Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
File: ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json)
Hash identifier: ssWXskD5HbHOxxPqD3VxxmAVZx4APvG7KX25RS6jxxo=
Subject key identifier: 25:A0:B6:7B:68:BF:33:95:89:E7:35:B5:A7:4C:4B:A3:2E:3F:6D:90
Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
Certificate issuer: /CN=02b916b3b2e957d185032cdb499976a00eba4975
Certificate serial: 0199FBEBD9A09D7E9FDE635CFB68E1507219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
Manifest number: 27
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: PZRelmo3JSqeG4TqnHzC1LPe5jQy0xVIfLWcYj3Gj4I=)
2: FfIKnmyhcS0MyS6jImyiKhfTG4M.roa (hash: Bq7KFCDra/eepPggazfSqcjfSDY8IxclStu1McG0psw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d9:a0:9d:7e:9f:de:63:5c:fb:68:e1:50:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=25a0b67b68bf339589e735b5a74c4ba32e3f6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:a5:a4:ab:fc:88:3f:a3:27:2a:3c:e3:53:
9b:db:46:06:68:7c:1f:2b:0d:fc:ac:e3:56:9c:08:
07:d2:8d:0e:57:04:e7:af:34:4d:2c:9c:cf:10:27:
d1:76:db:ba:70:eb:96:0a:76:a8:3b:02:29:7b:df:
0f:9e:1e:49:66:cc:01:80:4d:91:ae:d5:69:09:23:
7a:8e:de:80:85:92:10:a4:c7:40:2f:67:9f:5b:d2:
af:02:2f:d6:1b:ff:05:b4:8e:87:1b:b0:6d:cc:cb:
de:d9:eb:bb:26:0f:f3:b0:61:2b:39:34:ad:9e:54:
63:c3:b1:bf:bd:2d:16:d6:d9:ed:60:fd:eb:4e:fa:
50:4e:7c:41:13:d6:09:ff:30:00:45:22:9f:ad:06:
35:b5:88:7b:51:ba:63:c7:95:9f:cc:80:de:4e:ec:
da:28:54:0c:71:7f:3f:7b:50:a9:4f:e1:40:03:3c:
e9:9e:1f:48:95:20:64:8a:7f:6b:6f:71:e1:9a:8e:
01:09:73:33:c7:0c:8a:15:7a:1f:44:ec:33:26:ef:
6c:3f:23:5a:9e:da:fa:3b:d4:11:9e:59:fa:0c:00:
1c:17:d2:b4:c2:25:b7:73:53:9e:bd:c2:45:f6:bb:
d7:9f:c6:57:15:ff:7e:5d:0e:20:db:0d:57:2e:25:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:B6:7B:68:BF:33:95:89:E7:35:B5:A7:4C:4B:A3:2E:3F:6D:90
X509v3 Authority Key Identifier:
keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:79:57:7f:15:12:a1:93:7b:50:37:0e:51:8b:40:0e:6e:07:
4e:ae:ab:51:e5:57:45:65:9e:67:80:12:71:36:37:50:7e:34:
15:0e:60:16:eb:1a:e9:73:8e:8a:70:9f:14:b1:2a:b4:db:40:
a8:fa:2b:8b:ad:71:db:29:be:71:75:6e:52:a9:fe:c2:48:d8:
3f:be:f5:52:89:15:8e:b3:c4:fc:76:32:5d:86:1e:a1:7e:30:
ea:b4:9f:f3:43:72:a2:c7:76:6c:fb:76:43:5a:a6:8b:ec:92:
f4:9a:89:30:2b:34:35:69:52:e7:fc:fe:16:90:1c:8b:29:92:
fb:fa:f6:af:b1:48:64:a8:2b:48:2b:cf:ce:b4:da:17:0f:43:
2c:75:c4:87:d7:6a:3c:be:05:ec:ad:d9:35:78:7c:f1:a7:2f:
d9:7d:a9:6d:ce:44:db:69:f8:19:d5:47:a2:df:51:f0:24:85:
3f:10:b3:c0:51:50:e0:d0:3d:b2:4b:fd:fe:a6:52:a5:ca:f1:
e3:2f:1b:02:67:85:95:85:81:de:8f:cf:11:3a:ec:91:a7:2d:
65:0c:16:ba:35:3c:89:d4:6c:e8:bd:e3:64:43:64:13:9b:8e:
0d:15:8d:36:a6:45:b3:a6:4f:17:3b:91:6d:99:10:aa:3f:4e:
40:be:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:01 2025 by rpki-client