Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: q1JbJGR1e3DmnmaMlDPwPykvgmWgO78NTVp4hkT3y90=
Subject key identifier: 49:2E:50:29:08:E6:77:B3:46:AE:58:99:3C:3A:FD:FC:ED:9B:1B:E4
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 0198D6614E0BD017A3D71FE1A18DF200619A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0A91
Signing time: Sat 23 Aug 2025 10:02:37 +0000
Manifest this update: Sat 23 Aug 2025 10:02:37 +0000
Manifest next update: Sun 24 Aug 2025 10:02:37 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: CIV+nrvNundUFrUrF2ZSVbjvPxbHXtt7udn+nyV/f20=)
2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4e:0b:d0:17:a3:d7:1f:e1:a1:8d:f2:00:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Aug 23 10:02:37 2025 GMT
Not After : Aug 24 10:02:37 2025 GMT
Subject: CN=492e502908e677b346ae58993c3afdfced9b1be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:86:07:18:9f:8c:3c:dd:4d:f6:67:37:da:
a5:e7:7c:2f:f0:a0:4a:a9:38:92:75:98:4e:86:b4:
17:bd:89:ae:71:a2:3a:9d:a5:9f:74:58:4b:79:db:
bb:5f:cd:22:dc:00:f1:78:ff:0b:28:3f:5d:3e:83:
13:fb:c0:77:ea:b6:c0:c8:27:85:f7:db:ec:21:4c:
4f:a7:9c:b3:ff:3b:17:b7:4f:3c:e4:f3:51:86:52:
ed:10:23:aa:16:47:14:bc:8e:27:66:b0:2a:58:6e:
f2:21:6a:b6:45:d0:80:83:cd:0f:d4:22:f8:44:fc:
68:34:3b:92:9d:53:ec:32:73:cd:41:8e:d9:f0:3d:
be:47:72:de:0f:b0:ed:8e:2c:00:e2:01:5d:bb:fc:
8e:29:2d:51:bd:b7:cf:74:e0:b5:93:12:cb:49:6f:
50:35:6a:a5:58:d9:12:bd:7f:7a:30:9b:6b:6d:92:
32:8e:c8:32:74:e0:32:dd:85:0a:ca:a3:13:bb:dd:
2a:21:b0:16:7f:b4:b1:54:76:c9:b2:c5:1b:08:1c:
3c:b2:ee:4a:d0:1a:41:33:40:39:12:d2:cf:d5:4c:
e0:0c:a5:b6:0a:2e:03:32:67:7d:29:61:62:ad:7c:
c4:b2:49:58:f1:30:a4:cf:43:9d:d8:9f:38:33:ce:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:50:29:08:E6:77:B3:46:AE:58:99:3C:3A:FD:FC:ED:9B:1B:E4
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:da:cb:a5:ec:80:d4:ff:15:ec:6a:87:16:06:47:e0:fd:
ef:5b:e3:47:6f:61:3c:56:7a:38:65:65:df:ad:14:5b:91:1e:
a3:ae:17:dc:e6:19:52:ca:d1:ab:66:3e:e3:4e:ba:79:76:b5:
b0:35:11:13:ff:6b:c8:36:bf:74:24:f7:4d:7d:68:f9:c2:28:
db:6f:67:41:b0:23:12:0a:d4:d0:3a:ae:b6:7c:0d:f7:02:d7:
aa:62:2c:0f:e6:74:fa:cd:98:c7:ed:c6:90:67:42:3b:38:c8:
dc:81:3a:3e:b2:2c:5c:63:e5:9a:bd:7b:68:83:28:57:81:1b:
b9:a5:71:e1:c4:9d:e0:af:ee:76:44:d6:eb:79:23:04:6a:ed:
82:68:aa:65:95:83:6b:f2:bc:e5:25:c4:96:0c:d7:77:f7:ab:
fa:f8:ab:cc:ea:7f:0d:be:df:67:b6:66:bc:bf:d2:9e:ca:12:
b4:7b:53:3a:da:a1:0c:4b:6f:6e:fb:97:3e:d2:38:32:44:72:
15:6f:27:8d:f7:08:38:e3:57:6c:d7:2e:c8:e6:e5:85:82:83:
b1:a4:7a:70:08:d1:42:80:5e:84:7c:a3:03:ee:db:7b:35:ec:
a3:a7:ad:26:c7:84:51:32:b5:71:97:ca:76:7a:1a:fc:2c:6f:
4c:f0:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:12 2025 by rpki-client