Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: E921SdAErzJxW5Cwri9IyPvP+yAKLWMsZk1eWgWM/GY=
Subject key identifier: E2:28:BF:40:FC:D8:06:F2:F1:D8:65:D3:3E:D4:93:73:88:9A:1E:4C
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019764032AF8CD72127921AE452172DEA11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 03F8
Signing time: Thu 12 Jun 2025 12:00:18 +0000
Manifest this update: Thu 12 Jun 2025 12:00:18 +0000
Manifest next update: Fri 13 Jun 2025 12:00:18 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: bc/SI6WoOJ3p6VCqZL+yluq5OT+34va58eegn75uQHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:2a:f8:cd:72:12:79:21:ae:45:21:72:de:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Jun 12 12:00:18 2025 GMT
Not After : Jun 13 12:00:18 2025 GMT
Subject: CN=e228bf40fcd806f2f1d865d33ed49373889a1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:4e:bc:c1:b5:03:3e:37:d2:14:ce:65:71:
27:d5:03:79:fa:a8:16:26:4e:c8:7d:75:dc:ea:1f:
10:ea:85:17:d9:9f:15:ed:3b:e3:94:bf:04:67:3c:
8a:91:49:3d:ff:80:21:f1:47:bf:43:05:e2:06:82:
61:0a:e5:a0:50:f4:ca:30:ad:5b:83:d7:ff:9b:98:
67:c4:17:11:69:db:36:31:03:04:af:02:51:82:9c:
94:31:8d:1e:77:c4:15:15:67:79:5c:66:e1:e1:6d:
70:f1:c8:e0:b2:cc:41:0e:a7:c6:cb:9e:2b:de:f0:
85:9a:5b:54:0f:5f:a7:bb:d4:61:99:cf:2a:4b:34:
4e:ea:91:f4:34:1c:4e:f4:cb:b2:24:e7:0d:2c:ea:
58:31:cc:bf:f8:a2:69:31:1a:2e:ae:2c:1f:ba:40:
92:ac:f6:06:ef:99:67:33:27:10:aa:f9:74:c0:55:
7c:92:e2:47:7d:a3:68:0d:4a:5d:ee:61:93:14:cd:
45:4f:49:31:43:8e:1c:0a:e2:4c:eb:00:c2:20:ae:
73:09:0e:ee:5a:7c:3a:d9:12:9c:c9:94:33:7e:9d:
de:9e:04:9c:d9:9f:67:68:1d:9f:3e:0e:a9:85:b7:
62:2a:01:c2:d6:8f:ce:88:55:ed:b6:bd:dd:94:91:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:BF:40:FC:D8:06:F2:F1:D8:65:D3:3E:D4:93:73:88:9A:1E:4C
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:95:90:0f:e4:d8:eb:20:cc:f3:3b:42:74:86:f0:4d:06:fa:
ac:ea:11:82:f1:4f:94:e8:9b:b5:1c:8a:04:93:8f:88:fd:6f:
ec:63:16:29:f7:40:c4:d4:b6:d8:2b:f5:d1:74:a1:aa:20:17:
eb:32:24:f5:91:15:5d:3b:dc:88:d2:1e:63:4e:f1:15:b1:0c:
2f:7b:87:61:80:eb:da:3d:97:83:41:33:1f:4c:c3:ac:7f:86:
f7:23:ad:48:0c:15:3f:c2:03:9e:c6:fa:c4:b2:a8:07:04:35:
51:32:30:3e:d3:38:3c:d4:0a:e7:7c:47:6f:22:19:8c:93:18:
92:d0:53:6d:e4:bd:3c:39:43:d2:20:8c:bd:4a:de:bb:4f:39:
56:5e:53:0e:0f:02:8a:a5:9c:31:15:a2:26:b0:5f:4a:9b:cf:
b2:85:55:9d:b4:eb:7c:6c:fc:bb:74:21:4c:8a:e4:a2:dd:83:
db:36:cf:94:a1:5b:d8:19:4f:47:70:11:5d:be:11:7c:5c:da:
d4:76:66:a8:52:7a:90:a9:5b:1e:5b:6b:93:69:6d:5b:1e:a1:
a3:4b:df:6e:c9:de:1a:34:97:9e:6b:f0:0b:8a:63:50:73:c1:
57:8d:c9:96:95:82:a1:f4:ef:f3:e9:ce:c7:6c:74:ea:8f:11:
24:3f:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:09:00 2025 by rpki-client