Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: h8JdJLM9JV8KnJelJQLopzxTSbOBvnAdTOOyffjwEpo=
Subject key identifier: 2E:76:A8:3C:9B:6F:46:DD:06:A7:A7:84:70:93:FC:A8:82:F1:3E:A9
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 0197B745B4C3A5A7CA99B70B142949315B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 04CD
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: FIkbxI3RARRi0QrATljuSVgTK1g7I5gy1Fdf6b7bZZc=)
2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b4:c3:a5:a7:ca:99:b7:0b:14:29:49:31:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=2e76a83c9b6f46dd06a7a7847093fca882f13ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:9c:2b:98:8c:bb:2e:03:ad:26:e5:6f:f1:
a8:36:00:71:97:26:8c:38:64:1e:34:ae:d9:9c:83:
c4:95:78:2a:b0:8f:b1:8c:5b:be:b8:35:c5:33:8d:
2c:fa:38:ad:18:9a:ec:54:fa:21:44:53:91:2c:4d:
78:14:a2:16:01:38:d9:a7:99:7a:19:c7:98:55:37:
61:b9:68:ef:b3:fd:52:6a:32:d3:22:f2:15:9b:e3:
5c:e7:cd:31:69:e2:59:61:95:5d:8d:64:9a:b8:63:
52:f7:13:d6:64:38:bf:af:fc:f1:91:b9:6a:0d:6a:
02:f1:03:2f:6a:94:f4:14:c8:bb:5f:60:bb:d1:72:
c3:52:3b:76:16:e5:6b:f7:2a:f2:6f:0c:02:f9:74:
6f:aa:e0:b6:eb:93:e4:2f:01:27:37:0e:20:a0:fb:
7c:90:fd:2b:f6:1e:74:9f:a7:f2:37:38:15:fc:15:
2d:30:db:78:e0:18:e5:b3:93:27:c9:71:68:8e:a4:
a2:b8:e5:05:b0:08:4e:ca:1b:22:26:3a:7b:31:63:
90:38:1f:5e:29:98:f7:51:05:b3:e1:0b:13:9b:3f:
bd:05:96:38:42:c4:00:70:6b:05:dc:95:8f:cf:a2:
ef:83:8f:36:99:4a:46:3b:40:6c:9a:85:a3:26:50:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:76:A8:3C:9B:6F:46:DD:06:A7:A7:84:70:93:FC:A8:82:F1:3E:A9
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0b:e0:76:c1:02:3a:8d:a7:53:5f:7e:d0:db:28:be:eb:4d:
57:0e:5d:bd:93:db:c0:06:ee:9e:9b:0e:9a:10:8e:9d:75:58:
c0:f5:f8:8c:21:7e:68:2c:39:c2:e3:db:9b:6e:10:e5:a9:d8:
b0:27:9b:f7:15:dd:9c:3a:45:5e:90:c6:e0:99:71:46:5c:c5:
2e:22:d9:b8:4a:41:e8:6b:ab:08:09:ca:64:d2:d0:56:91:47:
31:63:3c:b8:0b:c2:e2:b1:09:0a:86:96:e9:b6:71:f4:9e:f0:
18:f3:b9:02:51:0d:9d:2b:7a:0b:1a:33:10:a2:09:ca:c6:61:
2f:a1:a8:3b:ba:d2:57:02:3a:40:9f:59:da:2c:99:73:ea:5b:
27:ed:50:d2:bb:e2:c1:b1:bf:a2:c4:4e:d3:d0:c8:8d:43:0a:
22:b1:7b:08:03:51:73:23:72:12:72:d8:f6:a8:9f:e1:ff:f0:
2b:39:25:32:74:0a:cf:83:12:38:80:8d:b8:34:69:63:55:a1:
36:e6:a0:01:ce:97:88:3e:2c:fb:05:6f:4b:f7:e5:1f:a0:fa:
06:90:67:b1:76:50:c9:1e:ab:c8:4a:44:85:af:77:c3:83:4b:
dc:7f:0c:9c:59:3f:c6:53:13:0e:8e:47:6e:81:74:27:50:fe:
be:ca:89:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbTDpafKmbcLFClJMVuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3
N2JhYWMwHhcNMjUwNjI4MTYwMTI4WhcNMjUwNjI5MTYwMTI4WjAzMTEwLwYDVQQD
EygyZTc2YTgzYzliNmY0NmRkMDZhN2E3ODQ3MDkzZmNhODgyZjEzZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5acK5iMuy4DrSblb/GoNgBxlyaM
OGQeNK7ZnIPElXgqsI+xjFu+uDXFM40s+jitGJrsVPohRFORLE14FKIWATjZp5l6
GceYVTdhuWjvs/1SajLTIvIVm+Nc580xaeJZYZVdjWSauGNS9xPWZDi/r/zxkblq
DWoC8QMvapT0FMi7X2C70XLDUjt2FuVr9yrybwwC+XRvquC265PkLwEnNw4goPt8
kP0r9h50n6fyNzgV/BUtMNt44Bjls5MnyXFojqSiuOUFsAhOyhsiJjp7MWOQOB9e
KZj3UQWz4QsTmz+9BZY4QsQAcGsF3JWPz6Lvg482mUpGO0BsmoWjJlCR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC52qDybb0bdBqenhHCT/KiC8T6pMB8GA1UdIwQY
MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt
M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3
LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwvgdsEC
Oo2nU19+0NsovutNVw5dvZPbwAbunpsOmhCOnXVYwPX4jCF+aCw5wuPbm24Q5anY
sCeb9xXdnDpFXpDG4JlxRlzFLiLZuEpB6GurCAnKZNLQVpFHMWM8uAvC4rEJCoaW
6bZx9J7wGPO5AlENnSt6CxozEKIJysZhL6GoO7rSVwI6QJ9Z2iyZc+pbJ+1Q0rvi
wbG/osRO09DIjUMKIrF7CANRcyNyEnLY9qif4f/wKzklMnQKz4MSOICNuDRpY1Wh
NuagAc6XiD4s+wVvS/flH6D6BpBnsXZQyR6ryEpEha93w4NL3H8MnFk/xlMTDo5H
boF0J1D+vsqJvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:00 2025 by rpki-client