Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: OKFV3RFyeY+w5IeQejVvrSxlNU9yCDWmanXJXgSqmOM=
Subject key identifier: EA:E8:0D:9C:BD:AF:ED:31:AA:3D:D4:7D:DD:82:DF:D0:7C:79:27:F4
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 01984A0A0A9822700E7CFFD81546AF25CD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0A3D
Signing time: Sun 27 Jul 2025 04:00:28 +0000
Manifest this update: Sun 27 Jul 2025 04:00:28 +0000
Manifest next update: Mon 28 Jul 2025 04:00:28 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: DdQU2WHL86mSA04b1bllK2+n1iQFMgyAxskAep7EupM=)
2: _l8jrf0myWSyZHEusIZ6cmnQafE.roa (hash: gjseV+JPjv3tCrp8kMrsCJYjL6BjqLfcHlxvbKTgJog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0a:98:22:70:0e:7c:ff:d8:15:46:af:25:cd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Jul 27 04:00:28 2025 GMT
Not After : Jul 28 04:00:28 2025 GMT
Subject: CN=eae80d9cbdafed31aa3dd47ddd82dfd07c7927f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:be:ee:df:a3:4b:88:c2:5e:a1:a2:81:3e:
6d:a4:08:cf:36:23:31:70:ca:ac:61:64:97:f8:84:
82:9c:6e:b7:ae:20:0c:7d:7a:1b:19:46:71:34:4e:
51:2c:a4:0c:1e:22:78:11:67:a9:27:49:f6:27:4b:
c2:90:57:24:87:b5:44:aa:61:e9:2c:3a:24:6c:b5:
21:eb:83:e5:ce:74:0f:62:2b:2b:7d:99:bd:0d:c0:
18:88:74:cc:8e:87:e1:56:bb:8f:3b:59:43:d3:c4:
9b:15:ea:62:9e:0a:f7:16:16:34:c9:97:df:38:3c:
7b:8f:66:80:9a:c7:9c:da:75:93:55:fd:97:37:5c:
0f:83:91:35:3d:09:85:eb:a7:83:98:38:1f:69:af:
05:4e:f5:6e:1b:90:7c:09:06:b3:1d:c5:b4:32:e1:
35:e2:c5:a3:79:06:ec:e6:07:9b:b5:31:f4:0a:20:
95:d8:36:b1:aa:be:95:82:97:b2:bd:42:78:3c:6e:
21:0d:79:32:21:62:5a:eb:25:9a:8b:7c:e5:f3:57:
38:f4:94:35:8e:cf:8a:4b:fd:1a:8a:76:a5:99:d4:
49:0f:a4:17:f4:cc:2b:37:05:ad:5e:8b:a2:12:7e:
41:35:27:f7:51:df:89:a6:4b:2e:fd:81:4b:b7:a9:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:0D:9C:BD:AF:ED:31:AA:3D:D4:7D:DD:82:DF:D0:7C:79:27:F4
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:fb:69:2e:a9:f6:85:eb:b6:f6:b7:b1:08:69:87:95:f6:
29:6c:97:94:1b:5b:14:51:b2:fa:ba:28:e7:60:08:a7:58:c2:
35:93:24:8b:50:44:70:42:5b:d2:1c:8d:28:3f:31:26:02:30:
1e:0c:d0:f3:d4:07:2b:b2:7d:07:aa:ca:b3:e9:59:2a:24:cd:
6f:39:16:91:1c:cd:ab:27:ca:b0:ef:d6:89:00:fa:1e:b4:7f:
02:ca:45:e6:47:e4:90:8c:9f:6f:a3:c3:7d:4b:b2:68:17:ca:
9f:ec:41:72:26:93:e7:b2:5f:84:8f:42:99:f1:2c:93:a6:c3:
92:30:69:83:a3:17:97:c9:d8:34:80:8b:6b:a6:41:af:dc:28:
e2:3d:f2:ac:03:b0:ee:24:71:0b:0f:23:b9:e6:2c:79:e2:63:
20:90:bf:dd:c8:d1:41:e8:97:ec:df:46:b3:b4:ef:6e:4f:87:
77:8a:bb:ca:e5:c6:ca:1e:c6:e0:f4:98:70:42:62:e8:1e:2b:
de:91:bf:a5:5a:01:c9:d7:c5:69:46:fb:d6:c9:d2:b7:19:cf:
a7:b2:c1:ad:ff:33:b7:09:84:0f:71:04:43:37:43:1d:e1:d9:
ec:bb:d9:9b:78:aa:c3:7f:4b:06:f3:45:98:6c:e2:30:74:b1:
c8:24:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:50 2025 by rpki-client