
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: PLM6820RlHh2BgE0Env6jNZJ88VAPRx0UsBsmcDn4Nk=
Subject key identifier: 32:5F:33:7A:39:15:97:DD:44:89:31:F4:ED:68:93:91:E2:CE:A2:A8
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 01984B545FDD067B460856EF7A1A4B8264E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 1553
Signing time: Sun 27 Jul 2025 10:01:17 +0000
Manifest this update: Sun 27 Jul 2025 10:01:17 +0000
Manifest next update: Mon 28 Jul 2025 10:01:17 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: F7jDF1bpwkYJjMnRPwzswUUoY4yuEb2ZPgKiY37Iq28=)
2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:5f:dd:06:7b:46:08:56:ef:7a:1a:4b:82:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Jul 27 10:01:17 2025 GMT
Not After : Jul 28 10:01:17 2025 GMT
Subject: CN=325f337a391597dd448931f4ed689391e2cea2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:1d:f1:4e:e2:97:54:36:da:ea:5d:62:59:
91:c6:46:4e:a1:1d:e0:ad:4f:9a:a3:9a:c2:28:f4:
be:1b:fa:91:b6:63:e7:49:a3:67:0c:28:99:bd:6b:
00:e4:17:37:38:4b:fc:21:06:63:c0:97:9e:1e:01:
75:77:3a:bb:44:28:46:b1:46:2e:f0:e7:a9:31:a8:
06:52:3c:78:77:03:b2:dc:c3:07:81:ca:e0:77:5a:
3e:6f:3f:f0:37:01:06:3f:6e:dc:0e:f5:df:cd:3d:
8d:01:93:31:19:fc:8f:ab:67:c3:a8:28:10:88:dd:
b5:fc:7c:66:f2:51:2c:29:7d:81:07:f9:45:3f:17:
b7:f4:41:67:1c:7e:61:b6:82:77:ad:f4:10:3c:f8:
80:8e:12:74:8a:18:61:b5:c8:c2:44:80:ba:d9:85:
ca:00:b2:61:ec:10:52:db:15:26:06:db:77:b0:4d:
84:8b:0c:e9:0e:30:79:78:65:5e:5a:15:db:84:e4:
e7:36:7f:ed:a2:01:18:23:9f:34:a0:69:3f:e6:7b:
89:02:ac:3f:9e:e9:fb:1d:76:42:7f:fd:88:3f:a7:
84:d3:5d:01:4d:c9:1f:9e:c7:c1:ed:95:f3:57:95:
4e:16:92:c8:d4:da:4a:e5:2e:e4:2c:d0:bc:44:6c:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5F:33:7A:39:15:97:DD:44:89:31:F4:ED:68:93:91:E2:CE:A2:A8
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9a:df:5c:b8:ff:41:ef:93:90:f0:f7:41:c9:15:a9:df:ab:
97:9b:f7:c5:e0:c7:8d:7d:4a:6d:31:48:51:af:5d:c2:5a:6c:
cc:a0:50:63:e8:6d:3f:09:5e:1e:22:85:22:39:92:da:fb:01:
6f:33:50:fa:00:06:fd:58:b8:5d:13:6e:fb:8d:0e:92:79:32:
83:e8:3c:d2:07:a9:88:1e:37:62:ff:2c:af:ff:bd:93:64:c4:
7b:36:70:68:f4:4e:a5:fd:1e:32:50:b0:19:26:b7:b2:33:f8:
e6:25:47:57:e4:4e:5b:9e:ee:1d:f0:0f:86:2c:56:28:b6:7b:
3f:65:e0:e0:4f:d4:7b:a1:2f:63:48:a7:45:76:fc:8a:24:f3:
62:57:82:2c:e5:79:79:1f:d7:7d:96:cb:bc:19:3a:48:1a:b0:
b4:cb:ae:6a:52:b8:1e:a6:d4:a1:3e:09:e5:fe:49:a2:be:6f:
22:2d:90:d8:4f:bb:0d:bd:c2:30:b8:44:7a:df:7e:85:44:37:
74:43:a6:f2:77:49:19:7e:c5:35:48:c0:a9:0d:00:a6:a4:e0:
8c:81:6c:a0:c6:e9:c5:99:4e:6b:58:b3:a9:cd:9b:5e:d7:8b:
ce:f8:86:26:fb:10:f3:90:73:4f:4f:83:a6:e9:d4:a9:a9:b0:
6a:63:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:11 2025 by rpki-client