Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: FMArzfIDrOjqcZnYszMhOiTevyytEtgAPWkgwdXzvtw=
Subject key identifier: AC:17:20:A1:7D:6B:4D:64:A7:07:7A:28:D8:9E:25:60:B0:84:D4:AE
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 0199228CF9794B6E0FAC856A971AF153682B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 0F4A
Signing time: Sun 07 Sep 2025 05:01:28 +0000
Manifest this update: Sun 07 Sep 2025 05:01:28 +0000
Manifest next update: Mon 08 Sep 2025 05:01:28 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: EHpsMLae6ttJJKilNhY0IS6x1mMbmUrqtwmNXGkQSdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f9:79:4b:6e:0f:ac:85:6a:97:1a:f1:53:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Sep 7 05:01:28 2025 GMT
Not After : Sep 8 05:01:28 2025 GMT
Subject: CN=ac1720a17d6b4d64a7077a28d89e2560b084d4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:58:75:fc:3c:3a:5c:1f:c9:70:c4:cd:64:
9d:4a:0d:61:5a:4a:d6:d5:39:7e:13:8d:98:ef:a1:
2e:db:a9:c2:f2:f4:5c:ae:7d:be:62:43:56:c2:8c:
f5:17:a6:bb:0d:c7:e0:5d:ab:e0:5e:63:f3:b0:ad:
c3:05:a6:83:f2:c9:6b:cd:3a:92:f8:4e:a0:e8:65:
74:be:37:26:11:17:48:f4:42:e4:eb:2c:31:6d:e7:
f3:76:d3:94:c5:36:96:ff:3a:ff:f0:4d:03:68:46:
a6:f5:ae:c0:1c:4c:82:e7:36:74:37:d3:ee:09:8e:
24:5b:9d:98:7e:d1:55:4c:5e:59:9d:13:39:11:4f:
4f:df:70:c3:55:31:e7:4b:e5:8d:14:c9:1c:80:7d:
b5:72:72:5f:f0:8c:ca:d8:75:cd:b4:2c:ad:c0:05:
f8:49:d5:f8:6c:a8:33:16:81:16:0a:22:93:ad:b1:
7a:9d:f1:58:b3:6f:92:24:b3:a4:e9:02:aa:07:da:
07:24:e8:41:9b:fc:e0:41:ad:24:fc:aa:a2:82:73:
f3:0b:e1:7a:63:43:42:19:6f:54:ae:42:e0:13:b4:
1f:e0:ad:d6:d9:6c:56:0d:c0:7e:85:63:16:12:c7:
b3:c1:11:9a:86:7b:b6:2c:e1:b4:af:10:6e:0a:18:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:20:A1:7D:6B:4D:64:A7:07:7A:28:D8:9E:25:60:B0:84:D4:AE
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:a1:5f:26:95:ef:8b:89:af:7d:e9:10:21:7d:fa:7b:4b:
b6:e4:d9:1f:d7:d2:b4:0c:95:e4:ad:e2:89:24:ac:8d:ad:81:
1b:78:f5:dc:41:d1:fa:08:aa:6e:9a:dc:f0:3b:87:0d:b0:35:
83:3d:a1:f0:2e:d3:31:5b:65:93:88:b8:40:2e:15:34:ee:de:
20:eb:00:cc:b6:c6:c7:17:ad:27:d6:7e:39:29:bf:19:fb:7c:
35:12:27:11:a0:70:aa:89:1e:a2:d6:c5:62:0f:32:f2:5c:9d:
c0:5d:87:7b:21:8f:71:6a:68:d0:71:2f:02:16:19:b6:3c:33:
e0:1e:6c:36:62:f7:45:6e:3a:cd:a8:67:9e:a8:c4:da:a4:9e:
a3:1f:79:c8:2e:8d:1c:ea:04:3b:94:f3:d4:d2:64:54:85:4b:
07:8c:c9:59:85:a0:26:73:0d:37:fc:b6:10:fb:d3:f2:1b:81:
cc:ac:af:fb:e3:41:60:7f:01:9f:19:bc:48:81:92:06:4e:34:
8f:e4:0e:19:7b:1c:f8:db:de:8e:5f:62:4d:9e:c4:68:d6:43:
21:fe:69:4a:d8:4d:b7:6c:74:2a:16:a4:68:07:35:de:d2:26:
e6:63:40:ad:8a:5e:62:0d:fb:6c:66:e8:13:78:96:d3:f6:77:
22:e6:07:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijPl5S24PrIVqlxrxU2grMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYmE5ZGIyNjc0ZjczNDU2NWYwOTUzMzkzZjBhNTY5NjFj
YTU3YzgwHhcNMjUwOTA3MDUwMTI4WhcNMjUwOTA4MDUwMTI4WjAzMTEwLwYDVQQD
EyhhYzE3MjBhMTdkNmI0ZDY0YTcwNzdhMjhkODllMjU2MGIwODRkNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3tYdfw8OlwfyXDEzWSdSg1hWkrW
1Tl+E42Y76Eu26nC8vRcrn2+YkNWwoz1F6a7DcfgXavgXmPzsK3DBaaD8slrzTqS
+E6g6GV0vjcmERdI9ELk6ywxbefzdtOUxTaW/zr/8E0DaEam9a7AHEyC5zZ0N9Pu
CY4kW52YftFVTF5ZnRM5EU9P33DDVTHnS+WNFMkcgH21cnJf8IzK2HXNtCytwAX4
SdX4bKgzFoEWCiKTrbF6nfFYs2+SJLOk6QKqB9oHJOhBm/zgQa0k/KqignPzC+F6
Y0NCGW9UrkLgE7Qf4K3W2WxWDcB+hWMWEsezwRGahnu2LOG0rxBuChjt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwXIKF9a01kpwd6KNieJWCwhNSuMB8GA1UdIwQY
MBaAFAK6nbJnT3NFZfCVM5PwpWlhylfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgt
ZmY4NjE0NmY4Y2M4LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgtZmY4NjE0NmY4Y2M4
LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYqhXyaV
74uJr33pECF9+ntLtuTZH9fStAyV5K3iiSSsja2BG3j13EHR+giqbprc8DuHDbA1
gz2h8C7TMVtlk4i4QC4VNO7eIOsAzLbGxxetJ9Z+OSm/Gft8NRInEaBwqokeotbF
Yg8y8lydwF2HeyGPcWpo0HEvAhYZtjwz4B5sNmL3RW46zahnnqjE2qSeox95yC6N
HOoEO5Tz1NJkVIVLB4zJWYWgJnMNN/y2EPvT8huBzKyv++NBYH8Bnxm8SIGSBk40
j+QOGXsc+Nvejl9iTZ7EaNZDIf5pSthNt2x0KhakaAc13tIm5mNArYpeYg37bGbo
E3iW0/Z3IuYHQg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:45 2025 by rpki-client