Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: mgfz9eTaia33VOHcY7uGSSWZFt9CKxOCIrI3o6/vTlo=
Subject key identifier: 70:58:4D:C8:4A:BE:C9:24:9B:3E:FD:8B:9E:F0:FB:4F:34:C2:13:5F
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 01987CAE9CF3893082A5245736C410BE92C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 00:01:14 +0000
Manifest this update: Wed 06 Aug 2025 00:01:14 +0000
Manifest next update: Thu 07 Aug 2025 00:01:14 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: OupOsWRukYiuRK9njkmCyqrt9HmNxkqMH7ZoQ1lILGg=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:9c:f3:89:30:82:a5:24:57:36:c4:10:be:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Aug 6 00:01:14 2025 GMT
Not After : Aug 7 00:01:14 2025 GMT
Subject: CN=70584dc84abec9249b3efd8b9ef0fb4f34c2135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:9e:1f:10:c3:9f:52:21:2e:41:22:d3:4c:
55:91:4b:47:b4:fc:84:44:44:b7:77:55:01:b0:67:
53:e0:39:cc:87:51:da:56:51:e9:2c:d2:1d:e4:21:
22:8f:50:d0:be:ce:e4:2e:75:81:0b:96:ba:07:c2:
2f:7e:3a:ab:47:7e:41:6f:0e:2c:7a:4b:52:27:c3:
d0:25:00:90:16:71:0d:72:fa:c6:03:e1:7c:13:23:
3a:79:5d:47:70:aa:2f:71:d1:41:48:ee:f8:db:66:
0e:c3:36:be:d3:87:68:e9:4c:3c:5d:48:7a:db:cd:
ff:d9:63:b4:a9:32:0e:e7:e5:bb:16:4e:20:18:d6:
78:ec:83:be:31:c7:bf:07:8d:ad:4d:d1:a9:17:7d:
2a:81:72:e0:86:7f:d9:f9:82:e6:77:ee:48:bd:3a:
34:59:2f:04:cf:5e:bc:10:95:59:46:22:b6:02:81:
2d:ce:9e:24:0b:57:6c:68:9d:6b:c1:20:27:07:8f:
ef:80:16:52:3f:78:4b:34:07:f8:18:fa:9a:31:1a:
99:94:33:f8:40:f8:94:3f:1c:48:ec:8e:ee:71:f7:
14:52:41:83:66:39:37:07:1e:e1:51:7e:96:79:37:
21:bd:bd:d9:9a:b2:4b:c4:ae:4b:98:da:dd:2a:24:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:58:4D:C8:4A:BE:C9:24:9B:3E:FD:8B:9E:F0:FB:4F:34:C2:13:5F
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:32:87:3f:07:2f:6c:9d:a2:2a:03:80:9a:69:6e:56:ca:
13:88:d6:12:d6:5a:cb:a7:c9:7b:0b:49:9b:3c:b7:ea:61:c4:
68:6c:04:56:2b:03:69:d6:2b:a1:eb:43:85:8e:4d:eb:56:27:
ce:a1:dc:3c:c0:e9:18:bc:b4:89:8c:84:d1:3f:ef:94:78:fa:
4b:39:ea:13:d5:1d:ed:04:f8:d7:b8:91:9f:d8:26:f4:11:b8:
a6:46:c5:ec:c2:ff:92:b0:54:30:eb:a3:3d:aa:81:26:40:43:
67:aa:cf:dc:b2:c0:5b:9f:b5:bd:67:7b:4e:b0:d0:3e:0e:b4:
aa:20:28:6d:d3:75:88:35:8d:59:93:3b:1e:f9:a4:64:39:0e:
b4:da:bc:ea:d6:7d:67:2b:12:31:95:8e:36:19:46:fa:33:f7:
d2:89:64:27:90:cc:38:db:f9:b3:e3:9c:b4:82:ca:6a:1e:8e:
05:44:79:47:2c:b8:33:de:08:82:d7:3e:aa:71:06:05:b9:bc:
d1:32:bb:60:c5:82:21:da:c5:b2:12:88:bc:2b:fe:d2:e6:0f:
8a:34:82:9a:61:a5:e4:08:b0:0f:14:7b:c6:8e:ba:ee:9d:6a:
29:07:f1:0e:a8:a1:04:6d:8f:6b:e6:8d:93:c9:ea:aa:cb:4b:
56:db:e4:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rpzziTCCpSRXNsQQvpLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjk4YmU5MDJjMDZmZWFiNWY1YWFmNzI5ZTBiYmMzN2Ji
YzM0MWMwHhcNMjUwODA2MDAwMTE0WhcNMjUwODA3MDAwMTE0WjAzMTEwLwYDVQQD
Eyg3MDU4NGRjODRhYmVjOTI0OWIzZWZkOGI5ZWYwZmI0ZjM0YzIxMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYueHxDDn1IhLkEi00xVkUtHtPyE
RES3d1UBsGdT4DnMh1HaVlHpLNId5CEij1DQvs7kLnWBC5a6B8IvfjqrR35Bbw4s
ektSJ8PQJQCQFnENcvrGA+F8EyM6eV1HcKovcdFBSO7422YOwza+04do6Uw8XUh6
283/2WO0qTIO5+W7Fk4gGNZ47IO+Mce/B42tTdGpF30qgXLghn/Z+YLmd+5IvTo0
WS8Ez168EJVZRiK2AoEtzp4kC1dsaJ1rwSAnB4/vgBZSP3hLNAf4GPqaMRqZlDP4
QPiUPxxI7I7ucfcUUkGDZjk3Bx7hUX6WeTchvb3ZmrJLxK5LmNrdKiR/AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBYTchKvskkmz79i57w+080whNfMB8GA1UdIwQY
MBaAFNNpi+kCwG/qtfWq9yngu8N7vDQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUt
ZGRjMzI1MjFkNzkwLzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUtZGRjMzI1MjFkNzkw
LzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1Yyhz8H
L2ydoioDgJppblbKE4jWEtZay6fJewtJmzy36mHEaGwEVisDadYroetDhY5N61Yn
zqHcPMDpGLy0iYyE0T/vlHj6SznqE9Ud7QT417iRn9gm9BG4pkbF7ML/krBUMOuj
PaqBJkBDZ6rP3LLAW5+1vWd7TrDQPg60qiAobdN1iDWNWZM7HvmkZDkOtNq86tZ9
ZysSMZWONhlG+jP30olkJ5DMONv5s+OctILKah6OBUR5Ryy4M94Igtc+qnEGBbm8
0TK7YMWCIdrFshKIvCv+0uYPijSCmmGl5AiwDxR7xo667p1qKQfxDqihBG2Pa+aN
k8nqqstLVtvkRA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:12 2025 by rpki-client