Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: HhZ/mqDFcFXFtJF0DEkts4BzEKLbKyq2lCetFuTdjhU=
Subject key identifier: 0C:5F:20:91:E7:E9:2C:0B:EA:2B:BB:AC:D4:8E:66:CC:E8:C4:F8:BC
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019A71B8B520EF01BF4996F5D559276FAAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: uSr5QQwb3PJK8UCkK4Z6NJlh6zGupRcuARxRV/kTnO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b5:20:ef:01:bf:49:96:f5:d5:59:27:6f:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=0c5f2091e7e92c0bea2bbbacd48e66cce8c4f8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:f5:7e:01:87:cb:d1:f6:17:42:3f:f8:7f:
99:ff:21:52:44:27:3c:a7:74:83:38:cd:45:46:55:
3a:bf:ff:4a:c9:36:2a:2b:54:8f:8a:fc:2b:ab:14:
5d:2f:77:89:a2:f5:27:0b:81:d5:f6:f9:77:09:93:
a3:d7:bf:e4:64:33:42:fe:61:27:27:f5:e5:7a:54:
7d:a1:b2:70:8f:41:a4:12:36:79:5e:ec:ff:cb:41:
80:c4:9e:3e:b5:73:b9:3d:b8:e7:e1:ed:f7:ec:3d:
c3:f3:6a:45:17:a1:67:08:e7:bf:f7:46:9c:ca:ab:
ca:d6:8c:8d:6f:25:c5:dc:c6:78:27:29:65:08:8c:
8e:90:47:57:06:9d:df:40:8c:be:c9:70:6c:01:8d:
04:c4:4e:82:19:48:6f:78:93:9d:8f:a5:10:64:50:
a5:90:e9:fd:61:85:79:ae:9d:6e:78:7c:1b:3a:d6:
86:9d:9d:0f:5f:89:c9:5f:b7:82:71:ab:2e:c6:ee:
6b:70:d1:72:d4:0c:8b:52:52:4a:79:ce:d3:11:fe:
27:49:f5:7d:17:1f:61:e3:47:ec:b4:69:2e:78:2f:
76:06:2f:10:d9:45:d8:b1:32:28:6a:2b:8c:80:b9:
44:cf:01:6f:14:40:2e:99:1b:e3:c3:24:a9:4a:94:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:20:91:E7:E9:2C:0B:EA:2B:BB:AC:D4:8E:66:CC:E8:C4:F8:BC
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4c:85:b6:e6:1d:98:08:87:c1:53:cb:a2:97:21:ef:ea:fd:
d7:45:a3:46:d9:e4:c6:b5:8c:3a:e1:f2:07:5f:ee:5a:73:51:
93:a5:4d:54:0a:1a:55:56:76:92:7b:a2:99:cc:cb:a3:26:f2:
bb:09:be:48:22:3f:5c:97:84:8b:61:b8:27:55:a2:d5:2a:b0:
61:72:ae:c7:6f:6c:16:a2:a3:ac:36:4c:7d:53:df:f0:0c:54:
1e:66:2c:8c:a5:56:a2:95:af:b0:01:68:df:bd:6d:11:93:6f:
46:95:4c:38:d9:27:c4:99:73:7a:c6:73:72:05:d3:f8:a9:16:
ba:6b:f7:62:29:90:ae:e5:65:42:e8:27:a2:13:8b:44:45:25:
e9:9f:a9:5a:a0:05:d6:0c:75:3c:32:c2:6b:68:75:4f:78:4b:
3f:c3:b5:14:59:77:5a:8f:62:61:9c:ba:59:9d:3d:c8:eb:77:
ed:89:cd:1c:84:0e:90:9b:9d:2f:78:fd:48:ca:35:5a:a7:11:
bf:93:da:88:4b:31:8a:fc:d7:f4:33:ab:dc:bd:1c:c1:a0:70:
ad:2c:3d:0b:0d:66:46:b3:f2:9f:fb:84:c6:d3:3b:18:4c:f6:
7b:f6:21:6f:d4:18:60:e9:58:d3:73:a4:90:c1:98:22:70:9a:
3b:4b:b4:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLUg7wG/SZb11Vknb6qgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3
MTczYTIwHhcNMjUxMTExMDcwMjAxWhcNMjUxMTEyMDcwMjAxWjAzMTEwLwYDVQQD
EygwYzVmMjA5MWU3ZTkyYzBiZWEyYmJiYWNkNDhlNjZjY2U4YzRmOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWv1fgGHy9H2F0I/+H+Z/yFSRCc8
p3SDOM1FRlU6v/9KyTYqK1SPivwrqxRdL3eJovUnC4HV9vl3CZOj17/kZDNC/mEn
J/XlelR9obJwj0GkEjZ5Xuz/y0GAxJ4+tXO5Pbjn4e337D3D82pFF6FnCOe/90ac
yqvK1oyNbyXF3MZ4JyllCIyOkEdXBp3fQIy+yXBsAY0ExE6CGUhveJOdj6UQZFCl
kOn9YYV5rp1ueHwbOtaGnZ0PX4nJX7eCcasuxu5rcNFy1AyLUlJKec7TEf4nSfV9
Fx9h40fstGkueC92Bi8Q2UXYsTIoaiuMgLlEzwFvFEAumRvjwySpSpS33QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxfIJHn6SwL6iu7rNSOZszoxPi8MB8GA1UdIwQY
MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt
M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw
LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0yFtuYd
mAiHwVPLopch7+r910WjRtnkxrWMOuHyB1/uWnNRk6VNVAoaVVZ2knuimczLoyby
uwm+SCI/XJeEi2G4J1Wi1SqwYXKux29sFqKjrDZMfVPf8AxUHmYsjKVWopWvsAFo
371tEZNvRpVMONknxJlzesZzcgXT+KkWumv3YimQruVlQugnohOLREUl6Z+pWqAF
1gx1PDLCa2h1T3hLP8O1FFl3Wo9iYZy6WZ09yOt37YnNHIQOkJudL3j9SMo1WqcR
v5PaiEsxivzX9DOr3L0cwaBwrSw9Cw1mRrPyn/uExtM7GEz2e/Yhb9QYYOlY03Ok
kMGYInCaO0u0qg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:55 2025 by rpki-client