Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: KD6FmDGGcdYui229f3BexAe8xEMG9bWwsp4RIYyZbxs=
Subject key identifier: 42:42:47:05:69:15:2A:DB:A3:EC:EC:A4:FC:28:EE:F0:03:6F:44:AD
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 0198D6CD0914932C72257F48D45CAB8F7C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 04B8
Signing time: Sat 23 Aug 2025 12:00:17 +0000
Manifest this update: Sat 23 Aug 2025 12:00:17 +0000
Manifest next update: Sun 24 Aug 2025 12:00:17 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: eD8fqRDFNLcH1WjxiNfcuM6u8DLIez5L/sImnCiJkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:09:14:93:2c:72:25:7f:48:d4:5c:ab:8f:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Aug 23 12:00:17 2025 GMT
Not After : Aug 24 12:00:17 2025 GMT
Subject: CN=4242470569152adba3ececa4fc28eef0036f44ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:9c:3f:d1:9c:52:48:10:91:68:3b:76:77:
77:6f:da:a9:7f:59:7b:0d:ac:89:8b:37:dc:90:9c:
52:8d:d5:f6:34:bc:1b:fc:c9:4c:e2:3f:b1:fa:69:
65:fa:b1:fb:f5:80:3f:c5:c1:4f:1f:cc:76:30:8c:
3f:aa:bb:7a:c3:ac:22:03:c5:06:1b:a8:d8:b1:97:
20:08:e1:82:43:e9:89:04:ba:cb:86:0f:6b:2a:b3:
94:72:87:7f:f5:14:6f:57:22:44:64:94:e4:a6:d2:
6f:70:8d:e1:7f:3d:7e:db:37:cc:12:9d:a7:d6:f0:
80:1e:33:04:03:82:e7:f3:7d:f7:82:db:ba:ac:f8:
d2:77:fb:21:87:a6:16:a2:c9:6c:39:50:e5:19:c4:
48:ed:7d:b8:8c:46:90:b9:2d:1d:2f:80:82:68:f8:
bb:07:5f:99:dd:d6:6f:b3:76:63:c0:69:54:06:59:
dc:da:65:26:21:e8:38:a2:fb:c6:58:1c:7a:c4:80:
7e:92:af:9d:5e:3c:8e:61:da:0d:c2:3b:f5:04:02:
a0:e2:cf:1d:0b:b1:96:32:2a:e7:e8:2f:6e:dd:96:
27:ed:7a:b7:0c:e7:bd:90:af:8b:6d:0d:2e:85:02:
8b:ea:a6:d0:28:de:1e:0e:ec:da:0e:6d:b4:65:91:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:47:05:69:15:2A:DB:A3:EC:EC:A4:FC:28:EE:F0:03:6F:44:AD
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:3e:7f:13:4d:cb:58:31:ac:4b:70:0d:f3:b5:67:a4:8a:
97:b6:69:c4:af:db:6d:e3:3c:a4:e6:58:0a:26:f3:50:bd:f1:
4b:d2:f8:35:32:9d:3d:37:b2:72:06:06:61:4e:23:50:ad:f0:
5c:79:be:fb:05:4f:f9:2c:9b:9f:75:a3:5c:3a:57:3e:f7:eb:
e1:4d:f0:da:59:34:4a:17:c8:5e:fd:c0:2f:51:80:a0:a9:df:
d8:1b:4d:41:2c:76:b2:8f:81:e4:57:3d:5c:ac:51:a4:22:c0:
06:25:79:20:5a:4b:0b:18:5f:a5:ae:85:94:73:26:48:7c:92:
5a:5e:87:d8:ad:d4:bf:72:77:96:a0:da:18:dc:e3:0d:be:2b:
b4:37:e4:51:21:4f:df:11:b9:58:f2:35:3e:08:a4:ed:0d:23:
3e:93:2f:98:a9:0c:d8:84:1f:a8:c3:02:f9:24:85:d4:c0:96:
5e:c8:72:6d:c3:42:fa:ac:5b:51:3f:a6:29:70:a7:f4:55:c1:
c7:e7:17:8e:7c:d9:64:df:20:8b:63:a1:cd:c3:60:23:b9:21:
fe:a6:14:58:f0:27:02:c6:c6:6a:f7:e0:5f:00:82:f3:9c:90:
1c:42:e4:de:fa:b8:34:12:dd:2c:a0:64:0c:82:52:97:7a:8d:
6e:fd:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:07 2025 by rpki-client