Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: X08reYyJGCLVOdnf7rnSG3CBq4GuOEiqjkLQgEyooTg=
Subject key identifier: 5A:A2:11:CE:23:10:26:69:F8:7B:1C:C0:E2:0F:90:CD:33:FB:8F:05
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01984965AD4D31933B85D3014D6DA32BA8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:56 +0000
Manifest this update: Sun 27 Jul 2025 01:00:56 +0000
Manifest next update: Mon 28 Jul 2025 01:00:56 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: Wt0M/qsGrEulNYGxa+oSsJaQODTUVS+Tz0g4Y9FuFFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ad:4d:31:93:3b:85:d3:01:4d:6d:a3:2b:a8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jul 27 01:00:56 2025 GMT
Not After : Jul 28 01:00:56 2025 GMT
Subject: CN=5aa211ce23102669f87b1cc0e20f90cd33fb8f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:19:d5:d0:18:b1:5a:35:40:43:a6:e1:6b:
f7:e4:67:61:41:4d:1d:6c:a4:c9:53:16:b2:47:7c:
cd:22:5b:c2:a8:84:44:5d:44:f6:24:75:22:d1:27:
ca:b8:cd:72:fc:0e:6e:6e:c0:6d:4b:48:93:2c:b0:
22:fc:3c:52:c8:f1:0a:59:3b:50:5c:40:00:71:62:
67:98:54:dd:00:b6:6f:e7:c7:c4:7d:1f:0c:62:e4:
a5:e5:88:e0:75:6d:02:06:89:92:41:97:40:1d:5a:
5c:e9:21:bf:f4:da:1d:ce:97:a6:73:74:0d:67:2a:
99:bd:3b:f0:9e:dd:91:1b:4d:9c:df:45:f7:2e:c4:
70:a4:85:94:fb:ff:63:be:69:1d:5d:e6:3c:bc:1d:
32:15:e1:f2:83:6c:ac:c0:b4:cd:db:b0:71:80:a5:
64:6f:a6:c7:d8:e3:7e:c1:5e:8f:57:ff:82:c7:5b:
19:6f:0b:37:64:45:79:3b:ec:df:06:ca:66:99:56:
22:48:b8:49:8d:4a:79:f3:a5:72:c3:6f:c0:34:f1:
7c:6b:90:b8:38:3a:11:f0:9d:ce:09:ed:ed:18:36:
21:73:d4:de:ce:8e:8c:2b:ae:25:80:a3:7a:6d:45:
54:63:06:88:3d:65:d5:e0:44:c8:2a:d6:b0:ca:13:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:11:CE:23:10:26:69:F8:7B:1C:C0:E2:0F:90:CD:33:FB:8F:05
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d9:0d:ee:f6:19:0b:72:58:bf:b9:5b:32:be:16:f3:15:b4:
f6:fc:40:33:9d:67:9a:75:9b:7b:a9:96:b5:3a:b1:1a:08:30:
10:e4:d3:a7:40:a9:c3:1a:fc:70:bc:20:1c:05:bb:01:79:18:
e6:41:2c:97:c4:a9:1f:a4:6f:78:fa:43:1d:a9:51:46:9a:4c:
5f:d0:d1:84:4f:7f:99:00:c6:cf:72:62:55:1a:0c:a0:b0:ae:
6d:97:bf:d1:22:5f:23:55:02:b5:a1:4d:29:ee:18:69:2c:40:
36:f3:9d:b8:e8:56:18:55:07:2d:db:59:62:48:81:15:38:a5:
3b:15:36:3f:d2:4d:41:23:57:dc:e2:c0:4a:54:b0:18:c2:c0:
c0:7c:43:6b:72:6e:cc:cc:3a:b1:b5:4f:cf:a5:90:f9:f9:dc:
9a:84:56:23:6a:65:2c:1a:73:c2:8a:46:04:58:91:4f:86:d8:
13:88:42:1a:f2:45:62:6f:5f:c9:73:4d:e1:39:c2:25:06:84:
84:fc:5f:a3:b6:f1:ab:fd:65:d2:d1:66:f1:dd:c4:da:05:47:
aa:7f:d7:c1:c9:0a:98:fc:6f:c2:b2:a1:2d:0d:7c:9c:89:ac:
6a:3b:19:88:05:21:bf:70:cd:85:49:a4:27:f2:da:88:63:78:
a7:7e:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:28 2025 by rpki-client