Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: lEGNIji5e0uYtYnx0FXi82pLO+TeIigzERMztqrHgIs=
Subject key identifier: 03:FC:1A:E2:81:E3:5A:3D:C2:32:F5:57:A9:15:5C:8D:EE:93:51:F3
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019747B11771919A4CB5054369444ED7AE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:01:17 +0000
Manifest this update: Sat 07 Jun 2025 00:01:17 +0000
Manifest next update: Sun 08 Jun 2025 00:01:17 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: 3YQci3LhWlNWizZIkT6TaEXs1eWg/g35hH36biVyjnk=)
2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:17:71:91:9a:4c:b5:05:43:69:44:4e:d7:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Jun 7 00:01:17 2025 GMT
Not After : Jun 8 00:01:17 2025 GMT
Subject: CN=03fc1ae281e35a3dc232f557a9155c8dee9351f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:eb:f1:c1:aa:09:d0:66:69:47:5b:55:a1:
5d:1e:db:8b:d3:c8:b4:ea:f0:ec:dd:25:65:1b:1b:
c1:ac:05:96:9f:b7:6d:3b:b6:a1:f2:74:ca:6d:b1:
60:a1:c0:88:9b:96:b1:5f:78:eb:a9:cf:cf:d2:74:
29:c7:db:f1:f0:e4:d3:2a:d0:26:cb:9c:7e:ac:94:
3c:33:db:f1:b5:36:c8:fd:0a:4c:ba:86:ae:a8:b0:
4f:11:b5:1b:50:09:40:b8:00:d5:40:a0:49:46:44:
ea:93:00:df:49:62:de:74:a2:44:a7:7a:8a:d5:0d:
17:a0:54:95:a7:e8:57:e2:d7:a1:30:74:7d:e7:12:
1b:c1:d7:71:7c:73:f3:95:95:0e:1d:4a:5f:f0:66:
3f:3a:86:03:2b:c9:29:1f:1d:04:b0:9e:d0:2e:86:
46:7e:32:f0:ec:12:3b:ae:05:27:19:8c:4c:1d:ae:
36:6e:d6:3e:70:0a:99:de:27:8e:f6:9a:94:30:12:
ee:a4:63:c0:bd:5a:ca:cd:82:9f:84:6c:79:b6:49:
90:c3:ca:58:cc:8c:65:5f:ff:4c:0e:b0:3f:0e:e2:
60:c4:e3:84:45:6d:a4:92:37:83:13:0a:d6:ab:a5:
34:fa:2a:7b:af:8a:8f:2f:80:95:d9:54:92:ca:25:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:1A:E2:81:E3:5A:3D:C2:32:F5:57:A9:15:5C:8D:EE:93:51:F3
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:fa:0e:20:4e:ef:0b:c8:87:cf:71:1f:35:d7:e7:60:8e:
cb:b2:bb:ce:c3:00:78:fc:cf:b7:ae:c0:97:b3:1f:39:6d:86:
9a:91:13:97:98:04:2f:73:0d:e8:e9:f3:7d:81:e3:57:28:50:
b3:eb:c3:90:49:ec:50:71:b2:e9:1f:d2:8e:26:9d:c1:7b:09:
d4:c6:28:21:df:1e:ef:0a:14:69:5b:35:f0:2a:34:48:80:b8:
94:35:2f:c6:f2:1b:46:ae:62:09:95:c1:c1:26:f4:1a:3b:04:
d9:e7:c6:10:db:78:fc:68:75:d6:6d:e4:f7:96:37:a6:4d:5a:
b4:3a:1b:70:34:7d:e1:6d:9a:55:3c:e7:c4:37:30:29:c9:ff:
d6:6e:6e:b5:83:af:21:73:5e:a9:dd:96:3a:3d:fd:e5:99:94:
24:77:e9:1a:b9:0f:8d:b5:4b:a8:30:da:74:38:6f:64:e8:84:
88:d2:09:48:b1:a3:a5:a4:b7:69:10:7b:5e:11:db:ce:3b:56:
65:14:01:c2:3a:34:f3:54:e2:b4:fc:3b:9a:aa:26:33:5d:4c:
99:32:e9:61:83:d4:89:91:bd:18:b0:34:e2:5f:17:02:52:4d:
83:a1:39:1d:bb:b4:56:b3:e5:60:7c:31:be:09:1e:f7:1e:b6:
f2:36:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:25:57 2025 by rpki-client