Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json)
Hash identifier: wY+IRTSbQTHJ0I0wYrZNJ+7mLDOgsITjaQ7+bEJ3EbE=
Subject key identifier: FF:84:24:F0:5B:97:36:81:F4:BA:A8:B1:87:42:B4:95:86:CE:D3:76
Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b
Certificate serial: 019A0CDD398CD9F4358EDF3A817350DC75EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
Manifest number: C6
Signing time: Wed 22 Oct 2025 17:00:16 +0000
Manifest this update: Wed 22 Oct 2025 17:00:16 +0000
Manifest next update: Thu 23 Oct 2025 17:00:16 +0000
Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: GYpJ2Trz6yHAyx7fExazhWeFWse7wi1nFL/3lpXLEBk=)
2: CqyAVWGwUYFXk3xLCbAbOd-2w64.roa (hash: 9le//z+aFU9uWnp3Sn0UvoQZVhblLhWFcW8v/Wf8MNc=)
3: JtBlmMT7cUdJQUPlH125JfjLyeU.roa (hash: qs9GfTMJL3N2x8/XSRJs2Wor36v2IAZDXoDEFrwPV/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:dd:39:8c:d9:f4:35:8e:df:3a:81:73:50:dc:75:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b
Validity
Not Before: Oct 22 17:00:16 2025 GMT
Not After : Oct 23 17:00:16 2025 GMT
Subject: CN=ff8424f05b973681f4baa8b18742b49586ced376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:29:69:02:db:30:ce:99:16:86:4d:b1:45:
9c:f6:03:ed:fe:f8:4a:19:79:6d:67:cf:08:3f:5b:
49:35:bd:52:a4:ee:3a:3d:64:c0:04:4c:b2:77:2b:
53:11:d5:be:c3:e6:c4:49:ea:6f:49:92:42:76:fd:
d0:4c:49:f1:8c:f2:50:bd:c4:b5:ad:0d:4f:2d:cc:
92:c5:40:52:74:44:e5:12:06:fb:68:99:d1:ad:75:
82:d3:9c:88:aa:af:b8:50:2b:96:73:07:08:bc:4b:
e9:ac:1a:e7:29:63:f5:da:a0:ac:03:f5:ef:9c:26:
01:e4:4e:07:3a:c8:90:9a:27:17:b9:d8:e1:cb:bd:
31:f8:38:51:83:52:8e:3c:71:57:38:70:95:f8:4c:
4a:79:43:59:e4:f6:c0:05:08:3a:ac:4a:bb:f1:d0:
60:51:3c:97:4c:85:ab:92:fb:50:27:e4:7b:d8:da:
3f:96:a9:97:fc:fd:8a:78:e6:d1:8b:04:1f:27:29:
ea:b7:19:20:a8:c4:9e:5b:fd:39:b8:b9:63:72:4f:
3e:cf:85:f9:bc:3f:9d:5f:55:c0:ba:5d:d9:97:14:
4b:d2:db:2c:d9:f2:63:c5:79:53:5a:03:26:e0:20:
51:e2:ef:2a:59:36:88:13:8d:81:09:d1:51:56:e6:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:24:F0:5B:97:36:81:F4:BA:A8:B1:87:42:B4:95:86:CE:D3:76
X509v3 Authority Key Identifier:
keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:ed:80:95:ef:83:66:68:b4:c0:7f:bc:ab:a2:6d:67:2f:
6e:f4:71:c2:e5:ab:fa:58:f0:44:aa:f2:f7:ff:47:0c:aa:0d:
e9:1c:39:01:fa:8f:cc:37:7e:b7:bf:5b:6c:73:7d:1e:e9:a4:
cc:97:49:de:f8:7b:45:fb:f6:53:af:13:ee:34:86:b4:9e:7c:
70:ab:40:55:8a:b1:26:dc:87:11:ea:d3:8f:4d:58:57:77:0e:
33:20:b3:2c:96:94:cb:a8:05:91:97:24:bf:d0:6c:78:75:de:
3c:15:0a:8f:61:f8:f9:57:50:b5:53:cc:95:ee:af:06:a6:4f:
3c:fa:32:eb:67:52:22:f4:36:ee:47:50:1c:a0:5f:58:6c:9d:
98:dd:87:9a:2f:25:30:52:12:45:7b:7c:77:43:5c:28:99:b9:
ae:41:ec:9f:16:4e:21:17:bc:48:dc:f8:5b:e6:f8:a0:bc:43:
55:ed:5e:64:22:2d:53:43:75:e9:de:9b:41:01:3f:5b:cf:e5:
06:09:fc:11:65:47:42:84:b0:91:60:68:7c:a9:30:a9:d1:8c:
2f:6d:7c:11:4a:25:bd:00:7e:14:43:a5:bd:57:35:e1:14:61:
27:00:4e:ce:06:a5:23:23:e7:7f:46:91:1b:f3:68:a1:a7:c1:
c6:44:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:54:55 2025 by rpki-client