Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: jrgFADksfGjhfTHI7J4i9Fq6hO2JpQGk6rYI4Cq/p48=
Subject key identifier: 1C:5B:D5:F8:45:11:4E:DF:CD:27:CC:C1:81:DE:C4:D4:E1:4A:6A:23
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0197B70F2B55BF1FA0DDF0999A7732B09738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0EA6
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: xXYqPQR46ei2YSZWvyxjMe/4SEFkIneaN7sxfASu2LQ=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2b:55:bf:1f:a0:dd:f0:99:9a:77:32:b0:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=1c5bd5f845114edfcd27ccc181dec4d4e14a6a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:66:23:1f:4d:a4:be:f4:52:01:bf:b3:c7:
24:3c:0e:1d:dd:e0:33:8a:01:9e:f6:74:c0:20:46:
1a:a1:b8:a3:bd:4f:a1:08:6a:3d:7d:cf:a1:e9:6b:
e3:e1:bd:e1:aa:91:ad:39:53:61:f0:91:38:95:92:
52:fc:44:bf:5f:ee:4d:08:ee:6e:dd:b2:1a:ad:7a:
32:75:c8:e5:cd:48:07:50:33:21:8b:c3:40:0d:14:
5d:b9:a7:3d:be:03:ee:00:45:ea:dd:48:52:9a:be:
67:3b:ed:7e:e7:ac:95:c8:9d:11:0d:c8:c6:41:cd:
42:8b:e1:22:ed:e9:14:b5:6f:ea:85:7a:39:b4:b0:
f3:0b:07:df:eb:64:2c:1c:80:69:ad:9b:ad:a0:50:
33:de:b9:6d:54:0a:af:5b:a9:0c:ad:66:20:61:c8:
9e:dc:c4:c7:4c:be:d3:13:29:4f:fb:42:16:c9:ed:
27:33:20:4c:fd:85:d9:7c:bf:62:fe:b5:d8:54:9d:
f1:a2:b3:d7:c5:66:ab:7d:0c:f5:b9:fe:8e:fa:ad:
d4:5d:62:99:5e:5b:58:6b:f2:48:5f:2a:5b:3e:c9:
1e:fd:58:77:5e:c7:d3:eb:3c:d6:c2:b9:94:82:00:
9b:22:0b:96:a1:63:22:66:58:53:ad:bc:42:84:c0:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:D5:F8:45:11:4E:DF:CD:27:CC:C1:81:DE:C4:D4:E1:4A:6A:23
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:c0:51:bf:b1:1a:02:66:24:d1:50:2d:a9:c6:43:39:a8:
73:31:b9:d2:d1:19:7b:5b:e8:81:dc:e0:b8:65:a7:ed:9e:bf:
54:d7:49:56:02:ef:79:be:82:a1:00:43:e8:65:07:c0:18:57:
89:03:8e:53:de:05:d1:76:c6:5b:4f:65:eb:f5:9d:c3:75:45:
1d:d5:0e:33:bd:65:21:f8:dc:03:b2:fd:42:d1:b9:21:ac:b7:
23:aa:ab:9b:09:a2:c3:21:ca:95:be:3c:02:f9:af:51:a6:4a:
d4:a8:b8:ed:42:70:6a:2d:70:c4:5c:c5:63:cd:d2:89:f1:23:
c2:4e:fb:0e:46:8f:22:43:96:c0:51:86:75:8d:74:97:77:b5:
e2:7a:1c:1f:ef:13:3b:a5:1c:d9:e8:10:17:cf:23:43:e7:12:
de:e9:b5:ae:18:15:fa:fd:fb:3a:7b:c9:56:82:7c:25:e5:88:
b5:de:65:80:e3:2f:32:e1:13:89:2c:e4:67:2c:18:d1:57:17:
e0:b5:b2:22:9f:e6:61:8a:b3:f9:b9:c6:b5:ef:49:80:c9:8e:
81:3d:13:5b:87:0a:3f:bb:79:ef:23:65:bc:08:08:2f:23:8c:
25:ad:1b:7f:d9:45:a9:39:b7:fd:7a:b2:e8:6e:ba:4b:69:b2:
eb:f2:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:25 2025 by rpki-client