Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: 54SyCaeV+OFsKoUUf7G8tAl9Mer/T3mYjUqfsaTNZjs=
Subject key identifier: EA:14:E9:36:35:DC:9B:85:C7:D3:ED:89:24:1B:53:D9:2B:29:24:C9
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019A0591EBEDDA9077A4F88A992EB45EBE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 16E2
Signing time: Tue 21 Oct 2025 07:00:40 +0000
Manifest this update: Tue 21 Oct 2025 07:00:40 +0000
Manifest next update: Wed 22 Oct 2025 07:00:40 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: SKN4IvC1tg3frThxNgeghaCOXo8ZXGDRZUU30APeqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:eb:ed:da:90:77:a4:f8:8a:99:2e:b4:5e:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Oct 21 07:00:40 2025 GMT
Not After : Oct 22 07:00:40 2025 GMT
Subject: CN=ea14e93635dc9b85c7d3ed89241b53d92b2924c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:80:98:e1:6c:dd:31:80:32:ba:63:3a:73:
64:fd:84:17:1b:e7:ba:6c:3d:5e:86:79:7b:78:6f:
cb:ea:31:07:0a:f4:27:f0:0f:cb:da:c0:54:d8:59:
58:dd:d8:76:ae:45:67:40:1d:40:15:10:22:ab:e4:
8f:c5:74:27:61:3b:20:d7:1b:82:ae:9a:2c:5b:fe:
8d:21:f3:1f:1c:f7:c3:8e:1d:50:68:9c:f2:7b:78:
9e:ce:41:ee:ae:5b:3a:82:83:78:05:a2:2b:29:97:
a7:26:ee:9c:03:f8:32:bb:2a:f4:11:57:92:47:a5:
32:f2:0f:07:9b:a8:bf:1d:83:32:62:eb:8a:07:fb:
75:86:2e:30:3e:6b:44:6a:83:d0:af:ff:23:01:10:
45:5c:a2:91:b3:8f:c8:cd:8f:87:da:bc:2f:52:42:
5c:a0:7f:aa:11:3d:89:ac:ab:6c:e0:73:c5:1c:33:
0f:42:8f:84:63:68:51:ff:c8:45:88:bc:3e:b5:03:
bf:41:92:5f:e2:b6:9d:fc:c8:60:ed:f5:c9:ae:18:
fa:09:33:58:d5:b6:85:fc:01:72:e1:42:73:39:a4:
f0:08:fe:3e:4d:cb:61:a7:af:74:92:57:c6:b1:7d:
f2:d5:5b:2e:bb:65:fd:60:bb:1d:6d:c1:c7:15:ab:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:E9:36:35:DC:9B:85:C7:D3:ED:89:24:1B:53:D9:2B:29:24:C9
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:47:19:34:66:7a:06:b5:87:f0:25:a6:f1:7c:15:2b:b4:
2c:22:06:e9:d5:77:40:86:7a:9d:e1:d7:26:1f:ad:14:79:fe:
7b:76:1c:c0:b4:51:de:2f:11:68:9c:53:e0:f5:2c:e1:9a:5c:
ce:7c:fa:b0:43:18:00:c8:1b:ff:af:c1:0c:fd:b9:a7:76:14:
b4:81:56:da:e7:85:4b:99:5c:25:99:81:3f:31:f0:b8:89:94:
66:87:c6:53:64:6d:0c:9c:05:05:c4:83:26:bc:70:c0:d2:4d:
9e:d5:c2:12:ae:55:e3:e1:c7:a3:61:5e:86:d0:33:b4:66:f9:
52:27:17:48:21:93:23:98:4e:30:02:af:96:1b:4b:1a:1f:3a:
89:9a:6e:a3:39:ad:a8:04:58:66:5e:2c:34:23:4e:98:d3:ad:
7a:2d:ad:8a:9b:d2:3f:0f:7f:7d:98:05:d2:96:81:5b:6c:a0:
25:94:49:4b:09:01:98:e2:c4:3d:4a:38:18:30:22:ef:1a:e3:
b0:bf:cc:5f:ab:4c:09:8c:48:ef:f5:a0:d1:c5:f7:62:42:47:
a7:9b:22:80:ac:93:f6:7e:46:5d:90:d6:ec:c7:da:32:ad:f5:
52:36:fc:77:67:fb:64:ce:47:02:fa:f6:91:38:f6:e5:59:71:
02:3e:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:08:17 2025 by rpki-client