Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: nyAU09vCv2IcHt71tJMAG9FbWSvErN1/IinyPnJDzR0=
Subject key identifier: 0C:4F:81:7B:BF:3E:7C:9B:87:5A:41:75:8C:3C:C4:CA:9B:2C:35:27
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019938DFECA373739A6F07D2BBF5036CB8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 13:03:43 +0000
Manifest this update: Thu 11 Sep 2025 13:03:43 +0000
Manifest next update: Fri 12 Sep 2025 13:03:43 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: gqtAV+vb2lGz8GORCb/7RGcNwO2LDbXw1NNyFbKBbVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:ec:a3:73:73:9a:6f:07:d2:bb:f5:03:6c:b8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Sep 11 13:03:43 2025 GMT
Not After : Sep 12 13:03:43 2025 GMT
Subject: CN=0c4f817bbf3e7c9b875a41758c3cc4ca9b2c3527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:06:12:94:7f:d3:f8:6e:9d:7d:3a:ac:a9:
5e:3a:a9:c8:7e:74:59:39:19:c8:1f:87:26:a8:89:
2c:05:b2:fa:1b:42:35:b6:02:6e:90:ff:f1:de:1a:
db:e2:8f:d2:db:f7:65:71:30:25:f3:59:c8:f8:45:
04:17:85:ec:a0:ba:62:1a:30:f0:2e:63:b5:40:f7:
51:f0:7f:01:27:f4:f7:63:cf:46:04:f5:42:fa:60:
ef:7d:a1:d0:2b:b6:b4:4f:ae:23:f2:31:84:e3:b0:
c6:a8:89:f2:a0:1d:07:fc:3b:91:7f:8e:3e:86:d5:
df:62:50:56:61:36:12:dd:07:51:3b:a1:bc:98:c2:
b4:18:b0:13:3b:c8:d5:d7:44:53:06:b8:a8:03:67:
3e:55:a1:68:e6:8a:c3:a9:62:af:33:c8:20:18:1f:
0f:c5:72:46:a5:c8:59:c9:53:20:41:63:09:3d:ad:
64:e3:e5:21:60:57:8b:cb:3b:08:b8:e4:30:6b:2c:
23:bd:ff:c1:3a:94:e3:be:d1:37:1c:0d:18:29:f4:
33:74:df:96:48:60:04:ee:02:56:bb:51:f8:e8:f7:
cc:e1:3e:8d:3d:42:36:ac:ea:c1:f0:d5:a2:18:bd:
63:69:72:47:25:b1:d1:30:6d:7f:b2:9b:eb:d3:e2:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:81:7B:BF:3E:7C:9B:87:5A:41:75:8C:3C:C4:CA:9B:2C:35:27
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:ae:7b:34:79:ad:6d:3c:f7:9c:4c:3b:ed:f8:5c:6b:c2:
a9:73:b7:e5:d2:a5:e4:bc:20:63:3d:88:44:53:d5:53:41:a6:
86:e5:85:2d:4f:a5:76:d9:b1:52:9c:4c:7b:6b:e2:58:af:74:
b4:21:6c:71:75:d6:40:64:57:c9:96:1a:de:4d:93:44:e6:19:
ba:58:83:cf:c1:c9:e0:55:36:d1:7d:7d:bd:67:c7:41:f1:2b:
9f:a9:e7:9d:e6:58:f3:16:8a:4a:4a:c4:13:3e:43:5f:e1:f2:
ca:27:0f:ce:3b:10:2c:d6:2a:b3:b4:4b:9c:da:76:62:33:fe:
99:86:02:75:6a:f5:e3:d8:69:d2:bf:b0:3b:c9:1a:4c:40:2f:
a5:7b:c3:f9:89:0f:cb:1b:52:4a:00:c4:6b:9a:f0:1f:b7:49:
84:8a:23:fe:28:fc:a3:da:af:b5:ac:62:db:ba:d0:ba:7e:bf:
b6:81:c9:dd:25:a3:2b:38:6d:81:a7:7a:84:3e:f1:71:95:53:
af:99:aa:7d:47:c7:25:6e:d2:92:c6:26:f1:d5:4b:3d:7b:5c:
44:4e:4b:da:59:a6:5a:8f:a6:14:1b:d2:03:f9:29:2d:1b:a5:
83:75:8e:cc:fe:5c:fe:aa:dd:a4:f7:b6:72:62:ca:66:c9:a8:
f8:1a:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:07:31 2025 by rpki-client