Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: LOAe5VuC5qGudxRupr4dK5sC5KNh9IXDM+bH0ZN2pUc=
Subject key identifier: 2F:FE:00:FC:0F:68:7C:F2:21:F7:12:60:D6:9F:7A:B7:4D:FE:4A:2D
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 0199FF599BFB7F18657A5E847C012860346F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 02:01:26 +0000
Manifest this update: Mon 20 Oct 2025 02:01:26 +0000
Manifest next update: Tue 21 Oct 2025 02:01:26 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: yHRO8WWWthxxUfEexlfxc/d/ATx5pCjaN41baUD12sM=)
2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:9b:fb:7f:18:65:7a:5e:84:7c:01:28:60:34:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Oct 20 02:01:26 2025 GMT
Not After : Oct 21 02:01:26 2025 GMT
Subject: CN=2ffe00fc0f687cf221f71260d69f7ab74dfe4a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:b9:3a:4a:54:21:90:f4:cf:cd:d7:7c:e9:
12:f1:86:f9:41:61:95:f6:df:e0:8f:8f:3a:5e:b0:
01:89:71:c5:ae:16:48:6e:13:b5:92:52:27:82:45:
a8:e0:5b:3d:66:b2:7b:92:04:b7:e0:7f:46:5b:6f:
2d:c5:17:45:5b:9e:1e:1e:65:b4:67:0c:0a:de:71:
a3:a9:95:92:14:e9:57:57:db:32:ca:bf:2d:b3:f2:
f6:5d:87:8c:d5:7d:8a:ee:25:b4:bb:39:23:c4:35:
52:93:d0:49:ac:74:03:83:e1:55:c1:70:3f:d5:0f:
de:99:27:ca:3d:c9:7b:9d:5b:12:5a:d8:be:cc:45:
3d:06:34:9a:14:15:90:8e:4f:12:0e:fd:d2:ec:05:
e4:bb:db:4e:15:70:aa:67:7f:8b:3c:34:c0:40:ce:
98:18:76:8a:61:d0:32:e1:40:77:d6:33:61:ed:00:
98:e8:e1:90:57:a1:cf:61:e1:0e:8e:88:aa:76:fb:
28:21:72:a1:e0:86:82:80:36:85:c9:12:0c:6a:aa:
4f:9f:90:05:07:a8:1d:73:2e:a7:db:0e:69:0b:f2:
29:74:cf:ee:66:a8:b2:46:18:50:89:c0:02:24:6e:
8f:32:8d:e6:d1:63:be:99:39:15:ec:22:f0:8d:c8:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:00:FC:0F:68:7C:F2:21:F7:12:60:D6:9F:7A:B7:4D:FE:4A:2D
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:24:19:40:ce:d9:2f:a4:20:ad:55:4b:8a:84:ac:d6:85:
7d:80:49:a0:e3:4d:86:c8:f6:8a:12:87:81:71:4f:84:49:35:
58:f3:b4:d6:d5:46:41:cb:54:3f:6e:6c:b2:4d:71:16:fb:b6:
0b:ab:05:7b:15:a1:5f:e3:0a:a3:b0:6a:0f:c0:a6:6a:ce:fd:
0a:92:48:db:6f:12:52:13:e1:4e:03:bc:9c:01:f3:99:3e:3b:
85:fd:f3:e0:f5:f1:7d:86:2c:ba:11:46:6a:71:aa:44:f7:fe:
be:aa:50:a0:91:70:95:68:46:3b:7e:02:48:97:2d:d4:7f:00:
9d:74:64:57:c1:51:6a:fb:89:fa:5e:0b:7f:62:9f:d9:55:36:
a9:85:27:a2:f1:cd:23:45:a2:3b:f6:66:ee:58:e3:05:04:5a:
12:c8:41:0b:42:37:a4:3e:25:ed:1c:7d:e1:31:b9:7f:0f:3a:
23:83:e5:52:97:fc:6a:61:20:ce:e0:7c:59:aa:1c:a4:b8:34:
76:e5:6f:f3:d2:a3:60:f6:28:f5:d8:91:47:f9:08:46:56:62:
a5:1d:02:44:9f:f2:5f:06:ae:ab:e3:57:60:be:ea:dc:78:e1:
4a:16:9f:70:19:46:3e:fd:f0:46:62:df:fe:8c:1d:ec:8d:ba:
92:0b:d5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WZv7fxhlel6EfAEoYDRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1
ZGNhZjUwHhcNMjUxMDIwMDIwMTI2WhcNMjUxMDIxMDIwMTI2WjAzMTEwLwYDVQQD
EygyZmZlMDBmYzBmNjg3Y2YyMjFmNzEyNjBkNjlmN2FiNzRkZmU0YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CO5OkpUIZD0z83XfOkS8Yb5QWGV
9t/gj486XrABiXHFrhZIbhO1klIngkWo4Fs9ZrJ7kgS34H9GW28txRdFW54eHmW0
ZwwK3nGjqZWSFOlXV9syyr8ts/L2XYeM1X2K7iW0uzkjxDVSk9BJrHQDg+FVwXA/
1Q/emSfKPcl7nVsSWti+zEU9BjSaFBWQjk8SDv3S7AXku9tOFXCqZ3+LPDTAQM6Y
GHaKYdAy4UB31jNh7QCY6OGQV6HPYeEOjoiqdvsoIXKh4IaCgDaFyRIMaqpPn5AF
B6gdcy6n2w5pC/IpdM/uZqiyRhhQicACJG6PMo3m0WO+mTkV7CLwjcjQ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/+APwPaHzyIfcSYNaferdN/kotMB8GA1UdIwQY
MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt
NjliOGQ2YjUzZThjLzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj
LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOowkGUDO
2S+kIK1VS4qErNaFfYBJoONNhsj2ihKHgXFPhEk1WPO01tVGQctUP25ssk1xFvu2
C6sFexWhX+MKo7BqD8Cmas79CpJI228SUhPhTgO8nAHzmT47hf3z4PXxfYYsuhFG
anGqRPf+vqpQoJFwlWhGO34CSJct1H8AnXRkV8FRavuJ+l4Lf2Kf2VU2qYUnovHN
I0WiO/Zm7ljjBQRaEshBC0I3pD4l7Rx94TG5fw86I4PlUpf8amEgzuB8WaocpLg0
duVv89KjYPYo9diRR/kIRlZipR0CRJ/yXwauq+NXYL7q3HjhShafcBlGPv3wRmLf
/owd7I26kgvVbg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:35 2025 by rpki-client