Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
File: ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json)
Hash identifier: P544a4K901N2EbALa6J/qhR7O6qOVjfVikWJapyOOh4=
Subject key identifier: DA:62:F2:F6:FF:33:14:D2:F0:4C:EF:6C:24:0C:01:15:6C:0A:1F:C1
Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
Certificate issuer: /CN=02b916b3b2e957d185032cdb499976a00eba4975
Certificate serial: 019A71B80B24D98C3FA84A0D626F578AD7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
Manifest number: 64
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: ImSSnbWSzLacLaPnsB8DnF/0SUQy6wk4V6w2Ywk8gE0=)
2: FfIKnmyhcS0MyS6jImyiKhfTG4M.roa (hash: Bq7KFCDra/eepPggazfSqcjfSDY8IxclStu1McG0psw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0b:24:d9:8c:3f:a8:4a:0d:62:6f:57:8a:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=da62f2f6ff3314d2f04cef6c240c01156c0a1fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:a2:14:da:ae:18:c7:73:7a:28:29:ab:0d:
da:83:4c:e2:5f:dd:61:e8:10:23:db:3a:6e:bb:05:
44:41:7f:7d:02:63:7a:10:99:ab:9e:aa:e6:a1:f8:
88:df:32:64:f9:9d:5e:50:30:02:0b:e2:17:fe:f5:
b2:8c:d3:09:c0:32:0c:62:d9:d3:9b:a6:bb:8c:41:
2b:c0:36:fe:55:a9:23:4a:76:e0:0f:0b:20:52:46:
e6:cc:be:5b:22:eb:dc:54:36:22:85:10:58:5c:aa:
20:15:c1:4c:2e:98:96:f0:7e:bd:78:0f:4c:23:64:
81:e5:3e:d7:1b:53:c6:b6:6e:c2:f1:9b:f5:0e:a0:
20:c1:a0:2b:8c:b8:bd:ab:c5:e4:f4:d6:c4:83:40:
47:92:f4:7f:4b:36:32:fa:73:12:27:0e:17:0a:d0:
7c:71:c8:20:b7:61:aa:fb:f9:bd:41:e0:42:0a:29:
be:25:33:b4:1b:93:1a:92:46:97:8b:b4:d9:f0:4d:
5e:30:89:96:eb:42:e8:fc:1c:00:43:bd:ff:0d:3d:
87:c1:17:c5:2c:2a:ba:37:db:37:5f:ae:4a:80:49:
a9:7f:2b:d7:03:9b:59:65:cb:11:19:e7:bf:fa:cf:
58:4e:f6:df:4e:5c:1f:cb:95:65:f4:6c:f3:75:72:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:F2:F6:FF:33:14:D2:F0:4C:EF:6C:24:0C:01:15:6C:0A:1F:C1
X509v3 Authority Key Identifier:
keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:5c:91:c4:c7:c5:f8:58:0f:f8:dd:e7:04:ad:71:1a:ea:
39:8a:d8:ba:09:e0:6a:1d:05:16:81:51:df:b5:20:62:c9:ca:
fe:36:c5:31:02:3f:75:c7:35:1f:b6:0d:53:9c:52:36:e1:13:
74:73:53:d1:f5:d8:84:58:c3:26:dc:ca:86:be:67:6c:bc:4f:
ff:ef:89:61:a6:a9:a1:46:e2:3f:f3:8d:d3:36:13:97:fb:d2:
b7:82:2d:94:4d:49:9a:11:1d:16:ba:cb:4d:86:da:37:fa:d5:
40:7c:b1:22:0a:f0:38:55:44:87:26:36:89:3c:0a:d5:09:c2:
d7:50:00:c2:b8:89:65:20:6e:fe:1a:e4:e9:ee:9c:4b:87:c2:
5a:66:e6:15:92:9b:87:ce:08:ed:23:0e:56:03:83:6a:f0:5f:
18:e1:53:50:f8:e6:e2:e3:b4:3f:81:5f:25:0e:98:d4:58:04:
f0:8b:de:a7:75:46:23:88:8f:50:59:98:5d:89:7a:f2:20:fe:
c2:b3:f8:97:e6:55:97:a8:82:0b:39:fb:91:f7:73:55:14:cb:
34:61:7c:2b:a3:07:b2:ec:28:1f:29:c3:d7:5e:be:cb:8d:60:
50:5f:78:8a:2c:a2:fc:65:28:09:77:0b:96:15:31:53:60:ff:
22:84:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:41 2025 by rpki-client