Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: 9/n2EDa7Xy+aoXVhBGwTtflNL1CvKC4Iup81yCQCPCs=
Subject key identifier: 2C:3D:42:80:29:BB:44:8F:FA:2E:66:6C:EC:91:EF:31:E4:11:6E:FC
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019A72263AE4D18F8078786435A9254D4004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 1010
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: jAhoPKiPO7HQSho7TTUIeQ0XWf8nYhjNrAYNTHdKlRI=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3a:e4:d1:8f:80:78:78:64:35:a9:25:4d:40:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=2c3d428029bb448ffa2e666cec91ef31e4116efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:3e:f1:ec:f7:63:26:af:16:00:31:2a:ef:
22:1f:0a:32:a9:10:38:ba:57:c8:00:2f:9c:d8:84:
19:3c:77:e7:a0:83:06:28:52:45:c3:d9:81:e5:75:
94:1d:9f:a8:53:6f:f5:c0:48:46:c7:f3:24:13:93:
a4:3c:d0:ef:4b:ca:2f:bc:06:3d:4e:5a:9b:68:19:
7e:83:62:80:8c:54:99:1a:cc:1e:3b:5a:26:e8:c9:
2e:8d:92:2b:10:af:dd:4e:4f:7b:4e:74:53:ab:5d:
ba:3f:45:8f:c2:76:36:18:52:0a:48:ba:20:6f:d0:
f7:fc:21:35:8f:32:8b:1a:d6:55:5f:b8:7e:d7:e6:
1e:c5:c0:1e:26:53:ea:ff:b3:0e:bb:0e:22:5c:74:
cc:ca:17:c6:49:46:e2:8f:c1:02:fe:dd:01:a0:68:
f3:01:39:1e:d8:78:ce:21:73:76:93:4b:d7:16:e2:
7a:19:9e:88:57:48:11:23:23:09:63:45:e6:18:fc:
18:cd:46:25:42:fb:e2:03:fb:eb:95:e3:e4:52:a5:
8b:a6:5e:5d:c9:50:dd:43:6e:8f:02:35:ac:53:14:
19:c6:59:1a:65:ea:bd:a3:6f:30:72:4d:05:51:f0:
2e:39:a0:61:14:71:bc:2b:18:5e:a7:c0:d1:fe:18:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:42:80:29:BB:44:8F:FA:2E:66:6C:EC:91:EF:31:E4:11:6E:FC
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d3:08:73:64:5f:da:48:92:5f:c1:16:15:a7:6b:c5:c6:fa:
72:66:2d:5d:ba:84:90:c8:8c:52:e4:64:12:62:e7:37:c8:20:
f0:8b:9a:1c:c6:42:c0:a3:e6:a8:a3:ce:29:c8:23:b6:fd:9b:
da:e9:da:86:db:cd:55:69:a1:4f:c8:02:f1:a1:00:ed:a5:11:
0a:4f:13:7b:03:86:ac:30:47:47:f4:e7:df:29:b4:a8:1b:63:
c6:8a:30:00:60:df:c7:8f:ff:00:75:47:28:5b:df:0e:42:d1:
bb:1b:c7:21:16:90:94:81:5d:c9:af:88:30:9e:4c:d7:35:56:
9c:3a:80:39:b9:c6:4e:20:b5:16:95:23:06:1e:03:e4:52:15:
90:67:18:3a:57:f4:3e:44:ae:3c:1a:81:2d:79:c3:60:f8:93:
57:6c:aa:e5:78:5b:f3:58:bd:57:dd:53:01:ff:60:21:db:d4:
fc:d8:ee:db:4c:d1:be:50:f4:b0:51:10:b1:2c:10:69:95:1b:
3e:76:3d:e4:2b:22:59:a0:d1:1d:0b:76:d5:93:35:70:f6:c8:
c0:a5:71:bf:80:3a:f6:26:da:9d:aa:df:c0:7f:bc:c6:64:51:
18:b1:a3:46:25:f0:95:56:97:dc:51:18:eb:96:82:89:ef:f6:
04:01:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:21 2025 by rpki-client