Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: XPLotFuvnhP2u/RPLu0r2kfWoJie89pDkbwu1HUc8pY=
Subject key identifier: C5:0D:97:46:84:0A:F6:D0:1F:E9:83:4D:50:A7:AB:10:E1:E8:BD:39
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019A247943167C6ECAA23FD42CE319C50931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 07:01:57 +0000
Manifest this update: Mon 27 Oct 2025 07:01:57 +0000
Manifest next update: Tue 28 Oct 2025 07:01:57 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: vnp4cousGftRfG76+I9ZwnOBeXtP0nkID8J4//jw7Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:43:16:7c:6e:ca:a2:3f:d4:2c:e3:19:c5:09:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Oct 27 07:01:57 2025 GMT
Not After : Oct 28 07:01:57 2025 GMT
Subject: CN=c50d9746840af6d01fe9834d50a7ab10e1e8bd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:64:cd:c5:89:8a:48:c9:29:cb:f1:a5:7d:
4e:fa:38:ff:27:01:73:64:a6:56:4c:30:82:2f:ad:
09:57:9a:6a:de:d7:9c:e1:2d:e8:8c:dd:82:b4:dc:
18:47:a8:cd:3e:16:24:bc:43:56:00:fd:af:ac:25:
a6:c1:b3:df:7b:bc:21:be:2c:d3:6c:3b:9e:53:58:
6c:65:ac:7d:17:3f:48:b3:a7:49:eb:62:ec:21:58:
f8:f9:6d:29:0c:d6:90:b8:4a:c7:10:8d:7d:ad:cb:
d3:70:4b:54:fe:6f:e6:3d:8f:70:6d:bc:46:84:3c:
67:2a:8a:0a:dd:8f:32:c0:bf:d3:d9:16:4f:08:e8:
fc:e7:0a:67:3d:6d:c0:9e:2e:c2:22:c9:dc:0d:6c:
fe:98:f0:81:ce:5c:b2:ca:e5:24:b6:9c:4e:05:e4:
45:3d:b4:8f:6a:04:6e:7f:a6:c5:3a:e2:de:a3:dc:
bc:ee:1f:99:44:e7:03:df:70:47:ef:f4:e8:f1:e1:
0c:52:c2:b2:4e:d0:a5:22:cd:dd:96:6e:51:b5:dc:
46:b9:dc:db:a1:dc:40:78:70:91:50:8e:0c:54:f6:
76:00:7d:ee:5e:92:1b:f7:5f:8c:a2:8a:8c:4b:22:
0d:23:7d:38:f8:02:dd:f6:d7:14:08:45:fa:b2:40:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:97:46:84:0A:F6:D0:1F:E9:83:4D:50:A7:AB:10:E1:E8:BD:39
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:5b:21:e7:f7:7a:75:60:99:06:7b:5e:a7:5e:b2:ff:c0:
bd:43:a3:29:1c:23:ad:f7:4f:70:07:f0:2e:30:b6:84:b2:08:
06:91:1e:c1:0f:d3:e5:4c:18:17:64:5f:38:f8:b3:55:1a:e1:
97:ed:ff:6e:ab:f6:0e:bb:ca:cc:60:d0:b9:83:d7:44:50:af:
6a:a1:e7:14:30:db:e2:4b:05:35:60:08:e1:1e:33:0a:35:de:
d0:d1:8a:ab:b4:bb:dd:48:f8:3d:77:6d:f0:4a:3b:27:b8:eb:
6a:48:d3:91:05:bc:2f:0b:6d:a4:44:30:45:33:3c:c9:b9:e0:
3f:65:aa:23:6c:d7:c1:87:4f:81:68:96:9c:27:af:9e:ca:30:
6b:52:f8:61:85:97:de:66:00:e7:2c:52:82:4a:1d:71:d1:74:
b6:84:2a:56:88:a6:84:c7:3e:aa:28:a6:e1:7f:06:99:3c:3d:
b8:8e:42:4d:58:cd:ec:d1:bf:d8:b2:1f:c9:2f:63:fb:f8:47:
8a:e5:d5:90:0d:8b:58:cd:6f:75:ea:f0:1b:c3:2e:80:91:4b:
70:01:d5:fb:de:b2:f7:78:14:ef:3f:e6:8e:d2:a0:8f:e2:ae:
b2:bb:71:32:ae:db:35:11:cd:62:da:2b:be:c3:20:14:36:6c:
17:bc:a7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:38:58 2025 by rpki-client