Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: 2Q2KMsgHnNVNBE1iCgKt37p45vCMiXFed/Yzuj6+sr4=
Subject key identifier: CB:40:46:C0:A7:6C:93:B7:58:B8:31:9A:95:5E:C5:7C:13:F5:30:98
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0199FC5895CAB841D9565AFEC432A1F29738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0FD3
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: PTebKlJVwnZxisKyN7Iou1+JoCn40oVg6dmC+Gl7PEg=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:95:ca:b8:41:d9:56:5a:fe:c4:32:a1:f2:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=cb4046c0a76c93b758b8319a955ec57c13f53098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:0e:d9:29:5c:e3:58:c1:9b:b9:d0:af:42:
68:92:ab:ba:19:c3:fb:ad:58:80:03:67:ff:f8:df:
c6:4d:14:ad:a3:33:7b:2d:e5:dd:c3:6e:bc:c2:40:
f1:89:7b:2b:8d:0a:6f:98:12:4b:db:40:5e:b3:bd:
d7:64:16:c8:5d:f5:42:64:b5:32:4c:fc:0e:b4:1d:
db:4a:20:b0:db:dd:99:82:45:f6:ed:2f:2b:65:e1:
b3:cb:31:b9:b6:05:d0:56:8e:05:d1:93:9c:5c:9e:
39:43:24:4b:15:3c:4b:3b:f7:50:3e:d7:5b:35:bb:
e8:37:50:d8:d2:ad:99:f7:95:88:78:d3:a2:78:57:
01:8b:4f:4d:8f:cb:7f:f4:74:72:a5:61:88:b5:66:
1e:cc:18:98:34:50:78:fb:23:8a:0d:bc:d5:3d:3c:
f7:f7:63:c7:89:85:a6:e0:a1:4f:d8:d5:51:7c:da:
a8:2a:00:08:93:6e:79:9d:d7:90:74:dc:22:05:9c:
f5:e9:51:d3:d7:1f:0a:02:36:48:1d:88:ee:de:d3:
24:6a:8f:bd:08:7f:0c:14:8e:d2:c6:f3:39:02:e9:
85:c2:22:05:68:9a:e3:25:17:05:0a:61:b5:d7:fb:
9e:3d:f3:d4:05:45:6c:ab:41:1d:c9:57:d5:94:57:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:40:46:C0:A7:6C:93:B7:58:B8:31:9A:95:5E:C5:7C:13:F5:30:98
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6a:6f:c6:aa:54:42:bc:9a:e8:76:63:9b:6d:82:ed:b0:6a:
ae:9a:36:b8:ee:22:ce:2d:1e:22:bb:92:46:44:9c:06:3c:bf:
c5:0e:cd:c8:b4:2d:f2:50:21:9c:6c:28:7a:9e:13:a4:20:bc:
6e:2d:14:51:8f:93:51:56:69:85:50:d8:16:9e:91:c0:a3:76:
ae:75:7d:f9:d8:eb:41:ca:57:7c:1b:4b:89:3a:54:68:4f:fa:
04:2a:c8:e2:f6:4a:0f:cd:30:91:e6:54:c4:2c:5a:18:9f:d4:
e1:38:6e:b7:23:e4:74:b7:59:e7:ca:93:9e:7f:f1:eb:be:c0:
5e:1f:0f:35:40:1f:4d:42:3e:ec:98:be:e9:e1:c3:09:08:16:
1b:ed:3b:cc:ba:7f:be:2f:45:89:da:d9:83:b2:e5:24:e9:06:
59:fe:2e:91:24:37:1d:d7:83:a1:67:90:0e:e0:60:1a:e7:43:
7e:3a:56:96:87:36:a9:f3:9a:b4:d3:3a:d1:75:49:9c:16:e3:
16:71:12:00:80:c0:68:10:cd:66:b4:b7:2d:dd:30:44:05:8b:
09:1a:86:53:71:61:fe:20:b8:e1:9a:e3:06:f8:b0:96:e6:d2:
a2:5e:d5:a7:65:75:c1:c3:7c:53:d8:54:3e:f7:cb:57:2a:3b:
6b:2f:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:35 2025 by rpki-client