Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: dqmL5GhuZfqsrIHcc3jjKTxlGrzoe9jw+yWI/91fCRQ=
Subject key identifier: 93:AD:A9:D3:32:98:E4:86:DC:6C:D6:09:B2:C2:C3:E3:A1:6F:F6:01
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019A72CAB83428511DA5E7D77FCBA6992CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: ybOmYCvvaJDO+mfCoyS/2yiJDiHvHyRxrpCxm165A58=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b8:34:28:51:1d:a5:e7:d7:7f:cb:a6:99:2c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=93ada9d33298e486dc6cd609b2c2c3e3a16ff601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:1c:8f:39:3e:de:25:83:1c:e9:1c:48:0f:
44:62:c6:6f:ba:a5:5d:41:48:7e:36:59:5c:5b:64:
07:2a:59:66:90:dc:d2:2e:a6:47:2e:11:d5:d5:9c:
70:ef:0b:91:52:a7:b8:7f:98:1a:3e:b9:12:15:b1:
64:9c:46:8e:13:a9:de:95:4c:10:83:5d:3e:0b:a9:
a0:dd:8d:84:54:3e:73:df:d6:73:73:97:e8:fd:72:
3d:c4:9b:26:ec:e1:03:f3:fa:f4:e6:0c:64:50:f8:
a4:5c:9c:02:f6:5b:c6:ee:24:b4:ba:4b:28:81:59:
be:d5:e6:53:ae:b7:98:1a:9c:58:cd:d2:38:92:ad:
e4:38:9f:0e:00:d4:02:6e:cb:63:92:fa:10:34:3b:
b9:78:28:79:82:0b:3e:e4:16:11:ee:13:de:69:17:
0a:e7:37:40:92:2b:97:b6:b8:74:eb:a4:d5:39:e7:
59:14:28:23:3e:3e:79:04:40:86:b1:c0:69:0a:70:
85:e1:29:97:4e:46:c0:4e:fd:ea:7e:90:ef:7a:17:
ce:ba:44:3b:7e:f8:2c:aa:f4:5b:eb:15:9b:4f:64:
1a:8e:a9:21:b8:a7:31:9d:6b:ea:b1:80:82:7c:e3:
8b:83:c5:6f:df:a2:d8:df:06:e9:c7:14:92:4e:b4:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:A9:D3:32:98:E4:86:DC:6C:D6:09:B2:C2:C3:E3:A1:6F:F6:01
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:d4:8e:41:40:0c:4b:4e:87:d1:95:bf:da:be:ce:be:de:
59:bd:14:e9:24:7d:24:6d:40:7a:f8:11:85:75:1b:35:8c:d7:
1b:ae:dc:57:07:eb:eb:24:d6:85:9c:65:ba:4a:54:ef:ec:22:
a1:c1:85:e9:4f:13:70:42:2b:8b:a8:57:47:ac:af:22:c1:21:
26:a2:c7:25:73:c2:b5:8c:59:bd:aa:37:70:2e:d4:c9:86:22:
a0:bd:8c:a5:11:9d:a8:3d:04:c6:9a:fc:ab:db:44:ac:b5:77:
63:ad:d4:b3:1c:a1:bf:e5:9c:40:40:84:68:d0:8e:6c:a6:78:
63:33:b9:52:68:01:7e:26:33:4b:f2:3d:7c:e6:0f:1e:16:29:
ed:42:ce:d0:0f:22:b6:f1:9d:df:de:1b:b0:58:37:37:5f:17:
cb:4c:80:f5:95:01:f2:6d:47:7c:b5:40:99:44:b8:29:9c:c1:
28:cd:9b:e4:95:4c:b2:a9:d8:f7:87:2f:02:17:61:80:4d:78:
6a:f0:88:0d:0d:4d:ea:c4:9f:6d:f0:c2:23:ad:9e:ad:98:a6:
cc:84:b6:16:49:45:91:35:06:65:52:de:90:19:a3:4c:bd:03:
dc:9e:9e:73:29:2d:33:9b:8c:c1:7b:d7:ef:2f:66:b2:95:08:
93:f2:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:23 2025 by rpki-client