Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: Fy9dNLLCu+1XiFDUASYYnx3okP53zJ+TFEmfgY18rjg=
Subject key identifier: DF:D5:91:E2:D4:96:FB:C9:20:0F:F6:99:25:DE:EE:9F:F7:22:3B:C7
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 019A4D05BACC3F4C9BD0D4937E2F4B1401D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0ACC
Signing time: Tue 04 Nov 2025 04:00:12 +0000
Manifest this update: Tue 04 Nov 2025 04:00:12 +0000
Manifest next update: Wed 05 Nov 2025 04:00:12 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: AlUMBzHEFQR7IlmA5/bNxvBezZEYFYHkN13e7Ycpmf8=)
2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ba:cc:3f:4c:9b:d0:d4:93:7e:2f:4b:14:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Nov 4 04:00:12 2025 GMT
Not After : Nov 5 04:00:12 2025 GMT
Subject: CN=dfd591e2d496fbc9200ff69925deee9ff7223bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:d6:07:c5:fd:c7:0d:a3:5f:cc:4a:16:3c:
1c:3d:b3:03:a2:e9:8a:03:2d:3c:18:4f:ad:8b:77:
ed:8b:78:16:59:fe:7f:9f:b4:50:80:da:d0:ca:9f:
27:f7:8b:d7:c8:c0:ef:f7:df:b3:d9:02:06:e3:57:
7d:f2:8b:a2:fd:d3:d6:0b:8f:9e:a9:6f:15:9d:d4:
b0:b2:c6:99:97:6a:63:b3:47:94:21:a2:d1:3f:7e:
d6:70:5d:7e:4b:d9:ab:16:6c:e7:09:84:5d:8a:61:
05:94:45:da:11:9f:2c:c2:31:f6:c2:d6:d5:78:1b:
e8:d1:6b:fb:4b:b2:75:50:73:3e:75:c5:14:43:d1:
ab:04:03:9c:38:54:d8:d6:db:33:d6:13:88:25:43:
15:45:d8:85:2b:be:29:7e:80:af:5a:58:2f:24:5b:
37:4b:65:1b:75:b6:c7:c9:7e:53:48:52:df:e9:7b:
91:cc:6a:22:d7:78:e8:b4:cb:45:d4:37:1f:02:40:
a9:a8:af:cf:4d:c3:70:89:93:dd:2e:32:c4:79:bc:
70:76:78:fd:15:2e:56:ac:d8:a8:1e:0d:39:72:3b:
6b:19:08:e4:f9:ef:1e:fa:15:bf:cb:f7:f6:ff:a4:
05:ac:2c:e6:c5:23:96:b0:bf:1a:8a:03:8a:eb:f5:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D5:91:E2:D4:96:FB:C9:20:0F:F6:99:25:DE:EE:9F:F7:22:3B:C7
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8b:4a:ed:a9:88:a5:05:ae:9e:59:e2:ef:c3:65:de:86:18:
73:74:ad:4c:7e:3b:22:ec:cb:53:e6:46:3f:fa:98:e0:3b:1c:
88:f6:ed:45:4a:a0:fd:55:0f:e8:39:50:a0:71:30:ab:cc:1f:
55:01:3a:c8:e1:f6:bf:2c:86:80:10:64:c4:64:e0:7a:d6:00:
45:a4:97:5f:3b:c9:1a:63:59:71:76:c5:a3:ea:7b:6a:cd:e1:
95:b5:cc:bd:40:74:50:37:e5:1f:be:39:3d:69:61:d3:5f:84:
a1:6f:d0:5a:4c:d1:a3:5d:fd:fe:6a:0b:e1:4e:aa:b7:28:a1:
ce:fa:e4:ef:ba:25:7f:7f:4d:ae:7c:84:4d:5a:7a:db:4d:27:
21:45:4d:43:23:66:d1:5c:41:d0:f1:08:5f:05:7b:b3:2a:10:
86:ca:f5:76:fa:a0:c7:4a:eb:8c:7f:c0:a9:be:53:72:be:fd:
d7:15:c1:35:09:fd:8d:20:43:79:6e:06:f3:1f:05:85:ce:8d:
d8:ff:12:8c:cf:7c:62:a9:f1:67:0d:fe:c2:72:f6:1d:6b:1c:
b4:79:8e:27:ce:32:f3:5b:c0:3a:39:9b:fc:f0:8a:a1:2b:c1:
99:08:77:12:e9:ec:32:37:cb:8a:52:28:84:03:23:bb:ba:ae:
5d:57:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:42:07 2025 by rpki-client