Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File: ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier: 7j25AOG5Wmio4LnyQNZPHMfptJ+Q+U624NMcBuFJxJg=
Subject key identifier: DC:91:8C:54:86:B8:49:27:11:AD:94:24:E4:29:E1:25:B5:7C:7A:A3
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 0197B6A1D379EC2BBCE5FA70F9814B353403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: J5eGlqpusuKI+GuMGzD9wfamyvh0f1V2VO/+AweB9cw=)
3: Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa (hash: FuW53gbYqPmWdJbbqmlfjqZ0BgNfy4rZW67679JKp0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d3:79:ec:2b:bc:e5:fa:70:f9:81:4b:35:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=dc918c5486b8492711ad9424e429e125b57c7aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:70:82:ff:ba:11:1e:5f:87:dc:b4:f8:e1:
c5:9d:51:e6:db:14:a3:fb:35:3b:cc:54:c2:ec:01:
5d:e4:e2:b7:0e:70:3f:fb:70:31:4d:bb:64:52:d4:
3e:29:d0:ea:ae:a3:a2:80:0e:0c:a4:a0:9e:68:1c:
f5:44:05:18:dc:f2:76:09:f0:99:cc:d6:43:02:14:
73:30:03:aa:3c:f5:5d:d0:58:83:1f:47:97:cd:26:
be:38:b3:ea:63:d4:93:b0:b3:62:d5:90:77:d8:7b:
d2:a2:75:b1:eb:28:18:f3:17:55:61:ea:6e:92:c3:
fd:98:3d:5e:bf:39:c0:53:90:bb:6d:c7:56:dd:d4:
65:19:33:70:81:6d:19:9a:ce:1d:d5:56:d6:ab:4b:
f0:2e:24:ca:ee:42:9d:97:c3:bd:67:28:2d:d4:f4:
09:4f:85:51:3e:97:3e:02:aa:bc:d4:c1:9f:2a:2d:
2a:03:91:81:11:d8:bb:2d:19:92:38:f8:9f:4a:e5:
96:ee:43:7e:94:92:34:6c:19:33:71:02:7a:1c:4a:
35:19:68:db:53:44:06:34:ae:0d:48:33:d7:9a:28:
e4:02:89:cc:b5:11:1e:82:f4:59:6f:e3:7b:9a:ff:
d8:89:b5:5f:f3:bb:77:06:42:e5:a1:61:10:00:b0:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:91:8C:54:86:B8:49:27:11:AD:94:24:E4:29:E1:25:B5:7C:7A:A3
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4b:df:c2:dc:5e:5d:1c:c0:8c:12:9e:cb:eb:b7:46:be:9e:
7e:01:eb:17:92:53:dd:67:4f:13:5d:00:1d:1b:09:e2:bb:8d:
bf:59:f0:89:ab:3a:54:0e:02:7d:bc:70:37:3b:6b:82:4e:03:
b6:1b:9f:6e:c0:de:c4:c1:34:61:5e:88:3d:30:e3:a4:aa:69:
ea:6c:5c:11:50:81:d8:4c:7a:65:4e:e2:4f:d8:5e:f3:69:4f:
c4:e9:b7:13:16:b7:b1:59:ed:28:b5:51:12:9d:e6:95:fa:e5:
4e:cc:b7:0c:47:db:25:b6:6f:3c:99:21:26:6e:b1:c1:d8:6b:
55:5d:26:49:68:40:c6:4b:c0:21:78:68:d2:21:9b:f8:50:48:
77:ae:7c:e6:f0:c7:83:d5:2c:cf:8f:d4:1e:9f:1b:50:e1:9a:
3a:8a:45:ed:7e:c0:47:bd:42:ce:f3:d1:cc:c1:61:ae:c7:16:
c8:86:e5:66:0e:74:70:ec:5e:b7:62:21:8d:75:66:4a:63:91:
19:df:a7:1d:05:d9:b9:80:77:96:2b:c7:09:5f:80:70:da:11:
5c:49:f2:1b:01:41:12:96:af:e9:19:b5:4a:b4:98:95:6b:bc:
62:2a:45:ec:27:a6:c0:12:28:a5:e3:f4:4b:6e:45:b6:a5:48:
b2:8c:9c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2odN57Cu85fpw+YFLNTQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5
ZmJmNzEwHhcNMjUwNjI4MTMwMjI4WhcNMjUwNjI5MTMwMjI4WjAzMTEwLwYDVQQD
EyhkYzkxOGM1NDg2Yjg0OTI3MTFhZDk0MjRlNDI5ZTEyNWI1N2M3YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1plwgv+6ER5fh9y0+OHFnVHm2xSj
+zU7zFTC7AFd5OK3DnA/+3AxTbtkUtQ+KdDqrqOigA4MpKCeaBz1RAUY3PJ2CfCZ
zNZDAhRzMAOqPPVd0FiDH0eXzSa+OLPqY9STsLNi1ZB32HvSonWx6ygY8xdVYepu
ksP9mD1evznAU5C7bcdW3dRlGTNwgW0Zms4d1VbWq0vwLiTK7kKdl8O9Zygt1PQJ
T4VRPpc+Aqq81MGfKi0qA5GBEdi7LRmSOPifSuWW7kN+lJI0bBkzcQJ6HEo1GWjb
U0QGNK4NSDPXmijkAonMtREegvRZb+N7mv/YibVf87t3BkLloWEQALA4sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyRjFSGuEknEa2UJOQp4SW1fHqjMB8GA1UdIwQY
MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt
OTAxM2NhOTk2YjE2LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2
LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEvfwtxe
XRzAjBKey+u3Rr6efgHrF5JT3WdPE10AHRsJ4ruNv1nwias6VA4CfbxwNztrgk4D
thufbsDexME0YV6IPTDjpKpp6mxcEVCB2Ex6ZU7iT9he82lPxOm3Exa3sVntKLVR
Ep3mlfrlTsy3DEfbJbZvPJkhJm6xwdhrVV0mSWhAxkvAIXho0iGb+FBId6585vDH
g9Usz4/UHp8bUOGaOopF7X7AR71CzvPRzMFhrscWyIblZg50cOxet2IhjXVmSmOR
Gd+nHQXZuYB3livHCV+AcNoRXEnyGwFBEpav6Rm1SrSYlWu8YipF7CemwBIopeP0
S25FtqVIsoycTg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:59 2025 by rpki-client