Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: 8Az0hdOrqXI8mad2GNGZAeTLSWwkZ7FxRac7bQVp1n4=
Subject key identifier: 94:13:F9:D2:69:5E:FF:46:93:87:81:2F:7A:59:03:6E:42:3C:C5:39
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 01976961822845CF1DF37BA1D0BBFFFAD043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 14DE
Signing time: Fri 13 Jun 2025 13:01:27 +0000
Manifest this update: Fri 13 Jun 2025 13:01:27 +0000
Manifest next update: Sat 14 Jun 2025 13:01:27 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: iNFfowegNsvMr6ZFkQYPovWFagXNax+lSGDt00Ji0wQ=)
2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:82:28:45:cf:1d:f3:7b:a1:d0:bb:ff:fa:d0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Jun 13 13:01:27 2025 GMT
Not After : Jun 14 13:01:27 2025 GMT
Subject: CN=9413f9d2695eff469387812f7a59036e423cc539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:c2:09:5b:4b:27:c8:d2:55:b0:de:0b:86:
fb:72:2d:96:e4:b6:77:f0:6f:2b:b9:7b:30:05:cd:
41:f0:79:3b:8a:ba:3d:37:6d:9d:a7:c6:cc:43:f8:
6f:d4:9d:d3:35:b6:7b:70:43:2e:e4:d3:79:4a:1b:
a6:a4:b1:af:a7:31:f2:03:15:2e:b1:69:6a:55:9c:
d7:60:72:1c:c4:7f:14:67:22:b2:d6:f5:4d:d4:aa:
2f:89:f5:7c:1a:83:fa:ff:67:84:94:b6:67:cc:59:
4b:3b:0a:8e:dc:fe:0b:7c:13:4e:c0:dd:c1:70:11:
51:b0:75:e7:97:60:db:9f:9c:74:ad:38:27:19:83:
a2:d5:7f:62:e9:e1:9c:40:c9:be:e3:28:d9:7e:88:
c2:93:56:01:e0:89:33:70:97:07:cc:9f:5f:d3:48:
ba:02:fa:9c:15:89:78:32:bf:78:c8:d4:1f:97:80:
9c:61:fe:9a:11:c9:5e:c1:19:58:75:54:68:7c:04:
ca:8a:20:a3:69:8b:18:9c:3d:3d:bb:5d:e7:42:c9:
4d:f2:14:34:42:63:6e:4b:df:18:c0:fd:2b:d4:2c:
00:51:35:e9:a7:cf:97:61:8d:da:2a:e3:fa:cd:2f:
09:03:d0:a8:7f:46:66:21:06:42:e3:72:a6:3a:fa:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:F9:D2:69:5E:FF:46:93:87:81:2F:7A:59:03:6E:42:3C:C5:39
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:67:9e:14:07:fe:4c:ed:28:a8:1e:ae:02:c9:56:1f:53:a8:
b8:09:99:12:bc:1a:04:c8:77:57:67:63:96:e7:f0:0d:d6:6a:
4b:70:39:cd:85:5a:45:e0:bb:3b:71:52:1a:d4:6a:d7:89:a8:
fc:66:35:ed:11:83:e4:54:91:a0:3c:e6:2d:6b:80:28:35:79:
66:29:3d:a0:34:51:ae:ab:54:ef:91:1d:9e:09:d8:1f:79:db:
3b:f8:3e:bf:fd:be:f8:2d:22:5b:ff:14:cf:57:6d:fc:07:7a:
6a:10:6a:87:19:d8:a6:e2:af:6d:3d:21:c7:93:7d:57:e7:54:
f5:5c:09:ce:03:4c:67:26:2e:b4:4d:8d:37:b1:b9:cc:87:4b:
a5:50:3b:0a:0c:b8:b1:d7:3e:60:e3:92:c5:72:15:8a:6e:d6:
89:97:55:52:18:5a:c1:7f:4c:be:01:75:40:fe:16:87:bf:65:
96:fa:fd:e7:41:8e:c1:8c:ed:3f:6e:08:e7:a6:95:b3:27:72:
42:67:7c:13:93:68:0e:7d:9f:a9:c0:16:21:03:bc:0f:bd:0e:
b3:3d:2d:42:5d:f0:49:b5:b0:d8:5d:08:66:03:d9:4c:b9:50:
0c:3e:ab:b2:54:43:0b:20:12:5c:54:c7:08:9e:94:4e:e0:a7:
28:b2:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:22 2025 by rpki-client