Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: VM7o2GtKd6G3zYZ366CG1UuMORvag/Ppp2SnXJL8X8o=
Subject key identifier: 5C:5D:06:1A:65:F0:92:E7:EE:D0:50:4B:6C:66:7A:66:3A:DA:70:49
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 0199FCFD2C7A37811D4C73C75FEBD483A2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: yW2yXG8n7meg839tRUnTNvQ/6lZ/WbkYQVl6R59xCEg=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2c:7a:37:81:1d:4c:73:c7:5f:eb:d4:83:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=5c5d061a65f092e7eed0504b6c667a663ada7049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:38:46:b4:f9:12:bc:43:f0:13:ab:2c:b3:
b3:d6:c9:99:63:30:30:e1:ba:98:ce:af:e1:38:ec:
ea:f5:da:5e:0d:1a:0a:75:c3:e1:0f:d6:65:23:d3:
21:85:fc:3d:88:92:38:f2:3e:10:f1:d1:5e:27:97:
ae:65:fa:e4:d0:3c:84:22:c6:b1:2f:74:37:9a:02:
55:87:36:aa:72:76:7d:c9:cc:59:98:c3:2f:6d:ac:
38:9b:a6:ad:37:30:34:72:1e:e3:2a:62:af:96:7e:
3e:d9:58:3d:cc:12:f5:da:af:89:ce:ee:2e:59:99:
95:22:c0:60:8e:9c:70:0e:91:64:5a:77:74:e9:db:
38:29:96:03:6e:67:05:eb:bb:83:12:eb:f9:44:46:
04:51:da:67:2d:8c:10:4b:74:a1:cd:5d:af:db:1e:
d1:8e:ac:56:a0:bf:c7:9e:f0:7e:6b:fa:32:c4:9c:
87:d4:a3:21:de:7c:dd:84:93:e0:2d:b5:a2:9e:1b:
b1:f7:25:b4:f2:8c:d8:c2:ee:5c:4c:9b:05:18:b1:
f0:7f:3c:27:67:2d:59:4d:e5:25:90:7a:04:f6:86:
fd:59:ef:b1:c4:da:fd:e8:65:8b:89:47:f5:76:67:
17:bb:0c:1d:8e:ab:e7:77:13:9b:db:52:dc:b7:d7:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:06:1A:65:F0:92:E7:EE:D0:50:4B:6C:66:7A:66:3A:DA:70:49
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:84:92:0e:9c:60:57:26:9f:05:b6:df:77:33:5a:c0:c3:
20:db:45:8e:aa:8d:a2:f1:d1:6d:6b:ee:df:13:97:fa:af:03:
e9:83:86:0a:17:0d:72:62:43:73:b0:ea:dc:1e:32:10:92:f1:
b1:1d:10:4c:68:5b:bd:9b:8f:33:dd:90:5c:df:82:d0:fd:ee:
30:8b:f8:f2:95:e9:3a:67:ac:08:10:53:eb:82:ea:24:42:6e:
82:72:77:d0:43:ad:76:24:b6:97:f5:96:16:2f:dc:69:e2:f6:
b8:a0:0b:9f:5e:18:2d:e6:18:52:65:c8:17:2a:85:20:2f:d9:
06:ff:16:bb:57:48:e7:58:61:08:0a:2b:7e:d9:10:74:dc:59:
1e:01:7f:9e:84:10:16:8a:c1:2a:09:f0:fd:25:ea:43:d1:3b:
fc:8a:fb:6a:78:b3:2b:10:77:f0:15:c5:92:63:7c:ca:7a:63:
a2:75:91:94:0e:71:83:47:97:77:6e:c3:58:8b:a3:76:ba:a1:
0d:0a:c1:1c:30:15:ba:75:3a:eb:59:ec:7c:f4:4e:e9:7a:b1:
5a:a3:8c:8e:d3:c7:45:2d:06:85:39:0a:89:83:ca:17:c7:9e:
5d:93:e5:5e:92:e9:a4:b4:53:17:64:41:3b:13:b8:42:4d:19:
a8:2b:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:53 2025 by rpki-client