
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: 1Rj6byJ22gTcbxY1tQ/U11kOtzQi18ub4/CLTb0e8ik=
Subject key identifier: 22:5E:9B:36:82:6F:31:08:72:AA:66:2D:55:66:54:38:72:8F:05:67
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 0199FBEC17BCEC446085D6F69EEDC635E111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 1633
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: jeAolrGLywrkh8CCM4iSGu0gAdYpxeurZCFJwjdmUws=)
2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:17:bc:ec:44:60:85:d6:f6:9e:ed:c6:35:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=225e9b36826f310872aa662d55665438728f0567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:61:62:0e:72:b1:4d:8a:c4:41:b5:9a:08:
f9:9d:8f:8e:de:19:ba:82:51:f3:f7:0d:9c:e0:af:
f3:74:07:c9:a0:3b:0e:03:21:fa:27:f7:12:3a:ad:
90:8a:05:4f:88:8b:51:76:0f:bd:9f:0a:e3:77:47:
83:2a:2f:8e:9d:78:96:8b:fb:46:ec:a2:f3:1a:86:
41:e1:a9:3d:55:49:f6:f8:02:85:53:2d:10:87:72:
2c:5e:6b:75:56:07:ac:de:de:cf:e9:bc:ea:95:17:
66:9e:a8:9d:df:90:2c:77:1c:59:cd:8e:d1:61:38:
55:7b:b7:a7:bd:db:2a:85:e9:b7:8b:77:84:51:7a:
9f:16:d0:50:08:0f:2f:bc:fd:fa:3a:76:50:87:46:
ab:28:32:df:04:db:9d:ae:f9:bc:05:c5:3a:74:71:
6d:6b:12:29:75:18:1b:3f:45:82:6b:73:9b:67:ac:
2d:14:9b:c5:7f:f2:21:66:ee:5e:47:ac:e9:5d:0d:
a0:b7:f4:47:25:bc:3b:9f:cb:c6:44:2a:91:1c:43:
56:0e:83:7d:05:4f:8c:7d:58:26:0d:eb:b7:53:98:
f5:c4:aa:56:97:fd:0f:66:68:e6:a9:1a:e4:97:2a:
93:79:ec:60:b5:93:3a:c0:ac:55:bf:e0:2f:38:73:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5E:9B:36:82:6F:31:08:72:AA:66:2D:55:66:54:38:72:8F:05:67
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e7:16:25:4d:b3:55:e5:c8:25:ae:7b:e8:41:75:57:dd:c5:
1c:ef:15:60:fe:2d:9b:74:9a:6e:52:08:5c:cf:3d:68:d0:e5:
8e:f9:28:0c:d8:87:ff:12:cc:71:9e:0c:5b:f5:c6:09:a1:e3:
51:09:ed:de:2a:e6:c6:fc:2b:ac:df:a9:dd:4e:49:da:3a:78:
1c:63:0b:bf:6e:1f:cc:3d:ea:05:8c:2c:fb:23:f6:0f:72:a9:
08:31:3e:30:b7:cd:45:ee:37:61:48:f2:52:11:c0:b2:4d:2d:
8d:f3:d7:d4:1a:7b:7d:0f:e5:77:db:b4:5e:cc:60:46:27:61:
33:4a:38:af:30:02:07:b3:06:dd:08:42:6e:32:e4:83:87:b6:
de:44:b2:f8:c8:1a:ed:c0:7a:f9:8c:75:64:26:64:d4:6d:9a:
61:46:82:20:2b:76:23:e9:3c:9a:36:10:fe:10:cf:d7:4e:e0:
93:28:73:09:f9:25:cd:63:f5:a6:32:96:b6:24:13:d7:1a:07:
d1:46:58:f0:89:c7:63:e1:5e:97:f9:36:b0:d1:ba:6c:7c:83:
ae:d6:f9:ee:3f:af:47:99:50:01:33:27:1c:c1:2c:c5:da:d5:
8a:fc:e4:f1:ee:19:0e:7a:4e:58:e3:9c:97:8c:ae:bd:7e:56:
4d:31:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:36 2025 by rpki-client