Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: ZMdqJMQBS/oqso1KiHzabRVBreumU+4X/B0usGVoTrE=
Subject key identifier: C4:F2:DC:DF:4D:30:40:47:64:2F:33:E4:06:13:56:42:64:1D:B3:05
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 0199FE46BC374250AFA82D777E1C13C9DC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 0551
Signing time: Sun 19 Oct 2025 21:01:12 +0000
Manifest this update: Sun 19 Oct 2025 21:01:12 +0000
Manifest next update: Mon 20 Oct 2025 21:01:12 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: vmZDaUnuK1CcoJKWOxAynq9gv0ojpCqeCxmEawb27JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bc:37:42:50:af:a8:2d:77:7e:1c:13:c9:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Oct 19 21:01:12 2025 GMT
Not After : Oct 20 21:01:12 2025 GMT
Subject: CN=c4f2dcdf4d304047642f33e406135642641db305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:3e:b3:5a:25:1c:a8:24:0a:44:b1:9d:b4:
f4:70:7c:5b:47:b5:33:e6:38:24:ff:77:32:63:36:
62:67:65:f6:4d:ff:16:3f:9b:23:5b:15:88:3c:5b:
94:15:ed:ca:1a:97:4c:c6:e1:4b:41:d5:60:8f:96:
02:28:fe:ec:f7:45:78:bd:6d:41:73:6f:8b:da:f6:
42:24:c4:ea:ba:3b:84:77:b0:3d:2a:95:56:4d:69:
77:69:0f:76:65:27:e4:59:36:48:9d:a5:68:65:70:
e2:75:07:e3:74:94:9d:f5:1a:7b:1d:cf:9d:e7:1a:
c9:ea:98:1f:30:07:d7:bd:6a:65:51:89:0b:19:68:
2a:18:8f:60:7c:ae:1f:3b:86:c4:62:62:a4:51:e9:
05:a0:e3:3b:4f:6f:09:0e:d6:59:c4:4d:a8:01:59:
a7:4e:e9:e6:84:4e:92:b8:81:2f:2b:a6:c5:d0:7a:
9f:07:d5:65:33:3a:98:11:4b:5f:6c:dc:65:5c:f2:
24:5a:0f:e9:6b:ad:6c:1c:35:11:92:1e:66:19:d0:
ff:66:0d:a8:17:ef:5d:77:50:c6:5c:86:dd:f4:2d:
55:96:63:56:39:02:54:b3:07:d3:b3:3b:ac:24:0f:
a1:5e:f3:e4:cc:18:e3:a7:b0:2d:d1:10:5e:ba:ea:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:DC:DF:4D:30:40:47:64:2F:33:E4:06:13:56:42:64:1D:B3:05
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:0d:70:8f:13:3b:3a:5c:42:61:59:ee:f2:01:94:85:60:
36:b2:20:d8:86:7a:0b:23:d9:15:ae:2b:87:68:d8:65:5d:d6:
67:10:36:62:b8:a8:dc:67:97:62:1e:e9:c3:90:32:98:8a:36:
85:01:23:7c:f3:f8:db:3c:74:8d:33:93:4d:39:f8:7c:80:aa:
d8:37:33:c0:a3:fe:ae:ef:2c:23:4b:21:dc:e0:1e:c9:f0:57:
a7:ca:d2:04:8d:55:ed:17:26:61:1e:2f:fb:84:73:ae:04:b4:
27:ea:a6:69:10:0d:cd:74:6c:55:c5:08:85:c0:13:a7:60:b8:
5a:7b:32:15:9e:f2:2a:f5:bd:34:2c:29:85:7f:d5:d0:f3:00:
fb:9a:9b:cb:bd:ee:9a:44:9a:61:99:a6:1c:7c:53:8f:c0:7f:
1e:52:72:f4:ed:d8:7f:d7:b4:c8:60:98:dc:09:6e:e3:88:20:
4a:61:42:cf:c6:3d:52:dc:b3:da:4e:20:78:79:86:a6:be:2f:
e9:38:77:5a:bb:2c:64:cd:86:9a:90:67:ce:10:80:0c:20:bf:
7c:56:fd:7f:5f:ef:d6:d7:53:52:7d:cd:56:07:91:35:5d:a7:
92:ca:75:e2:5b:a8:e2:0e:1c:30:89:eb:26:12:e5:17:34:cd:
cc:58:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:51 2025 by rpki-client