Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: TvHl891nlieheSKoJWHtu2jcm+u0omTzfVeTPw0ocxU=
Subject key identifier: 0B:A1:96:EF:06:1C:14:0F:AE:3D:49:B5:E3:6C:A9:CE:DF:FF:4F:AA
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 0199221E9F848E04DA34C2669B2FD7C20545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 04DF
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: HlyBcrLTzLSqyzHSYx0FS3dklnr/IeG5U4ymey9ck9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9f:84:8e:04:da:34:c2:66:9b:2f:d7:c2:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=0ba196ef061c140fae3d49b5e36ca9cedfff4faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:8c:82:16:1e:86:7a:1f:bf:ec:0b:7d:d4:
12:23:ba:43:8f:c1:e0:69:08:cc:7f:53:91:6f:8e:
ee:e9:f9:f1:84:39:b2:09:83:35:38:de:af:b9:6e:
6f:31:1e:92:85:ea:d7:f9:66:73:b4:4d:94:f2:65:
f5:bb:41:27:f1:fa:29:22:68:e0:7c:3a:e4:89:af:
39:d5:d4:2b:33:65:21:dc:fb:1d:1f:e3:60:40:26:
80:83:67:c8:19:6d:b8:63:fc:2f:07:27:63:bc:f6:
6b:02:b3:1b:05:b3:76:59:cb:4c:d1:f6:ef:62:b9:
96:1c:81:f3:46:6c:d2:55:b3:d8:9f:23:c3:21:ad:
48:01:a3:ec:f4:51:88:60:f5:99:9c:0a:73:a4:94:
8e:bb:0c:9f:92:c3:0e:f9:7e:75:ee:1c:3e:bf:21:
57:7b:88:34:90:fd:70:3e:cd:61:ee:61:16:06:d6:
d3:63:fb:7d:13:60:31:81:ad:91:9d:05:df:78:00:
c4:55:0c:b1:b0:d5:44:02:04:3f:9c:ca:72:8e:d8:
ec:7f:d1:7d:46:a1:85:ea:7b:55:f6:28:75:cb:5b:
db:88:2d:f2:02:2b:0f:f2:3a:07:2d:a4:cb:ca:f3:
f2:ea:49:78:2d:12:60:bf:c2:9a:65:59:cf:84:3d:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:96:EF:06:1C:14:0F:AE:3D:49:B5:E3:6C:A9:CE:DF:FF:4F:AA
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:59:b2:0e:1c:fd:cb:5b:9d:57:84:42:34:88:bb:59:f5:34:
c8:94:b0:24:0f:85:05:59:2f:a0:a9:3f:11:58:18:80:ab:32:
70:39:0c:c9:89:16:f3:c4:75:2f:df:81:77:a0:16:39:94:57:
71:50:ef:88:70:d5:48:29:5e:a1:06:67:ff:60:a5:bb:a4:92:
ab:2f:eb:0e:32:94:2a:da:9a:69:87:33:a2:aa:25:6d:c8:f2:
87:de:7c:35:11:15:df:33:ee:78:f7:9c:c8:30:88:36:3c:9f:
32:4f:1d:eb:b6:37:03:62:af:4b:d5:b1:f6:10:4d:a8:04:27:
82:a8:90:e1:39:eb:5a:4e:03:2f:bb:d1:59:8b:41:e4:1a:6f:
27:04:2e:41:bb:4a:cf:64:c8:c8:52:82:ac:cb:5a:6d:cf:b8:
6b:89:7f:b8:36:87:2c:55:74:c6:c2:2f:ad:cd:70:75:e6:36:
b3:fb:01:e7:2a:0f:24:ff:49:df:d2:33:18:ae:c0:b3:ca:28:
15:27:9e:c3:ff:51:0f:98:e8:9b:65:5e:ea:6e:dc:e0:ad:bf:
49:33:b0:fb:3a:ab:bd:15:12:43:5b:f7:b3:b3:b3:66:65:8c:
c0:6b:1b:ae:96:59:bc:97:20:d0:60:80:c5:7e:36:fa:1e:59:
ec:a1:52:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHp+EjgTaNMJmmy/XwgVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjQzNzllMTE5ZTcxMDAxY2NkZmVlYmY0ZjJhZjJjZjVm
MDdhMGEwHhcNMjUwOTA3MDMwMDU2WhcNMjUwOTA4MDMwMDU2WjAzMTEwLwYDVQQD
EygwYmExOTZlZjA2MWMxNDBmYWUzZDQ5YjVlMzZjYTljZWRmZmY0ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdeMghYehnofv+wLfdQSI7pDj8Hg
aQjMf1ORb47u6fnxhDmyCYM1ON6vuW5vMR6SherX+WZztE2U8mX1u0En8fopImjg
fDrkia851dQrM2Uh3PsdH+NgQCaAg2fIGW24Y/wvBydjvPZrArMbBbN2WctM0fbv
YrmWHIHzRmzSVbPYnyPDIa1IAaPs9FGIYPWZnApzpJSOuwyfksMO+X517hw+vyFX
e4g0kP1wPs1h7mEWBtbTY/t9E2Axga2RnQXfeADEVQyxsNVEAgQ/nMpyjtjsf9F9
RqGF6ntV9ih1y1vbiC3yAisP8joHLaTLyvPy6kl4LRJgv8KaZVnPhD2/TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuhlu8GHBQPrj1JteNsqc7f/0+qMB8GA1UdIwQY
MBaAFGq0N54RnnEAHM3+6/Tyryz18HoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAt
MGE0MzM4Y2RmOTdiLzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAtMGE0MzM4Y2RmOTdi
LzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFmyDhz9
y1udV4RCNIi7WfU0yJSwJA+FBVkvoKk/EVgYgKsycDkMyYkW88R1L9+Bd6AWOZRX
cVDviHDVSCleoQZn/2Clu6SSqy/rDjKUKtqaaYczoqolbcjyh958NREV3zPuePec
yDCINjyfMk8d67Y3A2KvS9Wx9hBNqAQngqiQ4TnrWk4DL7vRWYtB5BpvJwQuQbtK
z2TIyFKCrMtabc+4a4l/uDaHLFV0xsIvrc1wdeY2s/sB5yoPJP9J39IzGK7As8oo
FSeew/9RD5jom2Ve6m7c4K2/STOw+zqrvRUSQ1v3s7OzZmWMwGsbrpZZvJcg0GCA
xX42+h5Z7KFShA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:49 2025 by rpki-client