Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: kp4kz0I49zNPNzZqsBNZ4MPrEUSGuSOr4kNCW3VFDpc=
Subject key identifier: 2A:5D:0D:D0:72:20:EB:D4:FF:60:30:19:16:F1:67:21:74:BA:43:91
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019921B264B2C4ABE33C20FCCCBC98BA9D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 12A8
Signing time: Sun 07 Sep 2025 01:02:43 +0000
Manifest this update: Sun 07 Sep 2025 01:02:43 +0000
Manifest next update: Mon 08 Sep 2025 01:02:43 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: BrzqTjqrVqyWx4M5U+h8ZeY33N6FP3H3Uqbj/ERHpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:64:b2:c4:ab:e3:3c:20:fc:cc:bc:98:ba:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Sep 7 01:02:43 2025 GMT
Not After : Sep 8 01:02:43 2025 GMT
Subject: CN=2a5d0dd07220ebd4ff60301916f1672174ba4391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:83:45:10:25:d0:a8:5c:fe:d3:61:b9:a8:65:
b0:8f:b3:8a:91:17:3c:7e:bf:54:c0:dd:22:2c:b7:
0c:06:40:c8:45:d7:a8:23:b2:42:e5:79:48:7b:04:
35:22:fd:2e:33:e0:e5:2b:f2:cd:2d:79:4e:ff:c6:
79:b1:73:90:b6:84:2c:cf:64:0c:0d:3e:2c:e0:05:
df:49:e5:79:aa:40:a2:1b:fe:9e:16:88:bd:a6:73:
da:5d:38:ad:54:c8:16:77:b7:48:f8:93:76:60:ea:
26:5b:45:64:df:21:c7:20:86:9f:ae:11:db:32:00:
68:1a:8e:0e:d7:0e:b8:9c:0d:e8:a0:00:f7:dd:0a:
79:2e:62:16:76:44:dc:02:3b:4d:c0:1f:db:59:da:
da:0d:db:46:62:d8:ab:a1:44:27:b1:61:ce:8d:a5:
f4:71:da:47:e3:16:cb:56:28:5d:b3:49:4d:82:5a:
b2:66:be:da:2b:50:1c:42:5f:24:91:2d:2e:14:ec:
d5:82:e1:a9:b3:02:15:f6:c0:93:76:d3:50:96:99:
4d:ca:68:cc:55:6d:13:4a:4b:de:1b:f0:0a:35:3a:
58:79:38:be:95:55:ae:24:62:fb:06:fc:0b:81:80:
35:de:54:be:7a:3c:69:3a:15:45:bb:7a:46:37:fb:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:0D:D0:72:20:EB:D4:FF:60:30:19:16:F1:67:21:74:BA:43:91
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:66:b9:aa:40:f0:9c:66:8e:b6:ac:1c:be:48:f6:1a:bf:
97:31:e2:2d:1a:6f:28:2c:da:67:59:0c:31:dc:9a:f6:f2:33:
8b:28:7b:0a:f2:07:a8:68:df:c0:49:3a:0f:3d:35:dd:22:44:
ab:ca:c5:d6:10:ce:62:0d:28:6c:53:23:81:a5:9b:5d:8c:9c:
13:da:6a:69:33:10:1a:d6:41:a1:4c:65:e2:46:b4:ce:34:df:
b0:c2:1e:de:ff:83:72:0f:65:3c:3b:5f:97:54:ec:e5:d7:02:
dd:af:b3:76:b4:bc:74:ab:26:6b:5c:37:1e:a4:37:b5:86:fd:
89:3b:9e:cb:6e:85:a9:f9:da:69:29:c9:09:37:a4:c7:78:3c:
60:3a:4f:33:fa:5d:3a:49:3f:49:db:30:68:5d:93:10:f7:8a:
46:3d:ee:49:85:46:57:7a:3c:59:5a:41:0c:af:8b:e6:6d:92:
1e:a2:a4:fe:76:7c:59:d2:78:76:cf:16:c8:b0:d9:7f:8d:c7:
9f:b7:7b:8a:28:32:1c:65:90:15:e5:d3:30:dd:f5:54:e8:6f:
be:db:cd:32:29:20:41:16:2b:00:f7:b3:ce:1e:fd:75:84:71:
73:3e:4e:cd:cf:53:d0:e0:e3:12:9e:54:9a:d6:45:65:7a:ff:
6b:7f:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:57 2025 by rpki-client