Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: r6mg0ZhcTfQsHU6EQcWGGr624hZmB7BE0zfqpO+9WXM=
Subject key identifier: 48:3F:49:D5:DA:2A:88:98:C6:EA:5F:61:5D:1D:95:57:EA:64:D1:CD
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 0197B6A17E5D1BBA4077A7D9A3565AB83321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: E27IZYf1kscdV9jL7V31EMXGqkZpKqRYEV4PeDcNCec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7e:5d:1b:ba:40:77:a7:d9:a3:56:5a:b8:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=483f49d5da2a8898c6ea5f615d1d9557ea64d1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:20:60:f3:30:ed:8d:89:bd:29:7d:19:59:
89:d0:51:03:11:86:f0:d2:a6:98:72:fc:86:1e:bc:
6d:4b:fd:22:fb:2b:f3:39:3a:03:74:cd:b3:97:42:
a5:e4:95:6e:d4:7b:44:0f:87:69:39:fe:41:2c:3e:
8b:f1:e5:6b:82:9f:7b:3a:b4:94:0a:54:8f:db:71:
00:69:c6:a5:e0:d9:99:22:82:06:52:3d:f6:8d:2d:
72:c4:b0:69:0c:b8:7f:5a:a7:9d:8c:f8:86:be:35:
2f:18:f3:05:a0:f6:1d:b1:87:1f:74:8f:6e:c6:70:
52:3c:c6:48:6e:39:d2:75:73:29:8e:95:34:23:d1:
ad:b6:3c:f2:a7:67:cc:88:68:61:04:d4:f1:9c:7f:
c2:88:8f:f0:7c:ee:e2:91:fd:6a:a3:a4:48:2f:e9:
07:38:93:92:6f:0f:0a:d1:d0:55:ba:e1:e6:f9:09:
65:88:63:6b:c9:ee:69:44:28:00:07:47:c4:e3:2c:
f5:02:09:a2:bc:64:8a:7d:c0:f8:60:a9:02:ed:e6:
50:41:5b:4c:3d:20:cc:5d:83:51:6b:c5:fa:c0:aa:
e2:5d:1b:62:a9:61:33:6a:07:85:e9:35:ff:1c:3b:
b4:a9:fd:40:85:f7:af:e1:87:ab:f3:70:b7:2a:2b:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:49:D5:DA:2A:88:98:C6:EA:5F:61:5D:1D:95:57:EA:64:D1:CD
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:37:f6:4b:cb:a0:52:1c:7d:08:15:90:0f:e3:97:3a:fa:f7:
8d:fd:35:5c:67:70:2e:2d:c5:f8:c0:23:d5:37:10:4b:9c:0b:
12:b2:0d:07:08:46:b2:f4:1d:49:e0:1c:25:81:24:76:16:86:
3a:b1:d8:21:ef:3b:44:ba:59:d8:3d:9f:f8:ea:28:b9:9f:f9:
ec:13:aa:3c:32:cb:f1:dc:9e:1c:08:e7:37:e4:9e:5f:5e:dc:
13:43:65:97:95:80:5f:c2:97:fd:e5:01:f3:d3:f5:e3:d1:1c:
73:ae:0d:6a:4b:7c:6b:42:bb:f8:fa:7a:a6:3a:bb:f1:80:20:
32:af:e8:bc:f5:23:82:38:86:03:41:6f:02:04:8d:bb:b1:1f:
4b:56:35:b0:53:1f:d3:7c:68:f8:ef:f7:bc:c4:01:7b:a6:81:
28:16:cb:55:95:5d:fe:38:de:92:81:96:6d:31:68:90:11:43:
52:1d:26:1d:c9:70:a3:36:e9:51:df:e6:df:06:b1:4f:19:16:
06:b0:85:0e:e6:d9:1a:5c:e9:21:37:b8:b1:9e:69:a2:33:3d:
98:a5:e5:3b:1a:47:50:b2:0a:9c:07:98:6d:ae:e7:9d:1c:8b:
05:32:dd:27:45:0f:5b:4d:4e:12:40:2e:a0:08:d0:1f:0b:c5:
a2:30:00:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oX5dG7pAd6fZo1ZauDMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3
MTczYTIwHhcNMjUwNjI4MTMwMjA2WhcNMjUwNjI5MTMwMjA2WjAzMTEwLwYDVQQD
Eyg0ODNmNDlkNWRhMmE4ODk4YzZlYTVmNjE1ZDFkOTU1N2VhNjRkMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnsgYPMw7Y2JvSl9GVmJ0FEDEYbw
0qaYcvyGHrxtS/0i+yvzOToDdM2zl0Kl5JVu1HtED4dpOf5BLD6L8eVrgp97OrSU
ClSP23EAacal4NmZIoIGUj32jS1yxLBpDLh/WqedjPiGvjUvGPMFoPYdsYcfdI9u
xnBSPMZIbjnSdXMpjpU0I9Gttjzyp2fMiGhhBNTxnH/CiI/wfO7ikf1qo6RIL+kH
OJOSbw8K0dBVuuHm+QlliGNrye5pRCgAB0fE4yz1AgmivGSKfcD4YKkC7eZQQVtM
PSDMXYNRa8X6wKriXRtiqWEzageF6TX/HDu0qf1Ahfev4Yer83C3KisH/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg/SdXaKoiYxupfYV0dlVfqZNHNMB8GA1UdIwQY
MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt
M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw
LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDf2S8ug
Uhx9CBWQD+OXOvr3jf01XGdwLi3F+MAj1TcQS5wLErINBwhGsvQdSeAcJYEkdhaG
OrHYIe87RLpZ2D2f+OoouZ/57BOqPDLL8dyeHAjnN+SeX17cE0Nll5WAX8KX/eUB
89P149Ecc64Nakt8a0K7+Pp6pjq78YAgMq/ovPUjgjiGA0FvAgSNu7EfS1Y1sFMf
03xo+O/3vMQBe6aBKBbLVZVd/jjekoGWbTFokBFDUh0mHclwozbpUd/m3waxTxkW
BrCFDubZGlzpITe4sZ5pojM9mKXlOxpHULIKnAeYba7nnRyLBTLdJ0UPW01OEkAu
oAjQHwvFojAA+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:50 2025 by rpki-client