Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: BRSYIGqu8rEa4dtuQbEuAHpTu+bnU6ItrvLTSnTkWMw=
Subject key identifier: DD:31:3E:98:52:01:96:80:53:5D:81:AF:4F:F5:10:60:BD:3C:DE:44
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 0199FBEC3B54FE1CBD44A5958C6642D99F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: 0WyS31IvdDetMHZ28VByBRAE3bcz18mLUabiGJNluCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3b:54:fe:1c:bd:44:a5:95:8c:66:42:d9:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=dd313e9852019680535d81af4ff51060bd3cde44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:b7:88:c4:58:02:1f:e0:9c:70:53:fe:2d:
3e:3e:8a:76:be:bc:d2:11:26:25:30:46:f1:8b:2f:
16:4d:0d:f1:36:b9:90:b9:19:6c:c2:1c:01:7d:ca:
09:a8:ed:05:ff:64:8c:c4:02:1c:80:7e:8b:d6:f2:
dc:50:9f:91:c4:24:34:a4:e6:27:0c:43:a3:14:77:
4c:3c:06:b1:b6:df:1e:6b:b7:12:bb:1c:97:fd:1b:
aa:3b:17:57:09:7d:9c:78:43:00:be:18:4d:17:e9:
d4:9a:ba:a9:64:06:1a:26:52:1e:40:9e:ee:ec:5c:
17:59:47:a0:e8:c0:bf:fa:e2:86:a2:15:d5:96:2a:
02:b5:31:51:ba:ab:99:40:46:68:aa:4a:51:c0:d7:
f1:a0:e5:6a:d5:fd:e8:b3:f3:58:16:ee:9b:3d:09:
19:53:24:ee:a7:94:f3:29:71:03:0f:98:f6:e8:62:
de:a7:75:2c:cb:08:56:9c:e0:ec:85:62:31:bf:de:
59:65:17:29:d1:68:fc:60:63:cd:2f:cf:15:ed:85:
f4:74:66:bd:c7:cf:17:ae:ff:36:4f:b6:25:82:6b:
a3:23:3b:59:a7:e8:d4:b0:f0:83:40:a0:83:bd:f5:
1e:9c:e9:6f:92:f8:a0:45:13:73:07:ac:ff:2d:29:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:3E:98:52:01:96:80:53:5D:81:AF:4F:F5:10:60:BD:3C:DE:44
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6e:7d:de:20:fc:19:20:47:ae:8f:2d:84:3b:17:62:c6:61:
57:59:e4:e8:46:a6:e9:80:f3:7f:a0:82:ab:3a:25:e8:bf:32:
fc:db:a6:24:62:9f:61:94:d8:ce:74:61:1b:6e:02:d6:6a:dd:
09:90:70:9b:de:6e:b1:2d:4d:4a:99:a2:bb:3e:eb:0d:28:25:
5e:4d:7f:95:17:b5:a8:88:f5:bd:a3:7c:37:37:7b:e6:53:92:
10:8b:21:aa:45:45:5e:71:28:f7:b4:eb:41:b1:c4:41:10:d0:
b0:fa:18:7e:93:1a:66:43:a3:7f:08:c5:42:73:d8:74:49:d3:
0a:94:43:b3:d4:e3:1e:0d:69:5a:03:60:44:8d:a0:df:ab:a7:
c2:ed:f5:34:38:5e:dd:77:77:28:aa:af:3c:d9:dd:12:6c:5e:
e6:a8:86:c4:61:2e:8d:b3:25:37:e7:08:21:d5:62:46:ff:6c:
90:df:07:1b:ac:df:36:32:93:ce:d7:58:61:2f:b6:13:91:cb:
7e:99:8b:50:49:d1:73:cf:7a:13:18:e9:c4:a0:3c:fe:dd:81:
a9:b1:52:a0:64:3a:94:a8:55:e9:f8:69:27:64:42:fd:94:9a:
ec:15:a3:f9:05:96:c7:c5:20:40:c2:51:bf:f0:af:ce:f7:45:
d9:06:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:05 2025 by rpki-client