Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: WGZzBf319EX+tnb/88sIsFPvDsLGdXsLKUi5PRxxQy0=
Subject key identifier: 3B:C8:E6:6A:63:58:B8:CF:79:19:DC:BB:40:23:42:C8:7C:65:19:8A
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 0198D473C705A421B3E12F7BB9B9B3525528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: /+0KldrywYgggvuUf1/V5+XioQC1qERPXFi5exPxhTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c7:05:a4:21:b3:e1:2f:7b:b9:b9:b3:52:55:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=3bc8e66a6358b8cf7919dcbb402342c87c65198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:f5:8a:64:13:d0:3b:43:d1:aa:0a:d1:de:
16:d1:8b:e1:a5:ca:51:1c:f6:ad:e4:f5:39:b2:c4:
7f:47:1c:f5:34:7c:52:f9:05:2a:5c:f4:f7:27:21:
ec:da:2e:d8:88:c4:a8:fb:fc:f1:cc:06:50:90:db:
ed:dc:00:b3:2f:d5:00:f0:3d:71:df:b7:1e:a1:d9:
e9:0f:56:7a:31:f9:10:b8:98:e4:38:30:f6:dd:4a:
96:2a:01:a6:20:ce:8f:33:19:c7:29:b7:5c:79:ef:
86:50:ca:6d:80:15:df:56:88:4b:4f:c3:15:d0:e4:
46:20:96:cb:c4:82:32:13:35:a5:d5:b3:cc:ba:e5:
72:e7:47:e2:1d:ea:79:00:95:bc:83:33:fd:29:7d:
43:75:23:89:37:99:c7:28:c3:7f:81:f6:24:b8:46:
bf:67:ce:c7:b8:e2:20:6c:7d:f5:26:29:fd:a7:7e:
57:84:fa:6a:51:e7:80:3c:43:d9:10:ca:1e:25:ae:
ec:c0:88:af:f6:0b:b3:87:32:64:93:df:19:8a:a4:
a7:53:3a:06:7d:ec:2c:23:c5:ec:b7:c7:da:6a:62:
59:cb:ea:71:56:84:39:95:34:8c:57:37:8a:df:24:
21:f7:68:6b:da:74:82:7f:4c:65:1d:fd:7e:8b:0d:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:E6:6A:63:58:B8:CF:79:19:DC:BB:40:23:42:C8:7C:65:19:8A
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4b:9f:c6:16:ee:b3:2c:5b:f9:40:dd:ad:ad:b8:a6:08:c4:
21:92:91:5f:2e:14:df:f3:c5:42:ec:93:e4:50:01:bb:b8:50:
a0:37:83:5a:41:b6:9c:e2:be:3c:3a:74:f6:0d:4e:e7:9d:5c:
fa:9b:c0:10:06:a8:cf:1b:57:ad:04:7d:ac:7e:11:58:4b:d9:
a5:01:9c:73:7b:bd:c5:32:59:4d:ff:79:8c:a5:27:85:11:57:
7d:61:fd:bb:0d:ea:0b:b9:ec:89:1a:85:fa:42:3e:ce:84:e1:
88:8d:a2:c2:0e:3a:99:c4:9f:92:5a:4b:8d:77:75:e9:29:18:
a9:12:90:03:85:4d:74:00:f8:c1:79:3b:ed:8e:f8:40:d3:dc:
49:c0:2f:fd:18:5d:6e:61:ee:63:49:cd:08:c7:d4:cd:88:15:
eb:06:cb:f6:d0:e2:cb:25:69:ea:67:9d:0a:40:54:a9:3e:31:
45:c5:7c:c4:56:a5:73:08:4c:5a:23:47:0f:f1:14:3c:21:a8:
67:6a:b4:1b:d1:a6:b1:3c:58:bc:ad:24:e3:af:2e:4c:7c:eb:
ef:b1:40:58:87:32:34:5c:86:30:2c:24:e6:ad:2b:9d:b4:17:
cd:ae:f2:1a:9a:51:d9:f0:26:f6:07:65:59:ae:9d:84:68:c9:
39:31:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:31 2025 by rpki-client