Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: ovKqbDSo7exBGVAXWa7T1Jwq3F2N+4wRs5c+vkMS9rA=
Subject key identifier: F6:DF:1D:79:3D:DF:8C:8C:BD:6D:E6:79:E4:0D:1E:72:11:60:AB:97
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019A51F5BEC2C420CBA78996BF12B1EA79D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:50 +0000
Manifest this update: Wed 05 Nov 2025 03:00:50 +0000
Manifest next update: Thu 06 Nov 2025 03:00:50 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: VjNjGIWmL8VHRpbFx9SLk4eAVbmSy77EjkkE3jB1Jq0=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:be:c2:c4:20:cb:a7:89:96:bf:12:b1:ea:79:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Nov 5 03:00:50 2025 GMT
Not After : Nov 6 03:00:50 2025 GMT
Subject: CN=f6df1d793ddf8c8cbd6de679e40d1e721160ab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:de:15:fd:fd:08:21:7b:30:23:d5:da:7a:
66:e9:fb:eb:ca:ef:a4:6a:39:61:0c:6c:f9:8a:64:
84:1a:fb:a3:d9:99:49:2f:99:4d:c7:c1:fe:ab:83:
f3:50:c5:64:33:31:42:58:c6:8b:f4:03:1b:ee:3b:
64:55:d2:b8:ec:7f:d6:ba:8c:9a:ad:8c:84:64:bd:
87:82:74:f4:8f:e4:59:6a:60:93:bf:56:f1:f9:85:
aa:61:07:5a:d1:e5:1e:19:1c:36:c1:38:cb:0b:3a:
e4:e5:d8:9d:a1:72:50:10:21:bd:2b:9e:25:30:9e:
53:be:d3:f8:af:7e:68:16:ed:dd:bd:2f:bf:83:14:
f4:59:4a:43:85:03:2e:23:70:86:4d:9b:6a:a2:8f:
f0:0b:f5:a0:75:e5:e2:71:cc:8f:8e:cc:43:c0:b3:
c3:d9:43:fd:8a:9c:88:cb:ed:e0:61:11:a6:19:e9:
53:c6:98:09:11:6a:63:f3:92:5c:d7:86:7e:f1:c6:
51:9e:17:bf:2b:cb:0a:da:ef:b3:70:d2:f5:d5:bc:
a8:08:d1:5e:c2:74:92:0e:2d:1d:0a:8b:33:5a:6c:
f0:df:62:de:df:0b:c9:b0:2b:13:9b:82:2c:e4:36:
99:fa:a4:b1:1a:54:7c:28:36:59:d1:af:69:bc:ab:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:1D:79:3D:DF:8C:8C:BD:6D:E6:79:E4:0D:1E:72:11:60:AB:97
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4c:86:8f:5e:51:ac:80:39:7c:af:f8:09:6f:b9:01:93:bc:
fe:06:3a:78:14:2e:a8:93:54:a2:b3:96:50:17:50:11:23:df:
ef:5c:2a:29:4c:30:60:cd:af:87:1a:c2:93:84:73:7b:01:9c:
e6:35:1a:12:16:af:e1:52:ae:4c:cc:f3:27:11:d4:02:c3:1a:
7c:dd:02:0c:fe:a4:96:5a:ac:54:87:d7:8a:82:fc:59:51:1b:
ac:48:5a:0a:73:3f:a3:a8:23:97:03:98:ec:ee:de:a3:48:d4:
ea:1d:e7:b6:aa:e6:c9:a3:57:be:c0:49:ca:81:94:70:c2:55:
e3:fb:a8:aa:27:e1:8e:88:bd:47:59:ed:c2:67:99:a9:65:99:
7d:2d:d7:9d:f7:03:50:f2:12:15:77:8d:dd:ff:73:ba:23:96:
48:ab:ca:26:61:03:34:c3:b0:e8:15:96:c5:1e:ab:90:e1:5d:
b3:5d:ae:ef:4c:22:45:17:a7:c0:c1:a2:4b:65:45:7d:fd:47:
ea:ee:c7:cf:54:ab:b7:27:af:0e:81:1c:29:83:41:e9:49:62:
31:2f:7d:89:cd:03:88:1a:b5:21:8d:c6:85:45:83:46:60:4b:
03:05:e2:c9:67:67:6a:dd:91:b3:2a:65:54:6e:aa:65:b7:8c:
ca:64:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:07 2025 by rpki-client