Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: gYkjv5RL0Z2fDx+tmE9EySdLFlBmhv5ndmSbfZ83nWE=
Subject key identifier: 62:3A:44:E8:FE:01:C2:E5:B3:D4:DD:50:16:08:23:DB:FA:F7:5C:22
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019944E13C29993DC5CE238B09DB39E48687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0F74
Signing time: Sat 13 Sep 2025 21:00:35 +0000
Manifest this update: Sat 13 Sep 2025 21:00:35 +0000
Manifest next update: Sun 14 Sep 2025 21:00:35 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: vSUHHOnIHb1SPmjRFbw7qclIMMZdqqgr6VPx1EPN0R4=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:44:e1:3c:29:99:3d:c5:ce:23:8b:09:db:39:e4:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Sep 13 21:00:35 2025 GMT
Not After : Sep 14 21:00:35 2025 GMT
Subject: CN=623a44e8fe01c2e5b3d4dd50160823dbfaf75c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:a4:23:43:49:c0:a9:ea:1c:a3:59:71:53:
98:6b:4c:cb:2f:38:cd:1a:de:e7:ac:d0:b6:52:f9:
6b:20:66:d5:2c:79:96:a7:9c:0f:74:a2:c8:be:91:
5f:61:9a:91:25:5c:92:61:97:bb:32:35:47:35:24:
90:9f:66:ec:b5:dc:bd:01:c6:8a:c9:d1:92:ed:4a:
26:95:47:6b:73:8b:99:da:f7:9a:b0:a8:98:61:4c:
f1:87:0a:cc:f8:84:ae:0e:28:9a:46:83:8a:3f:92:
6c:dc:d9:b0:c6:e5:5a:a8:cd:ad:d4:a8:e1:69:51:
86:9a:da:85:8d:5d:8e:c9:83:7a:b6:b1:c1:a0:9a:
fe:73:0e:ac:73:5a:e4:a2:5a:80:c2:03:c9:99:08:
dd:59:f7:db:02:5a:67:71:6c:a2:25:37:8a:f4:40:
bf:2a:38:f8:e5:de:ba:6a:3b:c2:29:c9:a8:83:d3:
d3:64:42:cf:65:c8:e6:30:70:91:3e:7b:5a:38:a4:
e3:ed:cc:3e:48:13:28:00:e3:e2:ef:34:0e:2d:5b:
1f:5e:37:bb:f8:f2:6b:97:6a:4e:d6:02:31:52:62:
6e:9f:e9:c9:da:bc:bb:b7:04:66:c4:0e:d1:a2:f5:
94:42:eb:60:bb:c7:c6:cb:6b:68:72:ba:26:f9:f2:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:44:E8:FE:01:C2:E5:B3:D4:DD:50:16:08:23:DB:FA:F7:5C:22
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:35:fd:c6:71:43:ad:a8:fe:4d:0b:0d:e1:48:d1:fa:8a:08:
99:1b:1f:50:08:de:d3:2a:be:64:04:ea:39:e6:b2:e2:5a:f6:
cf:9e:4a:47:99:ef:c7:b9:17:ae:5e:b7:f4:a4:d5:16:61:7f:
31:2b:e6:62:7c:16:74:c7:f1:29:e7:f0:d5:98:a8:7e:a2:55:
2a:04:7b:07:04:72:9b:62:59:08:38:aa:99:5b:52:c1:03:1d:
55:87:a5:94:39:1d:67:c2:ae:9d:b5:86:f8:85:7d:5a:d8:c9:
e8:62:b2:63:dc:bb:c3:82:25:4a:cd:02:55:c7:49:07:54:52:
a1:dc:90:11:6e:83:8b:30:54:94:06:2c:e3:1c:c7:ac:8f:e2:
1d:2a:66:cc:aa:68:5e:95:2a:05:49:85:e4:87:08:dc:a3:2c:
37:75:ce:6b:a6:72:22:07:08:a1:42:cd:15:24:d2:76:2c:54:
38:0d:e3:b4:05:89:53:af:6f:81:96:71:3b:41:eb:90:8f:88:
41:9c:26:8c:bb:eb:82:c6:7b:1c:38:28:ad:e4:19:fb:07:05:
21:35:08:b2:06:ad:11:cb:b7:bb:3c:64:ed:e2:63:da:7c:a6:
e4:a6:a0:f1:12:65:04:20:0a:dd:7b:7e:e3:b1:f8:80:c0:b6:
b8:d4:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 00:56:07 2025 by rpki-client