Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: TbneL1EMI6Yfeh0JKtqPpMmJIHUuvGJOR/PLMNFOo1s=
Subject key identifier: B8:ED:FA:3F:54:31:0A:7B:B7:1B:80:97:8C:C2:83:43:82:CF:BE:E7
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 0198D65FE961B6D769A0934D808AAA68FD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0A0A
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: ty/5ZSmNZ8SqV03qtq6dx6hlO6ipL519lxbmxXXCblY=)
2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e9:61:b6:d7:69:a0:93:4d:80:8a:aa:68:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=b8edfa3f54310a7bb71b80978cc2834382cfbee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:1f:d0:59:d9:ac:ab:2c:2f:84:cc:08:5b:
90:6e:57:31:08:79:db:b9:ed:e0:98:d1:04:4a:36:
5b:a4:9b:4e:81:bd:f6:50:ec:41:61:7d:d1:74:ce:
eb:21:53:ea:81:f5:7a:34:e5:47:58:89:43:56:2b:
81:18:b3:05:8d:16:ba:39:cc:91:de:b8:0c:1b:a7:
dd:0f:fd:59:d2:07:74:7c:71:99:66:98:e0:af:ce:
07:a3:ab:d3:dd:2c:d1:d2:cb:92:8f:2f:a9:c1:0d:
60:ff:2b:50:6e:00:2b:50:3c:09:ec:60:55:59:e1:
cc:35:55:a5:8d:e4:06:8d:b6:bc:90:91:e3:c2:23:
b8:d6:4e:42:f5:9f:b9:1e:80:38:8a:ab:ee:74:7d:
db:f8:4a:8f:c3:be:b5:ba:23:61:75:91:e6:f3:41:
5b:5c:1d:f9:c7:a6:74:36:70:54:e5:f4:e4:e8:30:
15:5a:8f:84:bc:b9:0f:25:8f:50:17:82:81:4e:a3:
75:c0:46:17:3d:9a:2c:77:81:ea:e2:25:de:27:c1:
51:78:26:89:6a:3a:9d:95:63:2b:57:cb:7e:ca:e9:
37:b0:51:4c:5e:ec:bc:41:5a:a3:d2:50:5c:bc:42:
c4:8e:dd:ad:6b:8a:21:66:64:0c:a6:a9:34:12:d0:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:ED:FA:3F:54:31:0A:7B:B7:1B:80:97:8C:C2:83:43:82:CF:BE:E7
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1a:85:dd:c4:e1:39:ad:fa:72:3d:52:9d:9a:43:6c:05:cf:
48:f3:ee:c8:a1:90:d2:c1:b8:dc:15:4e:c9:70:d9:24:7a:c4:
d0:f4:bb:8d:d1:82:19:25:37:55:56:dc:af:da:1f:47:9a:5c:
32:5a:7a:4b:aa:78:7f:23:7c:04:3c:6a:d4:d9:ac:eb:5a:8f:
f3:df:b7:d0:24:44:df:42:cc:10:28:4e:66:a8:6b:eb:66:7a:
46:b0:c1:a6:81:7e:0f:44:6d:06:db:da:eb:d8:20:72:6b:35:
e4:c0:08:23:b4:a0:af:65:3a:43:3e:8f:1f:93:70:7e:79:57:
dd:ba:cd:98:bf:83:da:00:98:70:87:7b:03:14:f5:2c:3e:1d:
6d:42:23:d2:03:e1:32:b5:e1:c9:09:5f:a6:ce:fb:7f:03:25:
11:ee:7b:7a:5a:87:16:14:bd:27:74:b1:8c:98:77:35:c2:8d:
92:4d:f8:bf:28:1d:3d:1a:7f:cd:17:76:5a:a9:db:03:00:1e:
ec:83:50:ee:54:03:2e:63:6f:df:65:6e:6a:16:90:77:1c:53:
da:50:3d:e8:aa:3f:80:bc:f7:0a:12:8e:b7:59:ec:26:eb:08:
ea:6d:bf:bd:98:a2:74:47:86:58:58:fc:36:c8:e5:34:74:31:
7c:a8:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:20 2025 by rpki-client