Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File: rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier: SJztnsAW85VHIHHgjGcGYNbKrsK4UcFVIw6RLShuFGM=
Subject key identifier: A2:20:38:7F:D8:AC:D7:25:F2:3D:E9:69:A8:80:E4:99:DF:2B:34:6C
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer: /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial: 019A71EEE6B852E5F6FB36AF4915B90E32C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: bZb3CmGZu0uDgSiq21ohNWJxYB4Pbsi/K/KM3AHLdUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:b8:52:e5:f6:fb:36:af:49:15:b9:0e:32:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=a220387fd8acd725f23de969a880e499df2b346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:ad:8e:48:b9:37:38:0e:66:46:7f:26:51:
35:06:de:54:d8:d8:02:06:90:2a:7a:33:43:0f:cb:
18:84:23:d1:89:d3:e4:5a:8a:3b:6a:62:7b:4d:97:
b0:b9:f1:eb:fc:06:0e:1a:4f:12:ae:f9:6b:7c:cd:
bf:c6:b8:08:89:6a:14:67:be:39:63:4c:4f:20:bd:
7e:b1:71:b3:38:f6:5b:d2:5f:17:7b:6c:fc:46:10:
30:e3:69:11:26:c7:cb:19:ea:55:22:cf:de:94:d7:
98:8b:b1:2c:8b:2f:04:aa:8e:b6:35:bc:b6:0c:b8:
22:1a:b1:0b:72:8c:17:ed:50:a5:54:2c:1e:b1:86:
1c:e9:8d:1b:18:76:0c:06:94:52:12:b8:ff:86:a7:
f0:c5:4b:1f:11:cc:50:29:4c:67:4c:04:eb:52:a8:
5e:c7:6f:5f:65:c1:d3:23:c0:69:9f:b4:42:4d:2b:
8b:7c:76:f2:bf:90:89:99:1c:00:6e:63:cc:e6:2f:
b5:b4:3e:3c:06:60:09:bd:97:9e:ad:55:c0:fe:a1:
7d:73:e3:97:12:fd:f5:4f:7d:f7:06:b1:c1:20:3b:
fd:4d:94:1e:28:da:67:51:80:73:f6:fd:a6:80:30:
cd:e0:2e:83:14:10:4c:c5:81:49:4a:2c:24:bb:cd:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:38:7F:D8:AC:D7:25:F2:3D:E9:69:A8:80:E4:99:DF:2B:34:6C
X509v3 Authority Key Identifier:
keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:04:82:4a:86:07:11:bc:ba:9f:47:6b:62:20:9c:e5:0c:8d:
ac:ed:84:41:13:0d:70:8c:9e:89:40:ed:04:b6:5c:87:71:50:
d3:c1:fe:e8:e6:37:77:db:1f:89:8c:ea:13:a0:9c:c6:00:a3:
f4:de:5d:40:94:19:1f:5f:4a:5c:42:9e:a3:36:80:34:cc:c9:
61:78:e2:fe:52:c4:a1:bc:51:d5:c2:8d:60:9f:0c:c3:43:b0:
ee:20:b7:2b:fe:74:b6:98:95:ee:0d:e8:4e:65:f0:26:16:bb:
d4:6e:fd:45:b0:e7:73:b5:25:8c:ed:a1:e8:4c:52:9e:73:56:
1e:dd:9f:ff:b0:e8:bd:fa:e3:5d:14:ef:88:7b:3b:d4:d6:ed:
39:fa:70:4d:36:b0:00:aa:a1:fd:a0:dc:90:82:7e:d1:96:9a:
a1:ea:04:ae:2a:ae:aa:4f:9e:63:8e:30:2c:dd:68:01:c0:e7:
70:8b:a2:5a:0a:ef:b3:cf:e6:29:76:ec:ca:f2:04:aa:c0:6d:
dd:87:4d:be:e1:53:ee:7f:00:20:55:82:ba:47:6c:db:46:2d:
5a:19:2a:5c:fa:30:9f:55:d7:5f:bf:30:f3:75:7d:50:33:e6:
31:08:f3:74:95:e8:d2:25:f4:63:23:0c:86:94:93:c4:16:88:
6b:2b:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client