Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: 822Td+dEebAl15WmKhdGJnYXZ7yJ/9Ghb8+DkbhDNKU=
Subject key identifier: 29:D5:C7:8C:6E:14:6C:50:A0:EB:18:44:90:13:5A:87:38:77:BE:F7
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 0199239FDE81A2FAC6FC50A577DBF323F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 10:01:43 +0000
Manifest this update: Sun 07 Sep 2025 10:01:43 +0000
Manifest next update: Mon 08 Sep 2025 10:01:43 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: Vdj61QZ+m6W+D0THkzqzj3CKGRocsOLav/7sztvX570=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:de:81:a2:fa:c6:fc:50:a5:77:db:f3:23:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Sep 7 10:01:43 2025 GMT
Not After : Sep 8 10:01:43 2025 GMT
Subject: CN=29d5c78c6e146c50a0eb184490135a873877bef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:72:8a:c6:fe:4a:24:53:56:1e:9f:33:f9:
36:09:9a:2d:26:11:c4:fa:f8:a0:67:1f:d2:72:0e:
0a:7e:52:27:f4:47:4b:5e:e9:93:27:b0:19:3e:c0:
25:05:7c:67:21:94:a2:10:a8:a2:c7:f8:c8:76:6d:
ab:c3:65:68:75:a5:e0:2a:eb:9c:41:37:1f:be:b8:
33:3d:92:88:c1:1e:92:bc:b4:25:38:4e:c9:30:9c:
eb:3b:fb:4b:67:dd:95:72:2b:96:f8:1c:5a:e9:e6:
53:e8:b4:cd:69:27:a1:56:4b:71:01:18:1e:1d:f2:
a9:f6:c4:4a:77:5a:02:d5:81:d8:fc:71:55:d1:79:
b9:c2:0a:91:42:90:0d:3c:93:f7:95:91:29:99:6d:
2c:dc:1f:f8:b8:35:80:45:dd:09:84:64:5f:78:2b:
dd:38:82:ba:a0:32:ae:91:7c:cf:7c:65:24:a4:f8:
2a:7f:4f:72:ce:ac:0a:b9:31:a0:94:ef:b2:00:77:
87:d5:0f:b7:ad:0d:b6:9c:45:18:d9:50:25:3f:51:
8e:88:5e:23:29:c2:eb:df:df:2c:ce:d5:0a:25:f1:
09:4a:6f:32:80:98:9e:f4:f8:bf:86:99:55:5c:30:
5c:4b:1a:32:46:e0:da:4d:ea:38:41:3a:6a:85:53:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D5:C7:8C:6E:14:6C:50:A0:EB:18:44:90:13:5A:87:38:77:BE:F7
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:95:f0:eb:56:e7:1c:a8:eb:e8:dd:99:62:0c:d5:41:bc:
5c:3a:02:74:81:4f:48:f1:7b:5f:64:cd:a6:c5:65:f1:13:19:
51:83:b5:d9:c1:0f:e5:19:e8:e3:2a:0e:ea:7b:2c:7c:83:60:
e2:f7:1f:f6:a5:f3:98:5f:d6:e8:9f:1f:d8:a9:fa:d4:9a:af:
b5:9e:12:d7:0d:2b:ab:4e:20:a2:7c:19:60:23:09:b7:49:27:
68:3d:21:b0:ab:cc:8a:ef:4f:4c:8e:df:97:95:c3:82:9b:d8:
c7:ca:de:cb:f6:33:5e:57:be:5e:f9:8b:b8:6a:a7:e2:ff:5d:
9b:71:52:ce:8d:04:29:29:22:6d:04:d6:0b:c2:4c:1f:98:c5:
8a:2c:cc:e6:74:a8:93:95:74:1f:63:85:0f:b0:66:ed:5b:53:
c5:e2:78:c8:d5:99:9a:b1:06:1f:74:a3:6c:19:bd:12:5a:46:
7f:98:c7:60:6f:f7:5d:96:e0:e0:d0:32:45:a2:47:db:d3:da:
b6:86:d8:bf:34:d3:f4:d4:b1:13:c2:f2:24:99:f8:47:8c:db:
91:c4:66:ca:e1:34:b3:54:74:b9:a9:08:bd:04:2d:0e:73:3d:
74:fd:d2:e9:af:55:42:f9:8c:67:2a:3c:db:bd:80:c6:70:68:
df:ac:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:37 2025 by rpki-client