Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier: 3GgQUylxoQFWRfmJlil0dpVunupxS1m/pyQ1bg2/RCA=
Subject key identifier: 5F:51:46:A6:94:EB:E2:CC:BD:4B:06:C5:96:99:FF:71:D0:0D:1F:67
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer: /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial: 019922C38CB2E6552F688A3B138F416FB777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number: 0161
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: 17DKvT5zqr1FEfBSY/MqeVNZVZtNfcAFGoO8EyJ6ZFA=)
2: cSU3uumNlLN8Of6e212G9P0zAJw.roa (hash: kzDk6Ttjden5ir/EuoOlXFG1vxnRI9Xpd+xXHRFPFcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8c:b2:e6:55:2f:68:8a:3b:13:8f:41:6f:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=5f5146a694ebe2ccbd4b06c59699ff71d00d1f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:da:34:47:1c:f6:32:7a:4d:e1:15:4d:bd:
80:39:81:2c:ab:f5:58:0b:08:4a:ec:0b:ae:19:7a:
1c:f5:45:6f:5d:ea:17:69:b1:3d:f8:55:fd:c9:98:
b9:b6:fe:91:9a:7a:fb:40:5e:7a:51:d8:6b:6c:94:
62:f5:5f:49:18:54:8c:d6:1d:b7:d4:59:07:7b:38:
c3:61:67:a2:1e:a0:af:06:7c:e3:ac:52:0e:47:65:
35:9f:0a:03:98:e6:66:ac:68:55:69:ff:86:92:c7:
12:47:b3:1d:7d:30:ba:f6:05:e5:04:5c:0f:6e:e4:
53:cc:3d:31:d1:0d:a6:b9:80:46:24:2d:9b:9d:eb:
6a:f6:f1:e1:30:0f:04:2f:8a:45:40:ad:a3:2e:32:
6b:ef:70:f8:44:7b:17:0d:06:ee:19:40:77:fa:99:
bc:64:23:85:34:fc:fc:60:da:7d:f3:7b:02:55:29:
f0:fa:7b:cc:4d:f4:32:b2:fe:87:31:f3:59:95:c1:
a5:30:b4:76:95:69:a6:02:a3:63:39:ba:f2:9a:b9:
43:2c:68:fb:63:f9:11:bf:94:91:ae:f8:f6:81:af:
36:4b:81:f2:7f:1e:01:29:20:b9:b4:de:a7:d6:d8:
88:3f:a4:81:5f:64:15:c5:ba:91:e4:fd:fd:1b:99:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:46:A6:94:EB:E2:CC:BD:4B:06:C5:96:99:FF:71:D0:0D:1F:67
X509v3 Authority Key Identifier:
keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a0:e6:c3:17:df:2a:d7:53:f6:1d:44:2f:92:89:5b:3b:45:
cb:b4:d7:ce:26:2a:e6:b0:ba:7f:71:c2:b9:5e:13:07:b7:35:
a2:14:19:87:e9:51:52:bb:05:c6:cf:bc:0d:e8:62:d1:ae:2f:
74:3d:ba:ae:a0:57:b4:8e:2a:e3:59:6f:f8:e2:0b:5c:9a:64:
68:7c:67:a5:14:71:82:1a:44:13:ab:ff:b8:fd:03:70:73:2c:
fc:34:12:69:3d:fb:c6:6b:ff:24:b8:06:2a:a3:4f:11:3c:8f:
cf:6c:c5:28:d0:09:3f:bc:49:01:dc:dd:80:fe:02:89:08:67:
01:4d:21:52:b1:3b:be:4a:cf:89:d2:16:a0:ca:ac:7e:f9:f1:
ae:3d:68:fc:6e:ae:18:86:12:d7:5b:91:b1:c5:a3:11:ed:5d:
f5:54:4e:a3:68:f6:8a:56:89:9e:e9:f3:23:d3:a8:d9:7d:52:
e6:ef:80:57:70:e7:e7:52:d6:5d:d5:7a:ef:2a:ac:9d:b5:13:
55:0d:e2:78:d6:fe:21:6e:33:32:15:e0:29:0e:05:17:41:65:
a8:1a:66:ae:74:89:ae:ca:5a:a2:34:8f:be:98:09:b5:e5:af:
29:8b:2a:d8:dc:f6:3a:b8:c6:00:97:4a:cb:dd:d3:71:7d:3c:
fd:47:78:1d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkiw4yy5lUvaIo7E49Bb7d3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGFlZjQ2NDA0MzdmMjMwN2Y3OTg3MWJmYjYzMmJiOGJk
ZGFkMjEwHhcNMjUwOTA3MDYwMTA0WhcNMjUwOTA4MDYwMTA0WjAzMTEwLwYDVQQD
Eyg1ZjUxNDZhNjk0ZWJlMmNjYmQ0YjA2YzU5Njk5ZmY3MWQwMGQxZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF3aNEcc9jJ6TeEVTb2AOYEsq/VY
CwhK7AuuGXoc9UVvXeoXabE9+FX9yZi5tv6Rmnr7QF56UdhrbJRi9V9JGFSM1h23
1FkHezjDYWeiHqCvBnzjrFIOR2U1nwoDmOZmrGhVaf+GkscSR7MdfTC69gXlBFwP
buRTzD0x0Q2muYBGJC2bnetq9vHhMA8EL4pFQK2jLjJr73D4RHsXDQbuGUB3+pm8
ZCOFNPz8YNp983sCVSnw+nvMTfQysv6HMfNZlcGlMLR2lWmmAqNjObrymrlDLGj7
Y/kRv5SRrvj2ga82S4Hyfx4BKSC5tN6n1tiIP6SBX2QVxbqR5P39G5ndoQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF9RRqaU6+LMvUsGxZaZ/3HQDR9nMB8GA1UdIwQY
MBaAFPgK70ZAQ38jB/eYcb+2MruL3a0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BcnZSa0JEZnlNSDk1aHh2N1l5dTR2ZHJTRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZTAzYjNjLTYwMjYtNDFlNy1hNTUz
LWFiMTQ4MjJmODViNS8xLzEtQXJ2UmtCRGZ5TUg5NWh4djdZeXU0dmRyU0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzL2UwM2IzYy02MDI2LTQxZTctYTU1My1hYjE0ODIyZjg1
YjUvMS8xLUFydlJrQkRmeU1IOTVoeHY3WXl1NHZkclNFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaDm
wxffKtdT9h1EL5KJWztFy7TXziYq5rC6f3HCuV4TB7c1ohQZh+lRUrsFxs+8Dehi
0a4vdD26rqBXtI4q41lv+OILXJpkaHxnpRRxghpEE6v/uP0DcHMs/DQSaT37xmv/
JLgGKqNPETyPz2zFKNAJP7xJAdzdgP4CiQhnAU0hUrE7vkrPidIWoMqsfvnxrj1o
/G6uGIYS11uRscWjEe1d9VROo2j2ilaJnunzI9Oo2X1S5u+AV3Dn51LWXdV67yqs
nbUTVQ3ieNb+IW4zMhXgKQ4FF0FlqBpmrnSJrspaojSPvpgJteWvKYsq2Nz2OrjG
AJdKy93TcX08/Ud4HQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client