Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: sjL3Cvpuuby1L4t0pboecNZ3KWbroendUHakrLAfH8o=
Subject key identifier: 9B:45:63:F1:BC:8C:5A:0C:AF:10:C2:74:19:DC:1E:6A:3B:CC:C4:39
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019A725CA327B7054A074F8FBD0C533DFE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: +Ehne5kjsNlBaeG5A8HM0F9NyCG7hdJFGIE1Rtbwg/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a3:27:b7:05:4a:07:4f:8f:bd:0c:53:3d:fe:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=9b4563f1bc8c5a0caf10c27419dc1e6a3bccc439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:47:a0:66:e5:92:3f:be:8f:2b:34:e0:12:
49:19:c3:6b:ef:02:3e:b0:e9:dc:a3:48:37:51:e7:
5a:de:27:ed:26:8c:34:10:ec:cd:a0:51:f5:3a:75:
30:d4:1f:79:de:a1:58:6b:d6:6d:36:0b:1a:b3:44:
c4:21:a5:11:e5:e6:84:f8:63:b6:50:9d:79:ad:d6:
86:fb:48:bd:f4:ca:d9:06:ae:90:7b:99:29:0e:20:
15:ba:bf:73:86:0f:62:cb:77:d7:63:26:f7:53:0b:
e5:ba:eb:33:ca:3c:c1:53:cd:bf:4d:2b:4c:b3:83:
53:30:a4:7c:1f:bd:e3:50:04:58:23:dd:ff:7e:04:
78:be:a3:e0:c6:7c:26:c3:64:fd:5f:44:d1:d5:fc:
27:5c:d0:38:ff:64:d3:8d:a4:b4:78:30:a7:c6:e0:
f9:3c:0c:a6:78:15:64:c0:a4:45:2c:27:69:76:02:
b4:dd:5c:6b:46:53:73:cc:0b:94:50:5a:56:51:e5:
1a:73:ab:b1:67:5a:64:45:f4:d0:17:9e:33:ff:9e:
1b:2d:e6:76:5b:bd:1a:02:6e:df:d2:cd:b6:7c:2b:
ae:03:8d:c5:73:17:18:bc:0b:d0:f0:d0:12:e1:17:
64:47:19:d1:c6:98:0e:b7:9b:1a:76:5a:b1:6c:61:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:63:F1:BC:8C:5A:0C:AF:10:C2:74:19:DC:1E:6A:3B:CC:C4:39
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:63:e2:74:1b:85:d1:78:4a:66:0c:e6:7f:ff:38:ef:29:4f:
5a:1c:a0:28:d7:06:96:73:75:a1:87:3a:86:9e:02:12:48:86:
4f:8c:75:26:11:33:3d:dc:36:e5:f8:e6:1d:38:54:b4:c4:27:
cf:0e:2d:45:4c:60:09:44:ee:d0:d5:46:9b:b3:8d:89:cb:7d:
15:73:ac:a5:d5:e4:dd:8d:26:ad:93:e9:b1:2f:a1:e3:2e:b5:
5b:e3:c3:01:26:97:5b:49:f2:b4:1f:ce:08:23:ed:28:ce:c4:
bf:15:44:4a:be:0a:0e:e7:d6:f0:a4:44:7a:36:23:ba:d6:c6:
88:0c:70:db:90:b0:02:14:3e:95:75:6a:68:04:ab:80:43:c2:
16:10:b1:41:ef:19:6b:2d:ed:50:dc:ed:59:7a:7e:33:4a:ec:
5c:40:9e:2c:09:4e:4e:4b:90:b6:b8:3e:aa:6f:1d:6a:4f:ac:
1e:04:f8:2b:8e:e3:1b:5f:da:29:4a:c7:c6:b1:da:13:39:90:
b1:62:b6:a0:ae:02:d9:3c:34:a1:b1:7f:ed:c2:da:02:8a:27:
d3:b8:85:a4:26:a6:5c:21:ee:3b:63:fd:c3:7f:c5:ac:e3:30:
7d:94:d8:24:76:f8:db:c4:ad:73:2e:96:37:c9:b9:c3:1e:f2:
3d:f1:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:10 2025 by rpki-client