
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: AUTLNFr4jwep6z16NsPE3HdnAWcSLAw3vJOQpmbyQMw=
Subject key identifier: 53:35:B7:60:54:45:7A:03:1C:A5:14:63:91:26:48:56:15:FF:EC:FE
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0197470BDBC28D75397F22A34B16B79C5AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0E6C
Signing time: Fri 06 Jun 2025 21:00:48 +0000
Manifest this update: Fri 06 Jun 2025 21:00:48 +0000
Manifest next update: Sat 07 Jun 2025 21:00:48 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: 0X5x63IsqLcX/yGYbkoMUSX2OpCaAXu+HftIuUzlQpo=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:db:c2:8d:75:39:7f:22:a3:4b:16:b7:9c:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Jun 6 21:00:48 2025 GMT
Not After : Jun 7 21:00:48 2025 GMT
Subject: CN=5335b76054457a031ca514639126485615ffecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:25:2a:96:f8:8b:55:0d:b8:d2:3b:60:37:
f2:5c:c5:84:78:ac:2d:a1:fd:52:ae:c0:5a:0b:81:
af:18:63:a0:8e:92:a2:91:ab:49:c1:13:a4:1b:2e:
dd:18:23:35:4e:17:6e:e3:ed:ab:fe:6d:e2:4f:c6:
60:ec:37:4d:04:f9:dc:d9:10:ea:0e:15:b3:96:c2:
89:10:19:47:cb:09:80:7e:c1:8c:de:68:e8:bb:5f:
64:d0:1d:50:af:f4:d1:0c:44:cd:83:65:51:3f:d6:
4c:b0:0f:3d:df:8f:5d:6b:03:6a:95:ac:10:29:b9:
e9:53:c9:07:f1:ef:c5:21:54:d6:6f:a0:7c:5e:2f:
9f:12:ab:42:b2:78:bd:aa:cb:13:50:25:e0:eb:db:
eb:8a:f1:64:cb:cb:f1:8c:07:7c:36:85:bd:b2:38:
52:5b:0d:f6:4f:92:30:d8:2e:00:b4:44:ab:93:a6:
bb:75:d4:fe:dc:c5:c4:8a:b4:b9:88:ac:e5:29:ad:
21:34:78:b7:13:99:d2:6b:d6:8d:94:6c:c7:1b:8a:
3a:5f:98:53:b5:af:0d:41:3d:41:f7:f5:4f:58:06:
9d:dd:35:8a:d7:0a:8c:09:b7:94:7e:78:85:9d:13:
ba:e8:5c:fa:0c:a9:52:76:75:9c:12:f8:8d:b2:b5:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:B7:60:54:45:7A:03:1C:A5:14:63:91:26:48:56:15:FF:EC:FE
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:57:4d:3f:f5:55:2e:5b:4f:fe:6f:dc:76:6d:53:87:43:36:
74:58:81:1f:1f:9d:11:73:07:58:25:ad:24:79:89:1f:26:cc:
40:5a:0d:06:63:79:07:43:9b:59:21:06:fa:bd:e3:5d:b1:e8:
96:bc:5b:fb:3d:0a:50:98:36:2b:6a:b3:43:de:ac:67:c0:df:
8b:58:94:35:9a:81:ae:9f:5c:19:0b:6c:af:0c:a8:4a:6e:ab:
68:05:06:bc:2c:f0:1d:68:e7:45:e5:c2:df:50:a5:fe:9c:93:
7f:76:18:47:91:3b:39:a5:50:51:4d:b6:0a:7e:f2:5a:b6:3d:
7a:f4:19:95:4f:2c:03:1c:a5:71:8e:d5:de:4e:f7:24:41:d2:
73:e1:51:62:1d:b9:75:e0:8b:92:6f:52:61:49:9a:01:48:ca:
54:ee:77:c0:8d:5e:88:ee:87:cb:1e:25:98:fd:c6:6a:fd:81:
8b:e6:4b:0c:bc:66:f4:fd:29:fb:17:16:75:55:69:78:74:80:
2a:12:d2:35:09:62:61:07:f0:c7:50:c6:9b:81:6a:e9:fa:e5:
18:25:4d:5f:33:17:f0:c4:59:5a:1f:a4:ce:5d:e5:da:44:1f:
bf:9a:65:96:9a:c2:00:94:3c:78:79:a9:fc:1d:63:f9:6a:03:
c2:60:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:58 2025 by rpki-client