Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: N6oDPNVMkGp+TcdKIWnH5NW/AbO84pfU5uSGm8I1Jj8=
Subject key identifier: BD:93:59:B9:12:1C:F1:1F:7D:86:D9:29:FB:35:9B:86:7C:BF:17:2D
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019752A27BAB105E1575E4058ADDC140AD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 03EF
Signing time: Mon 09 Jun 2025 03:01:09 +0000
Manifest this update: Mon 09 Jun 2025 03:01:09 +0000
Manifest next update: Tue 10 Jun 2025 03:01:09 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: gdEGqAdTr080Vidoz0sx1yuQo9uUUlKAoNZ3CSExvpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:7b:ab:10:5e:15:75:e4:05:8a:dd:c1:40:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Jun 9 03:01:09 2025 GMT
Not After : Jun 10 03:01:09 2025 GMT
Subject: CN=bd9359b9121cf11f7d86d929fb359b867cbf172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:41:6e:bf:94:7b:0b:d5:f7:71:9b:02:45:
ce:01:9b:62:3e:90:bf:e4:2a:96:b4:ca:a5:a0:51:
82:e5:c2:90:65:0a:95:63:0a:89:0d:89:a7:6c:ad:
b3:62:f5:81:f2:d9:28:a7:49:1a:b9:4a:87:1b:99:
09:70:f2:d9:9f:1a:10:9a:cb:56:82:95:08:3a:18:
1d:5c:3b:65:b3:27:c6:ef:d5:2a:c5:be:6c:75:2e:
fe:38:bd:5d:f8:c1:b5:33:c4:63:a5:78:a2:aa:6a:
58:2a:22:27:41:2a:cf:60:91:b8:4e:18:e6:6a:df:
60:7d:bb:a1:fc:18:a3:07:bf:50:db:1e:92:cc:7e:
3b:d2:60:93:48:3f:2c:e9:ae:7b:e3:61:df:5f:f7:
bf:7c:15:01:6e:e0:a6:1b:a3:cb:b3:80:2a:ed:69:
bb:47:9d:5b:88:36:b3:2c:5e:7f:91:fd:2c:90:70:
87:76:45:12:80:c2:a4:45:11:ac:b6:ba:05:d4:24:
ac:85:7c:9b:20:4f:d3:89:79:8c:bd:8b:0b:68:1c:
ff:af:df:8c:91:26:aa:ae:44:19:85:cf:8f:10:7c:
a9:69:54:d6:e0:a5:8d:94:8e:39:99:e1:ba:60:ad:
49:60:9a:a1:70:c9:48:2f:a9:93:16:a6:d1:e5:0a:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:59:B9:12:1C:F1:1F:7D:86:D9:29:FB:35:9B:86:7C:BF:17:2D
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:90:19:0a:30:8a:6f:b3:3d:d6:88:ba:3e:ae:9c:c2:df:42:
81:c3:6c:f5:8c:98:6a:6b:75:6b:14:ab:2c:1c:9e:58:92:82:
8a:0a:29:0d:c2:b0:6b:b3:fe:b8:b3:02:20:61:11:19:f1:2e:
11:b0:0c:6c:03:fc:47:35:0d:33:4a:f6:64:fd:f7:96:cc:fd:
27:19:ff:da:b8:67:a1:5e:5e:1a:b4:73:2d:9a:2f:63:e5:ae:
ae:7f:e2:c0:a0:bc:66:64:61:80:48:17:9d:79:3d:01:f9:9f:
d6:9f:de:24:26:ee:25:eb:68:53:2d:1c:dc:ec:40:6b:af:81:
57:98:54:e3:21:14:5e:9c:5d:22:e9:fe:c7:66:44:da:0e:e7:
97:74:f8:62:b2:32:72:7e:65:9b:5d:75:fe:4b:5e:91:c7:02:
f5:82:fa:6f:58:9d:ab:a6:93:9e:45:87:3b:cf:ed:19:97:31:
fd:89:70:1d:0c:f5:b9:e9:40:8f:b5:3e:fd:ee:e6:8b:26:d0:
79:74:60:4e:e6:b9:af:be:b1:3e:bc:7d:3c:2f:69:80:22:45:
1d:c5:f1:bb:22:3a:fe:19:58:1d:9f:1b:cc:a8:62:c3:61:12:
35:d7:b4:e0:6d:32:e1:d9:77:dd:b8:e3:1e:69:8d:d5:c5:5a:
38:83:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:23:16 2025 by rpki-client