Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File: rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier: zjg5VhYSj3cP5CLQBWVO5oGf/TRSfSazwqxEyuph9zk=
Subject key identifier: F1:20:77:4E:F4:C5:AD:59:DE:CE:67:AA:1D:5D:01:77:C5:EA:39:7B
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer: /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial: 0199221E853D3BAB26CF0599A6536817E2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:00:49 +0000
Manifest this update: Sun 07 Sep 2025 03:00:49 +0000
Manifest next update: Mon 08 Sep 2025 03:00:49 +0000
Files and hashes: 1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: bh0bsvLJ5tgjZ3NWuUAhVShYxzKx5xmGG2zNLuswtfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:85:3d:3b:ab:26:cf:05:99:a6:53:68:17:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
Validity
Not Before: Sep 7 03:00:49 2025 GMT
Not After : Sep 8 03:00:49 2025 GMT
Subject: CN=f120774ef4c5ad59dece67aa1d5d0177c5ea397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:38:a0:d3:2b:81:95:82:76:8d:02:1a:5d:
bd:e1:ed:c2:a1:fe:10:52:b1:7f:e3:14:de:54:93:
26:6f:04:29:19:0d:65:68:1f:f7:93:da:86:e2:cc:
0c:97:1f:ee:82:57:90:b0:aa:e0:bb:38:b6:c6:0a:
a2:34:fd:a1:bf:b8:4a:b9:ea:0a:d5:52:f5:2d:59:
49:ff:d0:dc:2b:e3:9f:3b:34:00:1a:83:66:15:49:
00:6e:ef:56:b9:e4:d1:8b:a4:1d:c8:8f:b8:1c:25:
a5:50:0a:20:4a:9f:9b:0d:2e:41:0f:81:58:d4:cf:
dc:7d:80:c7:ef:ba:76:7f:89:90:ac:6f:04:7d:d2:
33:10:71:0f:9f:f3:96:2b:cb:a6:67:de:9e:53:95:
5c:28:ce:31:e0:b3:38:d5:66:13:44:14:40:32:cc:
f4:bd:5d:35:b9:bf:46:fb:db:54:a4:fa:36:52:31:
24:28:f5:10:e1:8d:09:55:d8:e0:f0:7e:bc:62:03:
64:63:99:9e:f3:74:22:43:bb:17:30:ec:eb:38:59:
5c:69:d4:a3:d5:52:52:33:1d:b0:dd:39:cd:ba:de:
da:12:91:0c:29:c9:c7:07:43:47:d7:30:91:43:ce:
dd:36:08:1e:d7:a8:e6:1d:a7:d7:ed:80:40:8a:17:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:77:4E:F4:C5:AD:59:DE:CE:67:AA:1D:5D:01:77:C5:EA:39:7B
X509v3 Authority Key Identifier:
keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:bb:cb:69:04:51:88:90:f7:29:08:73:2c:4b:72:02:4a:
46:04:a7:45:58:48:d9:1f:71:4c:14:0e:15:51:72:1f:6c:fb:
b0:1a:5d:9f:cb:bf:7e:58:bc:30:17:90:aa:d1:fd:a1:68:c3:
89:0c:fc:bb:a6:cc:48:e7:0b:62:11:6f:ee:61:14:21:e4:03:
fd:bd:cb:c9:f4:e5:e6:22:de:f4:de:53:f7:cc:f8:eb:84:10:
dc:f6:d6:9a:b9:d9:94:90:af:a1:96:37:c2:92:87:36:cc:96:
d2:da:f6:2a:d6:a0:2f:55:df:9c:73:1d:19:88:a6:ca:6c:0b:
21:c3:e4:51:39:bd:a7:43:1c:e8:e1:07:c9:dd:f7:0c:c3:04:
b1:23:56:a7:fd:76:e3:14:8f:b5:89:26:a5:46:4a:f1:1c:13:
36:96:e9:18:7a:00:da:87:0a:41:f5:cb:0c:46:61:69:11:e8:
aa:ef:93:7b:d1:24:c8:df:06:f5:87:2c:04:43:09:45:5b:ac:
39:80:97:ab:c6:84:f1:62:07:20:a2:e9:a2:db:87:29:7b:1c:
65:08:a1:9d:1d:9b:49:31:b4:d5:c2:16:d1:f4:e4:16:ef:5f:
ca:db:c3:49:05:8e:8b:cc:af:24:62:e2:d8:c9:da:80:0f:60:
15:3b:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:40 2025 by rpki-client