Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: tMFj3ULCRGSvGoz+/EbwtJ0opB+eeS9SlEKwHodLqiE=
Subject key identifier: B3:5F:CE:67:B5:09:F9:CD:50:99:09:5F:9C:07:1F:C7:73:AC:A2:AF
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 019A4EF4025E647A6EADEFFAFD5798899E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 165E
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: w7+ZgMJ916VwKxuEqPEI6ZnB9/Ls1aTDc/fBkqqm2JM=)
2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:02:5e:64:7a:6e:ad:ef:fa:fd:57:98:89:9e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=b35fce67b509f9cd5099095f9c071fc773aca2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:25:80:86:fc:76:12:b1:8d:41:85:d7:82:
b3:06:59:c9:2e:22:da:63:3b:0c:a8:80:5c:eb:37:
76:f6:e7:90:92:17:c8:2e:53:96:20:91:14:be:51:
11:62:b2:7a:e2:4d:38:4f:24:b3:80:1e:bf:20:82:
16:7d:48:a1:85:2d:1d:e5:47:02:c8:b8:26:da:6f:
91:3b:1e:cf:7b:85:ec:a2:51:cf:2f:df:96:c8:88:
bd:96:6f:16:1f:c4:6b:51:5b:d9:3a:de:d2:74:20:
a9:7a:0b:ef:8f:52:94:93:b6:84:47:b1:55:43:0c:
c3:46:17:76:64:2d:c3:44:b5:fc:98:86:5f:a7:bb:
eb:84:0a:27:f8:97:06:8d:28:40:79:dc:6a:39:42:
d0:99:06:4b:cc:06:e6:58:26:d4:25:e7:be:7e:6e:
6d:7c:7b:a2:0c:4f:57:1e:66:64:de:dc:f4:8c:11:
01:71:a2:96:75:a2:bc:cb:49:fb:c6:09:f1:5b:89:
c2:53:85:1c:f9:2c:67:af:64:03:cd:12:dd:c8:21:
db:d4:bb:a5:66:c1:3b:0e:a5:0c:7e:cd:fd:36:78:
61:1d:a8:b1:56:f4:4f:2e:f9:89:73:d0:d3:ad:27:
0b:41:64:cc:dd:2f:05:8e:90:0f:8c:1a:ad:86:94:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:CE:67:B5:09:F9:CD:50:99:09:5F:9C:07:1F:C7:73:AC:A2:AF
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2f:90:34:c4:48:40:38:1c:9e:76:8d:0f:47:15:d6:00:12:
b7:58:36:76:d1:05:3c:f9:01:5d:81:d3:a7:33:93:52:6f:27:
36:63:0b:83:9a:43:5d:8b:51:ac:80:56:62:eb:da:a0:24:a4:
3a:79:1e:a7:30:8b:f1:e7:76:84:eb:00:f9:a8:24:4a:6e:83:
53:af:d2:8b:b2:7c:3e:bf:02:56:82:40:d2:64:af:18:0c:61:
da:9a:b1:f7:cd:d0:ea:e5:43:31:7b:76:aa:fd:6e:a4:1c:2b:
9c:f4:b2:fa:61:a3:2c:5e:8b:80:d4:90:c3:27:62:9d:a1:78:
d2:1d:20:b7:a7:8a:9f:29:69:82:5f:4b:e8:8a:43:03:c3:af:
72:44:8f:95:09:54:7b:c5:72:5e:80:6d:00:8d:4f:44:ee:88:
d3:e6:7a:98:3b:fd:d0:81:01:ad:a9:f6:a7:57:a3:78:ee:32:
2e:d9:14:e7:87:3b:2a:d3:05:74:8e:e7:11:e7:ae:37:49:b9:
ad:d6:f8:cc:5a:4f:ef:dc:9a:df:50:6b:00:08:2b:6f:b4:0f:
e2:f4:a7:a2:02:2d:5c:31:40:f8:db:90:67:fc:de:76:1d:b9:
75:e9:ac:4a:60:5e:5f:5b:9f:57:29:65:3e:2e:a5:b1:8e:e0:
a4:75:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:08 2025 by rpki-client