
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: kpHVp4LSI5jJB1lNGV+Fr67mr4jiDfTu7BenJmSBW0A=
Subject key identifier: CC:D7:EA:D4:DD:36:17:3C:0B:B4:C5:A5:E8:E5:7B:86:22:A1:AA:DD
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 0198D705891F41E5B9E1EDBD7B32E175DA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 0562
Signing time: Sat 23 Aug 2025 13:02:00 +0000
Manifest this update: Sat 23 Aug 2025 13:02:00 +0000
Manifest next update: Sun 24 Aug 2025 13:02:00 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: UCZuQKX1YHkn+HjjQmrann6U4vVEIWqUr4qQtgJYWQY=)
2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:89:1f:41:e5:b9:e1:ed:bd:7b:32:e1:75:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Aug 23 13:02:00 2025 GMT
Not After : Aug 24 13:02:00 2025 GMT
Subject: CN=ccd7ead4dd36173c0bb4c5a5e8e57b8622a1aadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:38:52:af:e2:f5:9f:95:70:9c:41:8c:00:
20:47:08:bd:1b:e3:bd:5d:cc:cd:31:71:68:0f:de:
48:dd:d2:5a:4f:ed:a7:b5:70:94:61:3f:85:d2:1e:
e4:de:fd:e7:b5:c8:60:20:29:09:ac:3a:ad:06:e6:
ec:4a:a7:ff:b2:36:9f:4d:b4:07:1b:c0:8f:63:9e:
bc:47:44:d9:92:00:60:27:c2:95:ed:e9:d8:3f:68:
ed:8c:98:42:d9:6c:bb:47:13:f4:bb:6a:48:47:cc:
e0:5c:d6:b8:1f:80:58:74:38:84:65:ce:54:2a:37:
07:7f:9f:1b:b8:fb:ef:61:df:e1:d9:c0:3b:0a:7a:
93:45:65:0d:8c:e6:0b:65:3a:7c:b9:c7:23:8c:21:
bb:3a:e5:3b:98:6a:ae:a2:e7:a1:10:41:ad:e6:da:
5e:d9:16:c7:38:88:1f:84:54:a3:05:c8:34:fa:95:
d9:1d:58:4c:a0:44:07:19:32:9e:6d:d9:bd:ed:a9:
16:46:01:bb:4d:d3:2e:36:12:45:06:4d:28:bf:ba:
aa:50:e6:cd:c4:14:21:01:b5:66:38:cd:b4:f1:57:
65:4a:f2:f1:b7:3b:84:92:2a:17:32:90:c4:0e:d7:
3c:40:39:ef:08:03:c0:61:d6:b3:67:16:21:fe:34:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:EA:D4:DD:36:17:3C:0B:B4:C5:A5:E8:E5:7B:86:22:A1:AA:DD
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:43:76:05:50:e2:43:5d:2b:b7:8e:05:93:90:27:d4:c4:30:
dd:9d:dc:1f:0f:1d:fd:59:85:1b:26:3d:f1:40:49:f4:60:9e:
b9:5a:b5:26:b7:29:12:dd:22:d2:4d:5f:a7:ea:6b:0a:1c:66:
92:84:d1:ce:da:07:1c:d7:fb:eb:53:fc:4c:84:74:49:f9:17:
5d:a8:55:b0:71:eb:23:0b:a9:ff:96:a2:ed:87:82:bf:cd:8f:
42:a8:10:94:d5:d2:f4:29:6c:f4:81:6d:1b:73:5a:08:47:c1:
46:9b:19:76:e9:16:e1:da:62:f1:bd:32:08:45:90:b3:13:0a:
f7:6a:64:d3:0c:1d:6b:07:cb:ba:6a:16:3b:fc:a6:ef:b3:b9:
fa:1f:69:de:47:e9:1d:f4:7f:b8:af:dc:ab:21:0e:89:80:c9:
9c:ff:8e:3f:48:2d:38:a6:3e:b3:98:3b:b7:51:0a:7d:76:8c:
60:fe:89:22:8e:12:6b:ae:57:d8:cc:57:db:a9:b0:83:59:c8:
26:1e:f0:51:3f:c4:5c:db:64:ae:0d:51:3c:7b:21:c1:6e:8f:
d2:9d:44:83:de:c3:1d:90:00:94:c0:19:d0:63:36:e5:8f:5c:
d2:ab:29:24:3e:aa:cc:7e:52:f3:46:35:7d:0c:b8:c5:48:e2:
0b:78:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:22 2025 by rpki-client