Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: Ah1f3MoBQJZ0dUoTsYn1i8Qobd8NzedET8uutSaa84Q=
Subject key identifier: EF:31:8F:05:75:63:FC:C0:12:AF:AA:18:3D:D4:4D:D3:36:EA:3B:8F
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 0199FDD94254A3D535E97ED04466498D5ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0B2A
Signing time: Sun 19 Oct 2025 19:01:37 +0000
Manifest this update: Sun 19 Oct 2025 19:01:37 +0000
Manifest next update: Mon 20 Oct 2025 19:01:37 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: /VOC/mH0qldBa3JhxLG8jHD+OR9A3OkuJKod45s5H2s=)
2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:42:54:a3:d5:35:e9:7e:d0:44:66:49:8d:5e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Oct 19 19:01:37 2025 GMT
Not After : Oct 20 19:01:37 2025 GMT
Subject: CN=ef318f057563fcc012afaa183dd44dd336ea3b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:be:72:30:33:cf:b0:2a:be:ad:46:00:99:
d7:27:ab:d9:5e:9a:f1:d3:97:09:1c:2d:2b:ff:0a:
d2:b8:0e:10:ae:49:8a:25:3d:4c:83:23:75:9e:f8:
50:1e:f9:19:11:34:bf:02:2f:c1:4d:1f:b6:63:6d:
e9:b6:18:a1:84:c6:6b:56:8f:fd:86:cb:dd:56:33:
33:a7:a7:9e:e7:50:a7:d4:55:7c:fd:c3:6a:66:09:
8f:fa:f8:7c:16:b7:c3:33:09:94:4e:94:bc:8a:df:
25:26:64:6f:a7:7b:ec:dd:35:11:7c:69:69:b8:b3:
e1:39:f8:5e:95:08:8d:05:c2:10:55:c0:03:be:3f:
f1:b5:96:02:42:19:bf:da:84:4e:03:88:a1:7e:78:
29:5a:8f:f8:e2:f6:a6:73:50:85:9c:10:96:c9:58:
1c:7c:ac:46:2f:16:c4:ab:65:68:6d:6f:5c:6f:c9:
bb:61:a7:c7:f5:1a:42:f5:09:15:12:0b:6c:bf:33:
1b:e5:3f:7b:48:6d:36:c9:eb:79:eb:41:bb:41:8a:
1e:c5:ec:e3:12:83:2e:62:86:17:2d:62:b8:84:66:
31:4c:91:c1:6a:0f:d8:f9:08:20:9d:41:36:e7:7e:
d7:52:95:c1:ae:0d:28:25:d5:2a:28:db:bf:d1:1c:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:31:8F:05:75:63:FC:C0:12:AF:AA:18:3D:D4:4D:D3:36:EA:3B:8F
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:bf:12:be:79:95:ae:7c:2a:bc:2d:51:1f:23:84:a1:c2:
a4:08:da:58:61:4e:b0:f9:a4:16:46:c0:36:b8:4b:95:1a:f8:
3e:3c:75:50:00:c7:a9:52:64:43:16:3e:31:8f:a4:36:6e:c2:
c1:78:e6:22:2b:31:e3:fb:d9:d7:e6:65:c2:b1:1f:8b:99:be:
c7:51:7a:38:23:7a:dd:21:61:09:08:75:30:50:52:4a:ce:81:
68:4d:6a:09:1b:1d:be:ba:e3:a5:00:68:c1:22:59:60:25:62:
8e:22:18:2a:c4:4d:20:68:2e:7e:a5:76:61:c1:0b:45:91:56:
8d:74:bf:f7:39:8f:92:3a:e5:b3:53:27:c8:09:04:aa:d6:4c:
6d:ea:e9:f1:20:88:9e:37:e8:33:fb:a7:27:df:10:3a:a5:3b:
08:fb:5b:46:6e:9f:a5:11:1f:af:ba:90:66:d7:bd:93:c6:20:
df:35:bc:cc:b0:20:b1:fc:37:9c:f4:1b:83:18:96:92:14:4b:
9c:d8:a6:f1:be:fa:bb:65:f6:58:03:91:a7:3e:40:23:72:14:
47:07:c5:36:2a:7e:0d:86:01:c3:8f:3d:ba:15:52:52:98:1c:
71:c1:46:d4:75:9d:df:54:02:75:d3:c8:9a:c7:0e:21:c4:d3:
55:a6:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:46 2025 by rpki-client