Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: O3UN9DUOLpORFZHjSKe3xR/0r+ADsGiwUt56N2J0p5U=
Subject key identifier: B2:BF:C5:3A:2B:2D:37:0A:17:95:67:CE:0E:AC:EE:51:B5:08:56:64
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 019A4EF56079FF93EDDEC19469DDF1D307A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0ACD
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: Ap1bZEWIGee5Hx0dmlctVwjtRX+5PGTC58yldHHGx+E=)
2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:60:79:ff:93:ed:de:c1:94:69:dd:f1:d3:07:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=b2bfc53a2b2d370a179567ce0eacee51b5085664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:ea:37:e4:ee:9b:c5:d7:52:83:32:e1:5d:
59:95:a4:15:d7:94:92:89:1e:bf:c4:5b:90:94:79:
ce:22:a8:91:58:5e:84:41:53:29:2f:d6:d4:9c:4a:
b6:9c:8e:99:bc:ce:ad:e5:eb:62:3c:64:ad:5d:b2:
88:eb:c4:a4:b6:31:99:8b:ea:c8:c5:d1:ff:ca:98:
36:dd:38:42:d6:f0:1c:f5:d2:81:7b:ee:8e:27:3c:
56:6d:07:09:2a:f9:6d:09:e6:31:20:03:32:13:f5:
17:64:13:fc:29:a9:a1:0c:71:06:5d:a9:fa:80:8e:
57:9a:c3:b0:95:21:20:c3:be:e1:62:d1:25:e4:62:
64:2a:52:ce:6e:d1:66:9c:b4:4c:b1:36:95:65:6d:
52:c9:14:25:8f:3e:ca:1f:d9:2e:2c:c5:9f:78:4b:
4d:b0:9c:6b:6d:90:0a:72:f2:3f:bb:e8:3e:8c:1f:
0c:39:19:96:3a:5d:13:be:db:05:d4:1f:2e:72:35:
4f:3a:45:53:8d:e6:32:43:55:76:63:dc:d0:64:1c:
41:ab:0a:78:e2:e0:31:5c:7c:67:a7:5c:e5:b9:26:
5b:28:02:9d:2e:39:31:fc:85:cf:d3:f2:dc:0f:1f:
71:17:fe:4c:fb:9a:20:53:57:23:e3:4f:92:23:67:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:C5:3A:2B:2D:37:0A:17:95:67:CE:0E:AC:EE:51:B5:08:56:64
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:14:a5:bf:33:61:3c:aa:de:40:57:1f:7c:7a:10:ff:2c:f0:
1f:07:83:62:d3:87:ee:53:cc:38:60:b3:cc:ab:4c:14:75:15:
c6:c5:35:46:dd:e0:aa:84:ca:c5:28:be:7e:d2:9d:80:08:23:
c0:29:47:ee:e8:d4:e8:da:e3:bd:d5:db:52:20:14:a9:3e:94:
ea:6f:cf:08:19:d2:e0:ab:cc:45:c6:11:f2:b1:61:b2:fa:bd:
2e:be:ca:31:d9:02:17:46:61:2f:24:bb:0c:17:72:d7:8e:6a:
7a:56:d7:d8:f8:57:d2:d2:42:64:67:b6:58:81:61:d2:70:18:
fc:ac:01:f9:5b:36:f9:80:e6:c9:9c:b8:40:c9:eb:01:ab:74:
f9:f2:27:11:8a:1c:7a:9e:30:5c:c7:80:97:c0:28:7a:1c:17:
19:33:49:40:73:aa:e6:01:d8:72:3d:6d:71:e7:37:bb:99:8d:
8f:86:57:41:d9:55:91:1d:f0:67:5c:eb:c6:58:60:a7:62:fd:
9b:c9:7b:ec:1d:db:31:5a:ad:8e:83:03:5d:60:8f:4a:44:12:
ee:d1:24:96:65:5b:6b:b4:00:c2:49:7a:55:96:1d:1e:93:cd:
96:9d:cc:9b:6e:30:a4:9b:39:dc:b2:27:9b:36:d9:fc:4b:3b:
fc:87:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:52 2025 by rpki-client