Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: QlioX5fVYAZbZ46+/pWe3fggInzXDshxIUf+ppB7isA=
Subject key identifier: 3F:41:E0:D1:4B:EC:17:86:5F:08:22:F1:21:F3:8C:62:2B:A6:1B:10
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019922C36CD3AACA1BD503897F0B6313921E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:56 +0000
Manifest this update: Sun 07 Sep 2025 06:00:56 +0000
Manifest next update: Mon 08 Sep 2025 06:00:56 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: HxtEFMRkCV37Bh9jRhOl685khbff/FXeITuveZgOR6o=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6c:d3:aa:ca:1b:d5:03:89:7f:0b:63:13:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Sep 7 06:00:56 2025 GMT
Not After : Sep 8 06:00:56 2025 GMT
Subject: CN=3f41e0d14bec17865f0822f121f38c622ba61b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:02:fd:29:b3:1a:26:93:dc:df:93:5d:d8:
af:ed:61:ec:1f:74:49:bc:fe:8d:27:46:a6:68:95:
fc:4a:2d:0a:fb:d8:46:a9:4b:07:c0:27:2a:2a:a4:
54:59:20:1b:4d:e2:3f:c9:57:98:13:a7:a7:2b:ea:
c9:6d:7d:a0:7e:5b:85:fd:59:d2:88:02:f5:6b:d5:
ac:33:1b:61:c3:82:4f:c5:a7:a4:55:5f:9b:4e:d9:
19:6d:ad:0d:b0:55:99:3c:78:50:87:18:3a:f6:e6:
07:44:cb:50:d6:52:04:fd:e6:df:4a:13:66:e9:17:
97:6b:52:f1:47:81:bf:a7:9a:f5:14:6a:5e:e9:dd:
e5:79:76:ab:7d:cf:2a:ad:9f:61:1c:f9:38:28:b4:
b4:67:83:c9:37:30:ad:bd:a7:f1:d5:8b:06:1e:21:
41:9c:e2:3d:64:5a:88:7b:2f:e8:10:20:32:3e:35:
ae:bf:31:10:92:6a:87:9c:41:fc:ba:37:ce:4b:3a:
73:8f:e8:b0:e3:b1:08:50:73:91:07:66:2c:f8:03:
23:e8:69:a2:7d:d4:67:20:fe:1f:40:c8:37:b6:cd:
b1:ab:f7:e5:72:9a:0d:98:8d:43:40:6f:63:3d:3d:
20:28:fb:f3:be:11:a4:8b:51:cb:7f:c6:86:f7:b0:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:E0:D1:4B:EC:17:86:5F:08:22:F1:21:F3:8C:62:2B:A6:1B:10
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:52:0a:cb:18:b0:fc:58:8d:17:c3:54:60:c1:a2:5a:a9:
93:e6:01:fc:af:10:0a:66:12:3a:77:e0:29:3f:75:bd:c4:2f:
18:9e:83:a8:c7:04:3a:b3:07:db:9a:dd:e4:8a:b9:51:59:cb:
e1:5f:1a:43:1a:5a:25:2f:82:cd:f0:19:57:6f:c2:ad:56:d3:
11:b2:53:8e:7c:82:b0:b6:d5:63:cf:ad:c2:69:b4:89:66:e6:
84:56:22:65:8e:9b:ac:7f:90:d2:46:5c:21:09:ac:71:a8:87:
70:98:30:9c:45:21:13:c2:2e:91:9b:31:ec:4f:5d:0e:73:76:
db:88:9d:98:32:b5:7f:50:82:ff:74:bb:44:7b:80:3b:4a:12:
81:cd:6c:e7:36:14:c4:b8:45:34:6f:ba:12:67:0d:92:b4:f2:
ba:22:81:72:e3:28:b7:3b:b9:5e:e5:87:3c:50:c6:2a:c1:ee:
29:4a:98:a2:82:eb:50:d8:55:0f:02:fa:58:d6:ea:35:b3:e0:
c8:4e:ff:f4:71:b1:90:19:93:9c:41:38:87:e2:41:d1:4e:13:
1d:00:59:f0:79:67:dc:09:82:4d:bc:16:7e:13:4b:8c:70:7c:
bd:b4:16:58:f0:78:f0:4f:53:d0:02:3a:d2:91:48:52:20:bc:
cc:5d:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:38 2025 by rpki-client