Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: hO5bDwG3tWduIqKQ2b0MQRXUI6YiU5ER3U04hjoXvlI=
Subject key identifier: 15:F8:49:56:33:13:D8:83:3D:92:24:86:EE:0B:C6:99:1E:97:B0:E7
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019A22F76F147565CDEFC193256BF2B9BEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 0564
Signing time: Mon 27 Oct 2025 00:00:32 +0000
Manifest this update: Mon 27 Oct 2025 00:00:32 +0000
Manifest next update: Tue 28 Oct 2025 00:00:32 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: z2WnTssMnWI9jH2ro+jz+Z1v7KlFL2MQ9tySOOwoQuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:6f:14:75:65:cd:ef:c1:93:25:6b:f2:b9:be:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Oct 27 00:00:32 2025 GMT
Not After : Oct 28 00:00:32 2025 GMT
Subject: CN=15f849563313d8833d922486ee0bc6991e97b0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:c6:4f:c3:0e:b9:02:12:d3:81:fd:bd:05:
ea:c3:09:89:3a:67:61:f3:c7:b2:53:9f:cc:d7:46:
35:de:12:50:7d:5b:86:fb:fb:78:15:1d:e5:05:1d:
3d:39:c5:13:b6:1f:b7:91:60:5c:53:72:6b:68:f7:
00:26:cb:d6:81:4a:64:27:6b:a1:e7:97:cd:e7:f5:
50:1a:c4:4d:f9:51:e5:43:75:73:0b:e0:45:d9:89:
f3:14:94:34:b3:8d:bb:fc:e3:ec:db:53:18:63:ab:
1c:66:32:66:69:72:7c:59:8b:ba:c8:71:7f:c0:e0:
0b:9b:b4:23:ad:5d:48:76:fc:d2:b8:0f:52:ea:11:
fe:a5:bd:37:16:d1:a0:c8:bb:6e:92:02:60:04:3e:
68:d0:75:96:43:38:12:e5:8f:8c:41:0b:65:06:0a:
37:1e:20:e2:ab:40:f5:72:5c:04:b9:76:d6:20:d1:
b7:98:a1:ac:04:09:be:09:80:2b:95:72:c2:47:f0:
3d:39:ad:39:82:4d:87:3c:11:27:cb:10:33:15:d6:
f9:a3:42:87:37:bc:b5:9e:f6:90:22:84:c3:9e:8b:
5f:2d:13:35:61:e6:cc:c8:d5:e9:cb:3f:82:f9:f6:
c4:d7:89:a3:0f:7a:08:2a:b9:e6:69:6e:b6:73:e7:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:49:56:33:13:D8:83:3D:92:24:86:EE:0B:C6:99:1E:97:B0:E7
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:dc:71:7c:ce:b7:ca:4c:0b:37:8d:5c:7d:65:12:7b:96:b6:
8a:14:ad:4b:67:dc:b5:f9:b9:87:31:04:0e:86:b7:80:59:40:
bb:77:08:cf:55:78:2e:fb:a7:f5:5d:7d:ed:82:4e:1d:69:b6:
8a:ac:d1:92:1e:81:02:b1:49:fa:07:0f:7c:cd:dd:fc:3f:b2:
ff:ff:47:0a:ca:34:a5:88:00:ed:6e:5d:3b:cf:95:3d:05:96:
e6:53:b7:aa:e1:b4:3e:2a:9d:da:a3:8f:31:ad:06:72:7b:aa:
cd:f1:7a:a9:0e:4a:a8:64:d9:a7:07:df:b5:99:25:85:77:bb:
02:cb:00:9e:99:54:49:f5:bb:fe:eb:f5:47:cb:ae:78:07:3c:
b2:1d:81:df:cc:56:34:df:ca:04:f4:9e:bb:86:d5:38:57:82:
02:f1:6f:cd:e1:d0:12:1b:05:46:da:ce:0f:5a:bd:c8:b2:3b:
62:5e:1e:b0:80:f3:5d:ec:96:3d:8c:b9:c8:44:60:af:83:34:
6f:fd:d7:5c:c0:ef:72:d5:19:c4:4d:b7:c3:d0:40:c5:ef:93:
53:46:f5:d5:34:84:04:9a:39:4f:37:ec:4b:8b:78:77:96:3a:
39:68:5d:d5:17:f7:94:ce:b2:ba:7c:c3:85:89:1b:c1:03:60:
26:65:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:02:15 2025 by rpki-client