Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: dbvhJadvDtZRsG/0nuCWkCt4bRXr1kZNy/2DR0T+HIE=
Subject key identifier: FB:A6:D2:29:0C:39:EB:AC:AA:F2:87:7A:02:66:4A:38:41:18:23:50
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01984966284D60467DB69A4ED5AA32E77D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0A48
Signing time: Sun 27 Jul 2025 01:01:28 +0000
Manifest this update: Sun 27 Jul 2025 01:01:28 +0000
Manifest next update: Mon 28 Jul 2025 01:01:28 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: 2EKoLxeWU8VKI204I5kQJi2bmwpb6zMw/ORMnZ5ni7w=)
2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:28:4d:60:46:7d:b6:9a:4e:d5:aa:32:e7:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Jul 27 01:01:28 2025 GMT
Not After : Jul 28 01:01:28 2025 GMT
Subject: CN=fba6d2290c39ebacaaf2877a02664a3841182350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:0e:2a:19:38:a9:1a:a0:5c:0d:69:ba:94:
22:60:5a:c7:86:cc:52:91:a7:e3:29:f9:0b:5b:27:
94:ec:7e:5f:4f:e9:f8:e6:36:cd:c1:c6:d0:36:04:
05:9f:b8:57:b4:af:eb:31:08:ed:48:46:82:93:87:
76:b8:1b:af:ad:ce:7b:68:30:25:f4:62:ae:3e:15:
75:4e:6b:af:8b:3f:58:58:6c:6e:aa:57:0d:e9:54:
af:a2:8a:8b:14:c6:c3:2c:00:00:fc:eb:ca:58:74:
44:5b:0e:89:75:a2:fd:1a:3a:c5:d4:ab:85:e1:79:
6f:01:b8:7f:fe:f3:38:2b:06:67:14:bc:d6:ae:86:
08:54:62:21:ff:4a:83:76:6e:3e:51:19:09:7a:82:
28:53:5a:1f:3d:4c:d0:e1:fd:55:4c:e5:25:38:26:
91:af:a4:d3:3d:37:f2:e3:ca:a1:91:49:37:a2:2b:
d5:01:4d:03:39:5a:5b:06:70:84:b8:9e:b8:89:e2:
38:ca:bb:a3:e9:22:02:98:c5:f0:d1:ec:4b:00:1d:
ef:24:5d:dd:d4:49:2f:cc:5e:52:19:d4:cf:48:26:
b3:d1:37:92:bb:99:63:e2:9d:e0:1f:20:1c:a6:f6:
01:f8:f2:32:9d:b8:f2:20:a2:65:1c:7b:ec:3c:80:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:D2:29:0C:39:EB:AC:AA:F2:87:7A:02:66:4A:38:41:18:23:50
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0e:0e:18:93:46:45:8f:f4:74:ce:2b:7d:e9:ac:5a:ae:1d:
84:af:d6:6e:b0:a3:1f:cd:98:92:23:1e:b2:a4:92:d4:67:2f:
de:d4:43:b5:1c:77:fd:1e:eb:a0:4e:81:d5:a8:fe:2f:eb:72:
06:23:ff:43:9a:44:20:4a:3c:03:71:de:3d:7c:a2:8e:c5:35:
f7:5a:81:c7:c0:2d:04:8e:bc:7d:d7:32:73:8f:62:24:3c:33:
83:cf:be:4e:aa:59:6e:54:88:e8:18:85:53:71:69:eb:4d:9b:
02:91:06:c3:a4:9d:51:60:fe:61:c9:0e:77:ac:67:59:ce:9b:
fe:42:99:02:0c:51:68:8f:bc:b5:05:12:72:fc:96:c7:67:5f:
9a:f4:a8:f8:aa:98:25:eb:aa:53:4f:12:91:9f:8f:85:85:f7:
c6:b6:99:b9:3a:8d:0b:59:9d:ff:73:db:14:60:23:4f:12:2b:
c1:5a:5b:59:ae:b8:33:8f:27:d6:d1:27:fa:b6:e6:d8:06:ca:
46:66:e8:92:63:b9:b6:2d:87:ea:29:f9:0b:01:e8:5b:4f:e2:
8d:bf:da:61:ee:4f:ac:2f:1b:77:e7:ff:f5:1f:df:97:d4:77:
e3:d9:b2:3f:fb:fc:f9:36:24:4a:a2:61:80:0a:f2:37:02:30:
05:10:f0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZihNYEZ9tppO1aoy5306MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj
YmE1ODUwHhcNMjUwNzI3MDEwMTI4WhcNMjUwNzI4MDEwMTI4WjAzMTEwLwYDVQQD
EyhmYmE2ZDIyOTBjMzllYmFjYWFmMjg3N2EwMjY2NGEzODQxMTgyMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyREOKhk4qRqgXA1pupQiYFrHhsxS
kafjKfkLWyeU7H5fT+n45jbNwcbQNgQFn7hXtK/rMQjtSEaCk4d2uBuvrc57aDAl
9GKuPhV1Tmuviz9YWGxuqlcN6VSvooqLFMbDLAAA/OvKWHREWw6JdaL9GjrF1KuF
4XlvAbh//vM4KwZnFLzWroYIVGIh/0qDdm4+URkJeoIoU1ofPUzQ4f1VTOUlOCaR
r6TTPTfy48qhkUk3oivVAU0DOVpbBnCEuJ64ieI4yruj6SICmMXw0exLAB3vJF3d
1EkvzF5SGdTPSCaz0TeSu5lj4p3gHyAcpvYB+PIynbjyIKJlHHvsPICmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPum0ikMOeusqvKHegJmSjhBGCNQMB8GA1UdIwQY
MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct
MDA4YTgwZjZmZjExLzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx
LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUw4OGJNG
RY/0dM4rfemsWq4dhK/WbrCjH82YkiMesqSS1Gcv3tRDtRx3/R7roE6B1aj+L+ty
BiP/Q5pEIEo8A3HePXyijsU191qBx8AtBI68fdcyc49iJDwzg8++TqpZblSI6BiF
U3Fp602bApEGw6SdUWD+YckOd6xnWc6b/kKZAgxRaI+8tQUScvyWx2dfmvSo+KqY
JeuqU08SkZ+PhYX3xraZuTqNC1md/3PbFGAjTxIrwVpbWa64M48n1tEn+rbm2AbK
RmbokmO5ti2H6in5CwHoW0/ijb/aYe5PrC8bd+f/9R/fl9R349myP/v8+TYkSqJh
gAryNwIwBRDwrg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:34 2025 by rpki-client