Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: ORRE6LRr30eZcfD573r8fWXlp94AvMQeXMTirVUfQQk=
Subject key identifier: AA:BD:4A:F5:3E:D9:87:3B:9E:70:82:E3:21:A4:FC:95:06:F0:D6:B3
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01974E20815B0BF36F1A3B1385EB4B08EBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 06:00:42 +0000
Manifest this update: Sun 08 Jun 2025 06:00:42 +0000
Manifest next update: Mon 09 Jun 2025 06:00:42 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: qhSNVE94Xt7i23E3rhRngPhSN6pSlisPx6gjTeI6Ne0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:81:5b:0b:f3:6f:1a:3b:13:85:eb:4b:08:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jun 8 06:00:42 2025 GMT
Not After : Jun 9 06:00:42 2025 GMT
Subject: CN=aabd4af53ed9873b9e7082e321a4fc9506f0d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:04:5e:b0:47:85:5d:20:ce:c8:da:d8:2b:
ba:da:80:96:67:6e:52:f1:8c:71:cb:03:1a:a8:f1:
b8:8d:fc:f3:14:e4:a9:c6:44:fc:a3:93:70:d3:97:
c4:cb:91:d5:34:40:01:bb:53:4c:16:a4:fe:90:d4:
0b:fb:4b:43:1b:2f:66:b6:78:14:03:e7:16:18:9f:
8b:56:06:4d:84:24:b8:c3:03:67:3c:63:a2:bf:61:
56:b1:f2:c6:2d:c5:fd:0b:dc:8d:a5:42:3d:6d:41:
3f:dc:dd:52:d2:2f:72:03:e3:b2:e3:68:ec:54:fd:
f3:25:4e:53:cb:fd:5c:0e:fd:3a:cd:1e:f8:81:e6:
b8:85:97:46:26:72:b8:a5:3d:a5:ac:93:eb:73:9c:
ab:3a:6c:59:94:b2:55:34:61:3b:67:ef:91:95:a0:
b9:9a:88:9c:00:7f:d9:e1:a5:c6:29:bf:fd:f1:39:
d6:0f:17:90:a2:48:03:7c:01:1c:11:5f:bc:e7:fc:
a2:c9:59:f7:21:ba:bc:f1:24:1c:08:0b:02:b9:76:
f2:49:6c:ad:26:e2:df:65:66:17:2a:87:82:49:e2:
cf:01:e6:67:51:7c:d5:75:c9:ae:90:b6:96:e2:03:
56:c9:72:7a:cb:24:6d:26:81:9e:57:63:91:61:56:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:4A:F5:3E:D9:87:3B:9E:70:82:E3:21:A4:FC:95:06:F0:D6:B3
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1c:3f:7a:68:91:a7:f6:69:78:97:31:c2:1a:a2:1a:a0:c5:
79:62:40:ec:7b:65:31:d5:8c:4d:95:df:1e:8c:b4:cb:5d:5e:
f0:8f:74:82:25:6b:1d:b9:57:cf:c3:d4:9d:b9:80:95:17:ad:
35:63:fb:b8:e0:2d:c7:a9:3e:33:58:7d:bd:bc:71:30:61:4b:
96:0b:9c:cd:ca:b9:ec:e3:fd:50:d6:59:21:49:1d:28:fd:2d:
55:f3:98:79:63:94:30:b5:db:66:20:7f:90:c1:53:2f:18:21:
fd:69:5a:30:8a:27:f8:16:8b:29:64:8b:e0:60:ca:1a:c3:d3:
27:8c:f9:9c:c7:42:2b:bf:2b:81:31:86:86:37:ad:fd:fc:5b:
4a:80:67:ed:3b:6a:c8:84:e1:c5:2e:2a:90:2a:d9:95:5d:aa:
b2:7d:09:ce:16:c2:ac:b3:b5:b9:a5:b4:f3:51:43:38:a1:c2:
9c:b4:60:a1:c7:fb:5c:f0:62:c8:e7:09:6d:57:4d:81:0d:c1:
1d:6c:65:df:ba:d8:d3:ae:15:56:50:71:f8:ba:65:4b:77:66:
bf:26:e1:1d:09:8f:cd:35:45:b8:dd:40:88:2e:90:8b:a1:86:
68:47:1c:aa:4c:34:16:f0:49:3b:79:37:9a:4b:62:c5:6a:02:
56:17:7d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIIFbC/NvGjsThetLCOvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjQ0OWMxOThjYjk2NjM3YmFjMWE1YjZkNTFjYjMxZjI1
OGJiMmMwHhcNMjUwNjA4MDYwMDQyWhcNMjUwNjA5MDYwMDQyWjAzMTEwLwYDVQQD
EyhhYWJkNGFmNTNlZDk4NzNiOWU3MDgyZTMyMWE0ZmM5NTA2ZjBkNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqkEXrBHhV0gzsja2Cu62oCWZ25S
8YxxywMaqPG4jfzzFOSpxkT8o5Nw05fEy5HVNEABu1NMFqT+kNQL+0tDGy9mtngU
A+cWGJ+LVgZNhCS4wwNnPGOiv2FWsfLGLcX9C9yNpUI9bUE/3N1S0i9yA+Oy42js
VP3zJU5Ty/1cDv06zR74gea4hZdGJnK4pT2lrJPrc5yrOmxZlLJVNGE7Z++RlaC5
moicAH/Z4aXGKb/98TnWDxeQokgDfAEcEV+85/yiyVn3Ibq88SQcCAsCuXbySWyt
JuLfZWYXKoeCSeLPAeZnUXzVdcmukLaW4gNWyXJ6yyRtJoGeV2ORYVabNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq9SvU+2Yc7nnCC4yGk/JUG8NazMB8GA1UdIwQY
MBaAFGq0ScGYy5Zje6waW21RyzHyWLssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2Mt
ZDY3ZGEzYzY5NjliLzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2MtZDY3ZGEzYzY5Njli
LzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhw/emiR
p/ZpeJcxwhqiGqDFeWJA7HtlMdWMTZXfHoy0y11e8I90giVrHblXz8PUnbmAlRet
NWP7uOAtx6k+M1h9vbxxMGFLlguczcq57OP9UNZZIUkdKP0tVfOYeWOUMLXbZiB/
kMFTLxgh/WlaMIon+BaLKWSL4GDKGsPTJ4z5nMdCK78rgTGGhjet/fxbSoBn7Ttq
yIThxS4qkCrZlV2qsn0JzhbCrLO1uaW081FDOKHCnLRgocf7XPBiyOcJbVdNgQ3B
HWxl37rY064VVlBx+LplS3dmvybhHQmPzTVFuN1AiC6Qi6GGaEccqkw0FvBJO3k3
mktixWoCVhd9+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:06:45 2025 by rpki-client