Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier: U2hA5d6McKgNzVCmN6TV9j4k8fxhaYNhck99Q1BZy84=
Subject key identifier: D2:52:8E:54:75:03:D0:0D:7B:46:C1:8D:28:6D:F3:6E:C0:F7:30:DC
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer: /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial: 0199FB0EF75C4580616A7B2915FBA676C988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number: 01D1
Signing time: Sun 19 Oct 2025 06:01:25 +0000
Manifest this update: Sun 19 Oct 2025 06:01:25 +0000
Manifest next update: Mon 20 Oct 2025 06:01:25 +0000
Files and hashes: 1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: ICneFpSEQrtZ7W2Fya+TTBsJnwQxFw9599ASfH2/nVg=)
2: cSU3uumNlLN8Of6e212G9P0zAJw.roa (hash: kzDk6Ttjden5ir/EuoOlXFG1vxnRI9Xpd+xXHRFPFcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f7:5c:45:80:61:6a:7b:29:15:fb:a6:76:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
Validity
Not Before: Oct 19 06:01:25 2025 GMT
Not After : Oct 20 06:01:25 2025 GMT
Subject: CN=d2528e547503d00d7b46c18d286df36ec0f730dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:54:77:50:7a:5a:20:6a:cd:92:c6:ba:e7:
4a:63:32:34:ac:f5:1a:94:b3:01:1c:a6:3c:23:95:
b8:cf:45:ee:31:a8:21:e8:f1:80:54:b7:d7:49:b3:
34:26:53:d7:ab:67:20:a4:ec:fc:30:01:a7:5d:12:
65:5b:b0:55:7f:dd:a6:fd:d0:80:e0:af:fd:bb:12:
d4:e1:ab:d0:6e:57:89:07:3c:4f:ee:fb:33:f0:c3:
97:f2:c1:5f:6d:65:93:2f:24:7f:9e:90:9f:46:c5:
23:a9:d8:8c:d5:c1:ea:90:d1:fa:8f:f8:70:93:bc:
7b:46:79:0b:c5:a2:4a:b3:c7:e3:77:2d:ff:03:44:
b8:e3:ff:7b:48:9e:12:14:d2:59:0c:7b:ab:d5:dd:
17:01:2e:d4:2d:d1:98:55:78:3b:be:ba:77:6a:80:
4f:39:3a:14:22:54:43:28:9c:c5:0a:d8:c0:c9:36:
6a:3d:2c:e4:cb:29:33:3f:a8:26:3a:56:42:00:32:
01:89:fc:89:1e:54:67:49:da:40:b1:37:ab:18:e6:
e8:7d:9e:3c:3b:0d:e9:be:8a:93:fb:57:a2:3a:b3:
74:44:73:f0:63:04:06:31:f1:d9:92:d0:c0:da:21:
5e:5c:e3:6c:01:c9:c0:9b:e6:dc:3e:1a:95:98:bf:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:8E:54:75:03:D0:0D:7B:46:C1:8D:28:6D:F3:6E:C0:F7:30:DC
X509v3 Authority Key Identifier:
keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:2e:0c:5e:d4:93:a5:70:54:38:2c:9a:e8:b4:02:74:94:
c4:59:f5:00:a1:2e:f1:6b:c8:b8:b7:88:6c:24:5f:d3:d6:7c:
58:57:5e:df:95:04:50:f1:d1:b4:d2:da:b2:60:b9:9b:08:b9:
06:fa:1f:92:29:36:42:f8:42:f5:a4:fc:99:73:ac:e4:da:33:
1a:ef:94:b5:99:72:fa:8f:ed:16:b9:22:ea:e7:5e:ac:52:cc:
ca:7a:7e:ea:89:20:1a:50:2a:02:23:ea:3d:eb:e2:e8:49:97:
2c:ab:b7:ca:eb:9f:df:26:71:df:a6:cb:4d:a7:08:d3:30:ef:
82:fc:39:bc:e8:aa:64:b0:64:67:3c:a6:b5:86:73:b8:0c:9e:
48:21:e1:6f:b5:d1:51:0c:5e:c0:d2:48:b1:28:9a:f7:aa:94:
82:9f:5f:f1:b1:6c:0b:b7:26:6f:22:6a:a2:7e:45:16:42:2d:
d2:ec:4f:d5:f8:d5:80:f3:c1:e9:7b:23:d4:7c:80:a0:69:cc:
59:37:09:e5:4f:97:d4:58:9b:78:e6:7d:49:d3:c9:9d:46:f2:
3f:d5:53:68:e3:09:36:1e:dc:46:9f:87:9a:01:91:57:27:ed:
23:1a:ce:bc:07:44:94:1a:28:39:3c:34:9c:be:95:fb:d7:62:
a6:cc:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:00 2025 by rpki-client