Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier: U1Ho4h0sBOzl7naRcqApMBroK4tClfOTeapanHA56/c=
Subject key identifier: 48:5B:36:7B:4A:E4:8B:93:C6:B7:1A:44:CE:DF:53:7B:96:04:CA:B4
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer: /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial: 0197499F1050280340B8B7234C3E9310B5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number: 6C
Signing time: Sat 07 Jun 2025 09:00:50 +0000
Manifest this update: Sat 07 Jun 2025 09:00:50 +0000
Manifest next update: Sun 08 Jun 2025 09:00:50 +0000
Files and hashes: 1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: JMWoKc2ImIQO4uvsnGQRFbNBa3JOmDKImxODUHD375w=)
2: cSU3uumNlLN8Of6e212G9P0zAJw.roa (hash: kzDk6Ttjden5ir/EuoOlXFG1vxnRI9Xpd+xXHRFPFcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:10:50:28:03:40:b8:b7:23:4c:3e:93:10:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
Validity
Not Before: Jun 7 09:00:50 2025 GMT
Not After : Jun 8 09:00:50 2025 GMT
Subject: CN=485b367b4ae48b93c6b71a44cedf537b9604cab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:ac:7d:3c:ac:e1:f1:37:eb:93:63:25:6d:
e0:8b:f3:f7:fc:38:09:58:ab:0c:5b:3c:7d:0d:15:
0c:73:c5:89:f7:4d:a1:f4:96:df:a7:2d:b9:a5:36:
5c:79:79:a9:72:ff:26:01:14:f0:bc:f0:2f:75:15:
1e:9f:f8:f7:11:ea:8d:aa:bf:63:e4:d6:b0:01:46:
77:66:e7:95:a2:c6:88:e0:b2:0e:93:2b:2f:3a:dc:
24:40:c2:bf:a3:22:81:20:4e:ae:de:08:a6:7d:13:
1d:38:02:86:0e:ed:e7:c8:2d:ff:d0:c3:39:ea:05:
4b:e4:c1:57:c3:79:a8:e1:8b:b8:d7:eb:68:98:3e:
89:2e:0c:27:2a:3f:72:25:d7:e1:b7:00:93:a0:89:
f9:d6:7f:d0:2e:99:41:fd:e3:b8:a0:b7:2a:55:03:
08:3f:87:39:ca:5c:f2:7a:a7:7b:59:c6:31:31:f2:
30:ae:7f:a7:a5:cc:09:a9:e8:9d:9d:6f:96:74:58:
78:8e:dc:39:0b:62:ae:6b:7a:fa:7c:fe:ce:19:93:
08:a2:64:2f:2c:c1:7d:55:d3:64:dd:b0:7a:59:57:
7d:d7:bf:47:d2:d4:35:c9:0a:d5:86:08:d2:17:27:
f3:64:a8:c9:02:42:8c:6c:2f:3d:73:3a:ea:b6:29:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:36:7B:4A:E4:8B:93:C6:B7:1A:44:CE:DF:53:7B:96:04:CA:B4
X509v3 Authority Key Identifier:
keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a2:39:d4:cb:f5:d2:cd:3c:89:8d:b6:ce:d3:ef:83:5f:f1:
5d:bf:c0:4a:ea:0d:98:9f:ab:25:fe:59:a5:88:78:09:b1:b5:
5d:64:04:0c:8e:29:34:4d:0b:1e:82:be:55:28:3a:bf:96:93:
a7:ce:65:1f:b9:a8:c7:62:d9:ab:ef:3c:36:40:e2:1f:c2:81:
60:3c:e8:ec:89:bc:bf:1d:ea:47:55:ec:d8:fe:39:a4:66:72:
2b:f2:58:85:d5:d1:d8:15:94:d5:af:01:e2:fa:a3:72:c5:c1:
92:1c:4c:c1:11:e2:ad:c6:4d:40:c0:a5:de:5a:c0:85:fb:13:
31:9f:27:60:20:6f:e4:41:dd:7b:c9:b2:66:a3:62:15:5c:f1:
bf:95:b4:0e:60:c6:da:d1:9f:92:f3:c3:e2:04:69:a4:68:3e:
96:7c:d6:c8:f0:1d:fa:5c:75:45:f2:35:05:4b:45:df:be:b4:
e2:08:5e:88:78:af:d2:94:45:87:7a:0c:28:fe:c8:62:a5:e6:
40:b2:49:66:ec:4c:61:1d:5a:0f:31:a6:ba:5d:9e:0e:e2:b2:
5d:d8:d3:7a:b2:7f:e1:17:24:0c:0b:4c:74:56:48:6f:66:6e:
5a:e4:bf:f2:e0:60:42:e3:fa:a4:37:6f:3b:c1:e0:05:94:16:
4c:9e:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:31:03 2025 by rpki-client