Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: 7L0zGh8dyebjr04TAeBskkvi6WnL9sIzFR53limEvIY=
Subject key identifier: 4B:70:ED:ED:95:BE:F6:90:3B:E3:B1:45:9A:87:5F:18:80:DC:3D:15
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 0196B6D950BBEA121286238C95DC3A1D543C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 21:00:17 +0000
Manifest this update: Fri 09 May 2025 21:00:17 +0000
Manifest next update: Sat 10 May 2025 21:00:17 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: uZiTwbCY3Lgkma0CCblDisN2udJjv+ep66NvccEGWcA=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:50:bb:ea:12:12:86:23:8c:95:dc:3a:1d:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: May 9 21:00:17 2025 GMT
Not After : May 10 21:00:17 2025 GMT
Subject: CN=4b70eded95bef6903be3b1459a875f1880dc3d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:91:db:40:7d:11:c7:18:9e:04:2b:11:c6:
34:6f:1b:87:91:c9:cc:e6:0e:4d:3a:be:2e:90:b6:
2a:d3:c4:ad:d5:d2:94:23:40:41:47:41:9d:a7:32:
ee:28:de:1a:ab:a0:27:31:2b:77:76:3f:31:b6:b9:
c7:97:ae:91:f3:0b:a7:5f:e4:7a:eb:17:53:c4:06:
fb:e4:f2:6b:c5:27:e3:9a:1c:16:52:3d:ac:77:55:
fa:d4:e0:6f:19:cb:5b:1c:5e:6c:1d:f9:aa:ba:92:
7c:0c:70:fd:9b:28:26:9d:f4:f3:4f:e6:1c:d4:93:
75:2c:3b:d8:d4:1f:f0:9e:10:2e:17:f5:65:6f:53:
90:3e:f5:eb:ca:3c:6a:38:59:5e:c4:7c:70:fa:17:
e1:e3:a2:db:d2:c4:87:ba:b9:73:8e:27:79:52:a6:
1a:cc:40:3f:c2:91:44:bf:78:5e:4c:cc:0c:c6:1b:
16:ce:5f:18:85:8e:06:8c:4e:eb:8f:dd:26:20:c7:
17:d5:d3:65:93:c0:93:ac:a8:af:05:a8:db:d8:52:
2d:bf:0f:99:53:7c:2a:e6:a9:68:89:48:aa:07:00:
cc:97:79:8a:06:17:21:8c:af:32:61:77:c5:a5:b4:
f5:f0:3b:c2:f9:0e:1f:33:ab:d9:65:e9:22:dc:e7:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:70:ED:ED:95:BE:F6:90:3B:E3:B1:45:9A:87:5F:18:80:DC:3D:15
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5c:d5:ea:97:5a:c4:99:30:ff:15:3c:8c:9c:78:eb:34:33:
57:0e:00:05:cd:a2:97:9b:1f:58:ad:9d:5d:ef:ee:37:76:1c:
bf:4a:7c:32:3f:88:c0:01:7c:4d:28:41:1e:02:06:41:ee:2b:
aa:7c:58:8e:db:d7:25:d1:ca:1e:eb:ed:f9:dc:0b:e0:e7:5f:
25:9f:ee:55:13:b6:9e:83:30:81:06:06:e5:e7:39:0d:02:7e:
73:fd:d4:74:0d:8f:ce:a5:62:84:05:3b:aa:9a:b9:f9:0d:5f:
e2:f4:dc:af:af:58:a9:4b:20:7e:8f:18:55:a0:8e:e2:a0:81:
c0:ac:52:7f:df:d5:f9:98:45:d4:21:ed:17:dd:ef:c2:02:3c:
af:93:52:a7:fd:c0:84:39:34:5e:58:ed:8e:ac:83:ca:fa:41:
ea:cf:42:b7:f2:b9:3a:08:02:af:c6:af:d8:48:31:9d:cd:5c:
fa:f5:3e:5e:77:db:01:6a:d1:10:04:8f:10:83:19:2b:36:30:
4e:a8:7c:16:15:fe:38:d5:84:db:ec:b7:e5:e3:2e:0b:f8:67:
c3:ee:7f:8c:2e:93:18:30:6f:ea:d3:49:70:46:63:5e:19:7e:
6d:99:ea:3c:bb:39:c4:fa:ae:69:e9:88:ea:59:44:34:27:18:
bb:d7:5b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa22VC76hIShiOMldw6HVQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjk4YmU5MDJjMDZmZWFiNWY1YWFmNzI5ZTBiYmMzN2Ji
YzM0MWMwHhcNMjUwNTA5MjEwMDE3WhcNMjUwNTEwMjEwMDE3WjAzMTEwLwYDVQQD
Eyg0YjcwZWRlZDk1YmVmNjkwM2JlM2IxNDU5YTg3NWYxODgwZGMzZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+eR20B9EccYngQrEcY0bxuHkcnM
5g5NOr4ukLYq08St1dKUI0BBR0GdpzLuKN4aq6AnMSt3dj8xtrnHl66R8wunX+R6
6xdTxAb75PJrxSfjmhwWUj2sd1X61OBvGctbHF5sHfmqupJ8DHD9mygmnfTzT+Yc
1JN1LDvY1B/wnhAuF/Vlb1OQPvXryjxqOFlexHxw+hfh46Lb0sSHurlzjid5UqYa
zEA/wpFEv3heTMwMxhsWzl8YhY4GjE7rj90mIMcX1dNlk8CTrKivBajb2FItvw+Z
U3wq5qloiUiqBwDMl3mKBhchjK8yYXfFpbT18DvC+Q4fM6vZZeki3OeH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtw7e2VvvaQO+OxRZqHXxiA3D0VMB8GA1UdIwQY
MBaAFNNpi+kCwG/qtfWq9yngu8N7vDQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUt
ZGRjMzI1MjFkNzkwLzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUtZGRjMzI1MjFkNzkw
LzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflzV6pda
xJkw/xU8jJx46zQzVw4ABc2il5sfWK2dXe/uN3Ycv0p8Mj+IwAF8TShBHgIGQe4r
qnxYjtvXJdHKHuvt+dwL4OdfJZ/uVRO2noMwgQYG5ec5DQJ+c/3UdA2PzqVihAU7
qpq5+Q1f4vTcr69YqUsgfo8YVaCO4qCBwKxSf9/V+ZhF1CHtF93vwgI8r5NSp/3A
hDk0XljtjqyDyvpB6s9Ct/K5OggCr8av2Egxnc1c+vU+XnfbAWrREASPEIMZKzYw
Tqh8FhX+ONWE2+y35eMuC/hnw+5/jC6TGDBv6tNJcEZjXhl+bZnqPLs5xPquaemI
6llENCcYu9dbhA==
-----END CERTIFICATE-----
Generated at Sat May 10 07:00:47 2025 by rpki-client