Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: xksVl8EPqATXVTmmXAThDcy8FUvzYy4K8dztrrMCCKM=
Subject key identifier: 19:A0:2E:B7:0B:C1:C7:06:9A:59:87:FF:1E:B3:66:A5:D0:A3:0A:51
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 0197CE3AC9B1D0D04C221CA99E8933AD003A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 042F
Signing time: Thu 03 Jul 2025 03:00:48 +0000
Manifest this update: Thu 03 Jul 2025 03:00:48 +0000
Manifest next update: Fri 04 Jul 2025 03:00:48 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: hTeqBQ0/YRE5O4xTXfTFyv5fp8AMiNVmoRfvF+4IohM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:c9:b1:d0:d0:4c:22:1c:a9:9e:89:33:ad:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Jul 3 03:00:48 2025 GMT
Not After : Jul 4 03:00:48 2025 GMT
Subject: CN=19a02eb70bc1c7069a5987ff1eb366a5d0a30a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:ed:c6:be:a3:19:f0:62:e5:cb:5d:66:f4:
e3:9c:b6:e2:f4:96:f8:35:10:ec:c0:b5:9d:53:43:
fc:00:79:f7:63:2c:60:43:bf:90:30:21:35:ac:bd:
ab:53:53:30:89:99:7d:11:e2:c9:e3:4f:28:23:84:
ea:f1:83:8c:21:9c:0f:5d:87:e9:cb:e1:43:4c:6c:
42:b8:d6:05:4d:09:0b:1b:2c:0a:55:b1:3f:79:e4:
75:f1:d4:76:0c:c0:6d:c2:fb:f6:d8:12:f1:ea:1c:
e6:1e:73:c2:a7:e5:60:3c:fa:c3:03:11:c8:f2:23:
7b:4b:90:99:1a:6c:82:b3:e5:2e:c3:6d:80:d0:a2:
06:bf:d8:41:03:f5:13:c8:d8:fc:89:b7:07:88:58:
93:06:38:9c:c9:20:0c:ce:6f:3e:fe:b1:e7:f4:d1:
e7:c6:e6:87:74:ad:78:15:fd:8c:6b:d5:a6:a9:38:
c3:58:67:7f:02:4f:1d:ad:b9:ce:bf:b9:ba:f3:15:
0b:45:de:2b:9c:78:8f:9a:10:ba:42:d9:29:f2:1b:
e2:d1:d3:36:e5:25:4f:29:ea:34:92:99:8b:e2:a1:
18:2f:11:68:43:f0:4e:84:e1:70:df:29:04:9e:ca:
bb:aa:35:c1:2a:14:5b:43:8a:9c:88:f5:9a:85:da:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:2E:B7:0B:C1:C7:06:9A:59:87:FF:1E:B3:66:A5:D0:A3:0A:51
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b5:73:97:f6:5d:2c:2e:f4:07:56:c9:56:54:6c:6e:ca:09:
ab:73:c3:f8:7d:fd:90:b4:64:a5:a3:52:26:4d:03:ff:1a:3d:
20:84:df:59:82:27:0c:10:37:49:fd:e2:c3:05:00:97:bd:3b:
67:eb:28:38:d6:2c:9f:6e:fa:93:b1:54:2a:47:49:84:66:82:
23:69:08:ff:e4:4f:ce:ce:ba:6d:78:f3:76:49:31:6b:6a:45:
4c:fb:bd:88:43:05:92:50:74:f0:3c:93:90:ba:22:3a:aa:9f:
f4:b5:8b:48:2e:2f:a4:0b:27:6a:0d:b1:65:fd:32:c5:06:1f:
66:45:e6:ce:ca:9a:9b:f8:93:e7:d0:21:17:b7:ad:73:dd:2e:
e0:7b:02:91:1c:8a:44:e7:fd:f4:bb:cf:3d:10:4c:5d:5d:81:
9a:7e:74:d8:1e:87:f3:12:a8:a9:f0:a8:b7:18:d6:fb:4e:37:
f0:d9:de:a4:14:30:81:81:fd:e0:8d:f3:44:57:b1:c7:c8:81:
da:fb:9b:46:76:0f:e5:1a:fd:28:6f:bd:ab:ef:e0:93:24:79:
cc:96:6f:2f:7a:a1:58:50:4c:3c:b2:4c:dc:aa:3b:ab:2b:cc:
7b:10:3f:75:03:42:2c:a1:f6:4e:d8:13:a9:62:98:5f:7a:59:
1e:60:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:15:14 2025 by rpki-client