Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: 4WX5UuNzETklk2A/L9KryRYYkmu6QDeINiuHT4L0FK0=
Subject key identifier: 6E:52:3D:3E:DC:F8:65:0C:D3:A0:B2:C5:BD:59:74:12:77:30:68:B1
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 01974E58528BA45E6A13A1C788CE6ACF4A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 07:01:40 +0000
Manifest this update: Sun 08 Jun 2025 07:01:40 +0000
Manifest next update: Mon 09 Jun 2025 07:01:40 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: cc0q74C8Ehvq7xw4xg7ubeHjD5JgGUVVduMXQLy3LAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:52:8b:a4:5e:6a:13:a1:c7:88:ce:6a:cf:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Jun 8 07:01:40 2025 GMT
Not After : Jun 9 07:01:40 2025 GMT
Subject: CN=6e523d3edcf8650cd3a0b2c5bd597412773068b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:3a:d3:a7:3e:7c:e0:a0:fd:9d:b0:e7:b9:
2d:d8:fd:73:e6:dd:89:c3:f8:7a:ab:aa:da:e7:a0:
c9:e2:8f:74:8c:c1:c0:06:83:6d:d7:28:80:3d:de:
0c:75:46:f5:a6:81:d8:4d:8e:5b:b6:c2:59:45:55:
9d:54:f8:61:c9:ba:ad:82:1a:45:e6:20:de:cd:ef:
06:1b:24:85:bb:f0:29:f7:80:b5:37:ea:03:c6:59:
0c:47:89:43:5a:f4:ea:50:f7:3e:3b:d6:a8:ef:dd:
64:cf:94:a0:47:0b:42:b1:94:a2:7b:5c:2a:9c:b8:
dc:a4:81:e9:e9:7c:ba:4c:cd:cb:ab:ef:2c:fc:ea:
04:88:37:b8:e3:a8:73:14:b0:f8:f7:3c:88:16:69:
a6:57:62:fd:f9:45:d4:32:02:0c:24:d3:5a:c8:39:
d5:24:59:b8:b3:83:3d:fe:7c:05:9f:52:98:6b:3e:
66:f7:9d:9a:69:7b:80:92:63:c3:9a:c8:ec:09:35:
14:b4:5b:d8:28:8a:f9:74:94:e5:2c:ee:e6:9f:b7:
86:74:6e:8a:79:88:77:73:7e:5c:85:c3:9c:f0:b4:
8a:ec:94:9b:16:ab:65:07:25:33:6b:15:3b:0e:db:
08:30:50:5a:67:27:e0:de:79:d3:cf:f2:d1:4e:7d:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:3D:3E:DC:F8:65:0C:D3:A0:B2:C5:BD:59:74:12:77:30:68:B1
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9d:ca:8e:49:77:e6:b7:19:1b:0a:96:6d:ab:bf:80:8c:eb:
51:4c:e9:9f:bb:63:32:82:97:4b:78:93:94:80:b8:a0:82:ce:
f1:81:f7:c1:61:8c:c7:13:82:41:fa:93:8a:84:2d:43:67:54:
a9:d3:ba:43:69:ce:92:61:6f:05:2b:a8:ab:5e:af:fa:30:ad:
f1:77:a2:f9:7e:3e:f8:88:d9:e4:fd:50:a5:e1:e8:5d:a9:75:
94:cd:c8:16:7a:01:26:69:8c:e8:4d:61:b5:88:98:ac:2a:86:
d5:00:5a:40:0b:f4:3d:dd:8f:99:22:32:7e:78:58:f1:c2:bb:
19:8b:63:1c:a4:0f:a4:dc:a9:eb:ee:13:d8:3a:72:5c:f8:d4:
f5:7f:7c:7a:ec:6e:ad:b0:46:00:01:8c:9b:00:97:f9:22:2b:
72:8a:65:f6:ad:cd:27:ac:27:ea:91:6b:8d:2c:6c:d8:aa:27:
17:07:ae:8d:7b:db:b0:c9:04:01:5b:2f:66:be:f7:56:0c:fb:
60:e0:87:01:88:e0:d4:ef:9c:fa:3e:bf:bb:69:4a:b5:94:b9:
c2:40:c8:06:cd:7d:1f:ea:45:f4:a5:b8:19:f5:2d:71:94:7e:
c6:03:1d:e4:88:6f:29:a6:e5:3d:8b:b0:5b:79:6f:f4:02:1a:
32:1f:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:35:46 2025 by rpki-client