Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: SRn7y+1ynnyiNW35VmRbDsg0KtqTPymvVVkwiZ/82+c=
Subject key identifier: C8:A3:2B:BB:03:85:DC:AE:F5:2C:92:F8:CB:39:10:F0:12:00:BB:1A
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019A71B9280919E96116ECF07D4EE2CF135A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 1356
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: VNE5tTD1+yT2Rm86DLzuXsxCwV/J2OR5f49CAREgZ7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:28:09:19:e9:61:16:ec:f0:7d:4e:e2:cf:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=c8a32bbb0385dcaef52c92f8cb3910f01200bb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:84:25:f3:d5:59:71:56:a2:56:d6:76:a8:
91:43:38:51:fc:87:59:e5:46:01:a6:34:4e:c7:21:
24:ab:58:58:18:b0:9d:9b:50:bd:6b:cd:dc:f5:f4:
8e:e8:4c:fb:39:06:8e:ad:3e:6b:c5:6b:fb:5e:9d:
16:8f:c2:5b:80:98:3f:93:6b:06:e6:d1:56:5f:f8:
cf:cf:a9:2b:79:58:11:eb:31:7f:b8:23:37:2e:e8:
54:2c:18:19:59:16:9e:97:08:37:d9:9a:36:e3:d8:
69:27:6f:3d:e1:10:19:85:ad:da:5e:67:7a:e0:a1:
b1:1e:1f:a0:82:59:b6:65:7b:0b:9e:19:95:e3:da:
a0:df:f7:e8:c6:82:76:27:0d:36:64:1e:a9:17:02:
3c:09:39:5e:dc:52:ef:90:63:7a:a7:fd:7c:2c:5d:
15:e8:9c:2a:1d:7d:d8:82:eb:27:d8:c3:aa:7a:e6:
52:2e:c2:c1:32:f5:1f:64:b9:ab:29:1b:d9:80:c4:
45:f5:55:8e:4b:35:7c:8e:95:b9:fd:29:2b:cd:c6:
f1:00:ef:dc:3a:e1:df:00:8e:9b:24:4f:a4:37:58:
05:52:1e:04:7a:6e:33:a1:f7:c7:92:b2:d0:42:78:
fe:ad:99:f4:18:55:00:fb:fa:5e:07:2c:01:e3:e7:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:2B:BB:03:85:DC:AE:F5:2C:92:F8:CB:39:10:F0:12:00:BB:1A
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c4:f9:28:15:09:1f:37:27:14:12:97:76:4d:c1:53:82:c8:
4e:98:09:a9:27:89:9d:93:1b:3c:dc:b4:06:1b:c0:e4:96:93:
af:52:f0:d2:23:65:52:42:d3:cf:d6:7b:dd:8a:05:b8:59:27:
89:e7:b0:17:8e:56:f2:d1:af:89:37:49:8b:4b:ea:2e:64:84:
4b:1f:1c:30:21:ec:9b:be:6f:eb:33:f7:a2:07:f5:82:cb:56:
a2:e0:f9:43:24:a0:aa:32:ea:79:f0:db:b6:4a:b6:68:6e:4f:
ba:15:ec:72:1c:cd:4e:db:2e:69:2d:6c:f1:95:74:35:1b:8e:
8d:65:42:5e:d7:ed:9c:b6:90:c1:70:2f:ea:07:bd:18:95:88:
aa:ac:ac:58:5e:44:07:af:ec:ce:35:74:0c:e9:e0:35:bd:7b:
92:f8:e1:d1:7e:97:fb:a1:30:43:a6:97:fa:e0:57:23:8d:23:
5b:60:56:b8:b4:a2:65:42:98:cd:34:04:a2:31:8a:73:5a:55:
5a:fb:82:ca:93:a2:72:35:98:7b:ac:45:6d:e4:23:bb:ea:30:
73:9e:ff:22:5b:21:9c:78:c6:71:eb:44:10:b7:f7:a7:76:c7:
6b:2f:6d:1f:4d:7c:ba:77:1f:47:bd:01:c2:79:93:78:83:3d:
c2:a1:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:39 2025 by rpki-client