Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: 7/HRJ++N1NBeAHXaMg3ZYmzMl1nV6Omf5su/G932gYo=
Subject key identifier: A7:A6:BA:16:62:7D:3D:F3:C6:C1:EF:5B:A1:75:04:FF:E7:EE:46:E9
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 019A4C98542336DBC3DEBB5D2798CC5B16A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 02:00:42 +0000
Manifest this update: Tue 04 Nov 2025 02:00:42 +0000
Manifest next update: Wed 05 Nov 2025 02:00:42 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: yB5NbZV5f8j+UHpmEQdiYHglfFd+aRuVBjMkplF6tDE=)
2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:54:23:36:db:c3:de:bb:5d:27:98:cc:5b:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Nov 4 02:00:42 2025 GMT
Not After : Nov 5 02:00:42 2025 GMT
Subject: CN=a7a6ba16627d3df3c6c1ef5ba17504ffe7ee46e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:83:36:83:8d:93:28:07:9e:fc:43:57:3f:
3f:75:8d:1d:c5:a9:38:06:a8:c0:15:45:05:54:e5:
30:48:be:7a:c2:91:44:41:b3:d4:ee:e3:ef:20:10:
79:fb:2f:b7:f0:fb:8a:df:05:27:23:23:83:c9:01:
76:a9:da:c4:3a:84:fd:28:d4:e4:bc:0a:e0:d6:51:
4f:43:2c:11:3a:a9:a7:5c:90:59:24:f2:2f:00:a7:
9d:d1:cc:e5:d1:ab:0c:6d:2b:2e:af:99:4b:5a:0f:
61:f1:bc:4d:4c:f1:e2:4e:57:87:df:53:7b:b4:5c:
bc:af:30:5f:32:f2:b9:ce:b5:94:80:d0:e0:7b:35:
a0:a0:cc:ec:44:74:2c:17:c9:18:f7:bc:3b:9f:5e:
cc:81:96:d6:12:8b:01:f3:36:d4:39:a2:7f:06:6b:
3a:a1:5e:6a:35:10:2e:a5:ee:7b:9d:24:44:af:ff:
91:a2:df:ef:85:5a:7a:0d:a9:28:33:5e:7c:ed:72:
a9:98:67:11:db:88:a7:4e:1c:d5:e3:7c:69:3e:e7:
53:91:56:70:6c:29:40:8d:53:e7:de:69:71:c1:92:
23:2a:e9:43:ac:b3:05:14:dc:5e:5a:80:8d:de:0d:
07:71:3a:c2:1d:26:a6:15:54:9b:9f:53:9e:b7:94:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:BA:16:62:7D:3D:F3:C6:C1:EF:5B:A1:75:04:FF:E7:EE:46:E9
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e9:e8:ff:5b:bf:6a:6e:39:05:08:22:0d:f9:82:1c:ba:b7:
fa:3e:28:17:f0:0d:8e:90:13:1d:d6:38:99:db:bd:2a:19:52:
19:c9:32:36:d7:2c:12:9f:58:3d:61:02:f4:86:3b:37:a4:78:
73:43:36:ed:18:7d:34:48:b8:1b:2a:a8:ab:d0:ff:93:50:c4:
5e:14:87:41:d6:ee:8d:bd:cb:b5:ad:f6:bb:9b:9b:7e:50:bd:
e2:d2:01:dd:19:33:09:54:75:b0:43:65:52:7a:aa:ca:05:12:
dc:cd:8f:f3:16:50:66:a0:be:62:ca:d1:20:34:6d:31:60:a9:
e3:e7:b6:9d:e9:06:6e:53:09:cd:68:af:b0:b0:ae:a7:43:c9:
1f:d2:37:d4:6b:8e:39:0b:c5:2e:30:a4:0d:c2:62:81:70:ea:
d5:3f:b5:e2:19:14:b8:bc:e5:92:f2:2f:b7:a5:6b:2e:f7:71:
9a:95:bc:87:5e:18:73:23:53:39:d0:dc:68:78:b5:ae:c1:46:
eb:f9:1a:ee:7c:3e:e1:bc:fe:54:de:11:b7:49:7c:e6:a7:27:
79:e6:85:02:65:04:54:96:7a:fd:da:cb:90:31:37:14:2c:44:
d7:df:3a:63:f1:3b:1e:3c:60:49:af:b5:dd:cf:9a:3f:08:b9:
c6:08:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:11 2025 by rpki-client