Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: Fx5nRwcc5HONB+4GTriWal1orLu0pGUVejnuf/BOBHA=
Subject key identifier: D3:3A:46:5A:7F:D8:8F:0C:F9:70:53:90:A8:D9:99:0B:CF:5F:03:E5
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0198D6CD76888EAB117769ABF0B89A5786DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0F3B
Signing time: Sat 23 Aug 2025 12:00:45 +0000
Manifest this update: Sat 23 Aug 2025 12:00:45 +0000
Manifest next update: Sun 24 Aug 2025 12:00:45 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: gz3vIGmbl0patAgsjvb6RZjwehlApjVNADZ9VDjXCnY=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:76:88:8e:ab:11:77:69:ab:f0:b8:9a:57:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Aug 23 12:00:45 2025 GMT
Not After : Aug 24 12:00:45 2025 GMT
Subject: CN=d33a465a7fd88f0cf9705390a8d9990bcf5f03e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:05:ce:05:50:a6:98:e2:74:4f:0e:d2:13:
e1:af:61:15:3d:ab:b8:15:c2:5a:a5:8e:96:5f:af:
ba:b7:b8:c1:77:7d:fe:af:ff:d3:15:b3:60:c9:33:
46:9f:6e:87:8c:f8:87:7a:e4:d1:b0:64:a2:50:f7:
13:81:b8:5d:93:8a:8a:d4:cc:40:c2:5c:02:f8:20:
d4:2f:d4:eb:cc:9e:ec:8f:03:9b:bf:96:b3:b6:69:
e3:77:46:8b:e1:a5:9c:c6:03:88:c1:b1:92:b0:e9:
af:5c:6d:12:e8:1a:00:7e:16:90:66:35:0f:06:46:
dd:a5:b1:c3:47:87:a9:da:6b:61:92:25:1f:70:dd:
b8:26:41:59:ba:44:87:d4:ad:c7:76:6b:ad:a2:f2:
67:18:0f:54:c7:b2:81:ea:d4:93:10:e5:bb:ff:9a:
75:77:cc:36:91:51:7c:8a:cf:9e:5f:b5:44:4c:9a:
a5:95:42:d5:19:c8:e2:79:6b:a4:f9:e9:9c:1e:1c:
ea:72:b0:0b:65:34:60:2e:43:a3:4f:66:e6:93:ca:
76:fc:31:bb:bb:77:5a:f8:c5:5d:bc:33:af:7d:60:
88:8a:ab:77:8c:92:bf:a3:bf:8e:0a:eb:fd:c9:ed:
44:04:5f:1f:0c:10:58:57:78:56:88:b4:4e:ee:c2:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:46:5A:7F:D8:8F:0C:F9:70:53:90:A8:D9:99:0B:CF:5F:03:E5
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ae:a0:22:4b:d4:56:a8:f9:3e:20:15:6f:3d:45:00:37:d9:
eb:f6:99:a9:55:56:52:1e:ae:b2:1e:79:cb:e6:47:d3:13:4f:
13:ce:fd:bd:67:f0:fd:57:cb:a5:b9:65:d8:6c:69:63:0b:29:
ab:d2:40:7e:c1:95:e8:46:03:db:ee:fd:26:e5:3f:04:9e:bd:
4a:54:70:e7:8a:20:e6:a8:46:e4:a6:ec:73:16:68:5e:a9:35:
f2:b2:b3:26:98:37:19:be:b2:2a:85:8f:ff:4b:c5:0d:c4:c3:
14:6d:40:c3:97:7c:31:d5:6f:8e:02:75:c5:01:d4:e6:99:dd:
36:69:9d:2d:b7:5f:a0:ab:25:50:29:ef:d9:3c:94:db:eb:b8:
0e:83:1b:df:c3:e9:34:7a:51:33:5f:ee:a9:e7:d6:99:db:8c:
da:9d:85:ef:90:cb:fe:07:d4:3f:c9:d7:3d:fa:fd:0b:c5:bd:
5d:7a:5f:2b:2e:b2:79:1c:47:4f:7c:ba:5c:61:ee:ae:84:c2:
c3:c3:8b:bf:ef:b8:6d:6e:c2:a5:64:06:a6:9c:2a:ca:62:db:
a4:64:d6:c9:06:29:3c:4c:c6:e3:96:ff:97:95:2d:c9:92:fc:
54:d0:c5:9e:73:72:d9:7b:89:db:a2:95:43:0c:7c:52:69:74:
13:5c:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:45 2025 by rpki-client