Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: JqhJlnLaYC9mR/eiA00Je13WTPzcl/b8AjktCcmi3pc=
Subject key identifier: 69:B2:BC:EA:B0:05:EB:C6:51:3E:61:B6:37:56:65:41:63:0C:7F:D5
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 0199FBEBA58283C60B45981AC816A41B4333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0AA2
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: a/zhoNmNnElkX4IKNoh1v8sA8GeoAbbNVcGcayznUiQ=)
2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a5:82:83:c6:0b:45:98:1a:c8:16:a4:1b:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=69b2bceab005ebc6513e61b637566541630c7fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:58:e0:65:2f:f9:ec:fd:08:65:13:d9:b5:
0c:67:93:29:a2:28:fa:8c:ee:79:1c:44:0b:79:8a:
cc:f8:25:d1:6b:4b:a9:ea:87:0b:8b:9a:2d:67:e1:
05:4f:b9:3e:dc:cc:04:2c:6a:72:d5:e3:7b:8d:53:
1d:8d:0a:44:ad:ce:78:5a:6c:00:bf:e7:d2:fc:f7:
02:09:36:8e:72:7e:3a:8b:f3:69:45:1c:fa:c5:12:
bc:52:be:e5:9d:8f:6f:a0:9e:7d:d4:c4:5d:dc:4f:
d2:a6:28:e2:4b:d9:2b:07:6e:5f:40:6e:6a:48:43:
62:b3:a3:ed:e2:7f:46:c5:82:6e:0d:e4:99:44:b0:
22:d8:73:2b:20:85:53:e1:6c:46:6e:db:f4:c9:da:
18:55:16:aa:ea:41:dc:1c:6d:8a:a3:d8:82:c1:3d:
35:9e:88:27:cd:8d:93:12:a9:96:f4:5b:3b:ab:c4:
c9:37:8d:be:44:05:dc:01:3f:07:fa:2d:dc:b5:3b:
3b:7a:4a:d9:56:12:8d:da:b8:0e:ca:41:54:36:ff:
06:22:fb:1e:d8:ef:e0:a3:36:c2:9d:fb:7b:ae:81:
e0:f8:31:da:54:62:73:87:4b:fa:a7:4d:d7:86:99:
3c:6b:c8:a4:11:e1:ec:81:72:ac:17:83:69:2c:e5:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:BC:EA:B0:05:EB:C6:51:3E:61:B6:37:56:65:41:63:0C:7F:D5
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:47:4a:82:30:9c:c2:0f:d8:dc:0d:6d:74:ef:04:2d:fa:a5:
cc:a4:d7:d8:f5:84:5a:9f:fd:d4:f0:57:b8:60:da:e2:ef:d5:
d0:ac:41:41:5c:41:d4:63:37:34:40:c5:11:38:bb:6e:ac:07:
f8:ef:61:1a:a2:9b:ea:c4:a9:e5:c2:87:a0:58:ca:9b:d5:23:
74:8f:ef:ed:fd:2c:dc:e5:a2:be:c5:54:52:14:c5:2a:63:a3:
9f:69:13:e8:80:81:40:06:c1:7a:e4:7a:8f:15:13:05:33:75:
da:dc:b3:e1:47:87:0d:9b:76:c9:c0:d3:58:2b:97:7b:71:29:
4e:6a:8a:e3:94:c3:03:2f:cc:e0:24:bb:81:69:b2:02:6f:32:
36:f6:0f:03:c2:ce:9b:94:6a:3f:10:3e:9b:28:1d:81:55:c5:
00:a2:54:15:00:ac:ca:06:9e:d1:32:21:5a:4b:f3:85:39:1b:
c6:d9:38:30:49:da:a7:3e:83:a5:41:f5:7a:38:24:ec:96:88:
1f:8c:19:5f:53:50:5e:f2:bd:69:c7:69:ec:7c:3b:87:bd:d1:
1b:6e:c2:a0:92:44:87:69:4d:1d:6a:a3:c2:7e:e7:b4:b1:e0:
ec:60:14:df:ba:f0:a6:dd:21:f5:b4:17:8b:a0:c1:c8:5e:69:
dd:16:76:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766WCg8YLRZgayBakG0MzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk
ODcwOTUwHhcNMjUxMDE5MTAwMjI4WhcNMjUxMDIwMTAwMjI4WjAzMTEwLwYDVQQD
Eyg2OWIyYmNlYWIwMDVlYmM2NTEzZTYxYjYzNzU2NjU0MTYzMGM3ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYtY4GUv+ez9CGUT2bUMZ5Mpoij6
jO55HEQLeYrM+CXRa0up6ocLi5otZ+EFT7k+3MwELGpy1eN7jVMdjQpErc54WmwA
v+fS/PcCCTaOcn46i/NpRRz6xRK8Ur7lnY9voJ591MRd3E/SpijiS9krB25fQG5q
SENis6Pt4n9GxYJuDeSZRLAi2HMrIIVT4WxGbtv0ydoYVRaq6kHcHG2Ko9iCwT01
nognzY2TEqmW9Fs7q8TJN42+RAXcAT8H+i3ctTs7ekrZVhKN2rgOykFUNv8GIvse
2O/gozbCnft7roHg+DHaVGJzh0v6p03Xhpk8a8ikEeHsgXKsF4NpLOVspQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmyvOqwBevGUT5htjdWZUFjDH/VMB8GA1UdIwQY
MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt
YTc0ZTRhODg3ODA0LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0
LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0dKgjCc
wg/Y3A1tdO8ELfqlzKTX2PWEWp/91PBXuGDa4u/V0KxBQVxB1GM3NEDFETi7bqwH
+O9hGqKb6sSp5cKHoFjKm9UjdI/v7f0s3OWivsVUUhTFKmOjn2kT6ICBQAbBeuR6
jxUTBTN12tyz4UeHDZt2ycDTWCuXe3EpTmqK45TDAy/M4CS7gWmyAm8yNvYPA8LO
m5RqPxA+mygdgVXFAKJUFQCsygae0TIhWkvzhTkbxtk4MEnapz6DpUH1ejgk7JaI
H4wZX1NQXvK9acdp7Hw7h73RG27CoJJEh2lNHWqjwn7ntLHg7GAU37rwpt0h9bQX
i6DByF5p3RZ2xw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:06 2025 by rpki-client