23 Aug 2025 12:00:34 +0000
Manifest next update: Sun 24 Aug 2025 12:00:34 +0000
Files and hashes: 1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: kaP2KfIbfCUjMn3IMmLMvVKKgaQYnkqrvDz5yEVIzFk=)
2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:48:17:22:01:1f:88:6d:74:11:b8:52:6a:06:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Aug 23 12:00:34 2025 GMT
Not After : Aug 24 12:00:34 2025 GMT
Subject: CN=d467b698910d0a2e957f39c43e3bd7746000ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:d6:55:3e:4f:cd:ac:e8:cd:53:e7:52:6a:
32:96:28:d2:10:2b:bb:fa:f7:bd:2a:f1:b2:a3:71:
11:cc:9a:f9:5d:3b:24:e1:de:dc:ec:e1:44:86:63:
2f:3e:db:6f:8a:ae:74:f4:8a:9c:bd:8a:8b:b0:f5:
93:ab:11:1a:a2:9f:0f:9e:57:b0:c9:0c:97:70:ad:
9c:04:59:e1:99:f0:89:75:fd:b2:b6:8b:be:69:7a:
10:0c:9d:2b:ea:5a:bc:c8:5f:3d:80:02:ee:5e:00:
f2:8a:cc:d9:e0:08:eb:de:07:9a:f9:12:9f:84:56:
0d:90:9d:89:1f:e3:41:03:b4:5c:c6:b5:62:5c:04:
24:98:bb:ec:a6:40:52:bf:c4:2f:cd:7e:a1:78:15:
19:21:61:eb:13:fd:79:af:68:c3:c6:52:34:85:34:
66:35:2f:1c:01:38:9a:d3:ee:6a:11:7a:3c:eb:51:
e3:99:74:1d:7c:e5:01:34:8f:2c:eb:c0:25:89:c5:
dc:72:25:da:55:98:2b:98:09:3c:35:00:a6:35:66:
b6:cf:33:f3:7d:1b:93:5d:59:b6:44:7f:42:1e:d2:
04:e4:b9:dd:0e:0f:da:aa:2a:6a:da:ef:ef:fe:ec:
e5:8f:b9:fe:78:dd:e8:8c:74:de:86:46:53:e0:ea:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:B6:98:91:0D:0A:2E:95:7F:39:C4:3E:3B:D7:74:60:00:BA:89
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ad:bb:34:81:a6:5d:a9:fd:9f:b6:6c:6d:86:33:85:fe:4f:
d5:6d:2e:e4:ef:99:7a:5e:dc:81:fe:95:0a:1f:dd:5c:86:da:
b1:05:cb:e5:64:2c:27:e8:04:2d:69:ef:95:53:b3:b8:0c:b9:
5b:07:27:5e:e5:0c:97:f0:d8:4a:d7:61:a9:71:17:36:c9:2b:
79:68:d0:ab:57:27:61:e0:53:77:df:da:3c:5e:06:67:d5:9f:
78:c7:af:1c:20:e3:70:3e:1b:5e:f5:75:29:15:38:88:86:72:
b1:6e:f8:e1:43:bb:82:3d:18:b2:f6:29:de:9a:68:56:1a:05:
2a:f7:e8:f2:f2:c4:db:f3:cc:79:3a:83:d8:23:f8:4f:f0:d4:
61:11:23:b9:d2:df:50:4b:47:09:57:c4:13:d7:71:a9:88:1d:
a5:17:c5:ca:de:9d:e9:00:85:2b:9a:ed:e0:15:f0:a5:8c:a0:
fd:d4:5c:fd:a3:8e:2e:86:57:a0:e8:05:d2:04:71:46:cb:06:
01:6d:b2:be:73:1b:6b:4a:e8:07:c5:62:b1:cb:f8:a6:35:09:
40:32:49:ad:d0:a0:10:39:ac:1e:74:9e:ef:8a:d7:f9:88:97:
97:aa:38:d7:b8:26:02:0a:78:80:ee:ed:72:8d:c8:98:83:f7:
e7:cc:d8:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzUgXIgEfiG10EbhSagZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjUwODIzMTIwMDM0WhcNMjUwODI0MTIwMDM0WjAzMTEwLwYDVQQD
EyhkNDY3YjY5ODkxMGQwYTJlOTU3ZjM5YzQzZTNiZDc3NDYwMDBiYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLXWVT5PzazozVPnUmoylijSECu7
+ve9KvGyo3ERzJr5XTsk4d7c7OFEhmMvPttviq509IqcvYqLsPWTqxEaop8Pnlew
yQyXcK2cBFnhmfCJdf2ytou+aXoQDJ0r6lq8yF89gALuXgDyiszZ4Ajr3gea+RKf
hFYNkJ2JH+NBA7RcxrViXAQkmLvspkBSv8QvzX6heBUZIWHrE/15r2jDxlI0hTRm
NS8cATia0+5qEXo861HjmXQdfOUBNI8s68AlicXcciXaVZgrmAk8NQCmNWa2zzPz
fRuTXVm2RH9CHtIE5LndDg/aqipq2u/v/uzlj7n+eN3ojHTehkZT4Op4owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRntpiRDQoulX85xD4713RgALqJMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL627NIGm
Xan9n7ZsbYYzhf5P1W0u5O+Zel7cgf6VCh/dXIbasQXL5WQsJ+gELWnvlVOzuAy5
WwcnXuUMl/DYStdhqXEXNskreWjQq1cnYeBTd9/aPF4GZ9WfeMevHCDjcD4bXvV1
KRU4iIZysW744UO7gj0YsvYp3ppoVhoFKvfo8vLE2/PMeTqD2CP4T/DUYREjudLf
UEtHCVfEE9dxqYgdpRfFyt6d6QCFK5rt4BXwpYyg/dRc/aOOLoZXoOgF0gRxRssG
AW2yvnMba0roB8Viscv4pjUJQDJJrdCgEDmsHnSe74rX+YiXl6o417gmAgp4gO7t
co3ImIP358zYLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:04 2025 by rpki-client