Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: bpMuHvErfdJA1/cIy6A7Jy6sRKro0oRN2pCadpQxaaQ=
Subject key identifier: AC:A5:0D:9E:F0:F7:B3:91:DF:A5:FF:FD:6D:B5:9E:0F:61:57:92:CD
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 019A729332DF5641362F2E817D9915720353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 0FF8
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: SvQqK/22BoBTAjNFT8s0rLca6R030/YbAkc5eTcZvGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:32:df:56:41:36:2f:2e:81:7d:99:15:72:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=aca50d9ef0f7b391dfa5fffd6db59e0f615792cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:cd:4d:b6:dc:51:ec:23:a0:9e:37:aa:44:
50:e6:c4:a9:37:dc:20:61:d4:83:5e:7c:e4:ef:ea:
62:cc:9c:a7:e3:59:05:f2:4d:80:d0:e9:ac:c7:9f:
0b:f3:db:56:88:74:ef:6d:2f:76:00:13:13:f7:16:
3b:14:db:e6:ff:26:64:cd:b6:49:66:83:e8:de:4a:
1f:16:df:59:3e:03:27:4d:99:06:d7:9f:ce:6e:48:
4e:07:0c:11:a3:b5:ef:2a:db:20:aa:8d:b6:22:28:
1f:4f:58:04:5e:ce:a0:5d:21:43:4d:62:63:61:a3:
aa:98:4f:25:5b:a2:11:17:49:0c:f5:c0:0b:18:e5:
a7:76:8c:f8:dd:37:00:3c:26:36:bc:c3:d4:de:04:
79:96:ab:3f:45:e4:92:e2:4d:3a:80:5e:ac:a1:47:
ba:a7:89:49:2a:1a:a7:68:f2:21:8a:57:a5:68:35:
34:d5:89:47:9c:e1:d0:87:c0:10:3f:a5:63:07:c7:
a0:58:26:91:8e:fd:68:d5:e6:16:59:6e:fd:73:2c:
33:b2:27:38:1e:55:b4:d4:ec:75:c4:59:6b:e5:51:
5c:cd:1e:13:f8:2d:45:35:a2:d6:c4:70:5e:c8:b7:
8f:10:ff:a0:92:a8:c5:82:93:47:6e:c6:39:ec:8b:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:0D:9E:F0:F7:B3:91:DF:A5:FF:FD:6D:B5:9E:0F:61:57:92:CD
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2b:34:ed:cd:ff:73:10:b9:2c:2c:49:9d:74:1f:e6:03:83:
6b:fa:ff:a4:47:f5:f3:35:a2:c0:35:d3:f7:1b:9c:d6:e2:c3:
21:c6:85:89:56:de:34:ae:5f:55:71:af:31:f9:a8:ef:d4:16:
f7:38:8e:29:d3:11:db:ad:c3:66:6f:47:d7:40:ce:e5:96:7a:
62:f2:84:80:71:9d:eb:34:dc:b3:e8:d8:41:9e:a6:0a:22:32:
47:8a:98:c0:e1:d5:9e:77:37:0b:52:46:18:34:b8:e4:9d:9c:
94:1c:55:39:dd:98:8a:7d:00:77:bd:9a:03:1c:a5:0a:9d:21:
a0:89:9a:e6:ec:5c:4b:35:b7:46:7f:8b:72:b5:d3:44:42:cb:
87:09:27:f6:4d:a0:5b:e4:63:2a:0e:43:45:89:35:f2:a5:e7:
be:10:f5:51:9b:51:fe:2c:2c:a9:a2:16:c9:f9:da:65:70:da:
47:52:e4:87:2c:6c:e0:22:e4:11:15:89:13:eb:de:00:9c:0e:
78:89:7f:f2:0d:c4:41:c0:9d:06:13:92:a7:6e:e0:00:4c:d5:
7f:64:5c:c3:a9:09:e2:a0:9f:a7:e3:07:76:8e:ad:d7:8d:66:
4e:48:69:fa:49:f4:3b:d1:f7:53:10:8f:9f:dd:4f:5d:04:11:
cd:68:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:44 2025 by rpki-client