Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: p30HzN26Z8aiDfnH8sNQY3yO5ISTbmz1AFzDOQhumWQ=
Subject key identifier: 35:AE:10:4E:C5:9F:7F:23:D3:C5:34:C8:90:0B:43:FE:DE:3D:29:CA
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 019A7149DC004EC09013765C3E23B80F521A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: gSF/cjRxmjKXhVYDoKRu6y00lOocrsjchKrt6hRsWyg=)
2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dc:00:4e:c0:90:13:76:5c:3e:23:b8:0f:52:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=35ae104ec59f7f23d3c534c8900b43fede3d29ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:09:9f:81:89:4b:81:56:6d:27:d0:02:a1:
80:2b:33:3b:ee:43:d4:11:15:68:f0:cf:47:8d:e4:
e0:28:b0:4c:f1:a5:8f:13:a4:15:76:89:ca:4a:18:
12:25:fa:96:51:f6:28:28:bb:bb:53:ae:9c:b3:89:
3f:94:f1:24:e3:ac:3f:27:d1:e9:c0:39:ae:ac:12:
a4:d4:ed:7e:31:6c:d9:a6:44:7b:b6:7f:95:00:03:
b9:07:03:1a:9d:47:d6:4a:d5:6a:07:67:3f:bd:b5:
0e:95:88:97:7f:ec:9c:71:59:f7:0b:f8:63:93:d4:
a6:57:1d:ae:80:bb:df:99:8a:b8:e5:b9:8f:ad:90:
8c:f2:b6:65:aa:9c:bf:d0:9a:82:74:e1:a9:ef:dc:
6b:d7:82:b5:86:b4:8e:f7:31:04:b4:45:c7:ad:71:
e0:08:ac:fc:ec:ce:c6:d3:43:fa:b6:e5:9e:d7:d0:
17:0c:62:d7:2c:d5:eb:7e:4a:8b:1a:78:e9:a2:64:
99:9a:e0:a8:15:7f:87:68:80:da:39:c0:3b:29:9e:
78:bc:ce:5a:43:ed:72:31:70:64:34:b8:83:5e:33:
eb:a9:c7:fb:5c:ab:64:21:90:2c:f5:12:f1:12:30:
1a:9b:96:02:45:d8:04:e4:10:3e:81:28:06:ab:0e:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:10:4E:C5:9F:7F:23:D3:C5:34:C8:90:0B:43:FE:DE:3D:29:CA
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:ed:11:d6:46:f3:82:2c:d2:4a:98:90:76:af:82:aa:0a:
9d:e7:c1:51:e3:d5:d2:a2:21:a3:6a:fe:d6:3d:06:ce:9b:ab:
12:1c:8a:c8:13:ed:87:de:b4:44:fc:e0:85:00:ca:23:96:40:
83:e4:63:17:af:3e:af:01:5f:5d:ff:f9:48:d4:c6:df:ed:af:
79:53:2c:3f:05:84:e8:74:30:45:44:95:3a:71:f1:d9:c2:51:
fd:0a:d6:ef:ad:0c:d6:82:3a:97:18:20:92:50:cc:96:19:5a:
9f:23:4e:59:37:9d:59:5b:c4:68:a3:a3:83:25:36:a8:cf:8b:
fa:d2:cf:aa:45:21:32:70:dc:ef:9f:30:2d:de:92:18:af:60:
dc:f8:88:f0:09:1e:6d:13:9e:23:60:05:60:e4:0d:d8:4a:88:
29:de:f9:64:3c:a8:55:f0:66:4d:bd:59:8a:91:44:10:4e:e2:
ba:b5:4a:f0:49:5b:21:10:58:b2:95:9f:0f:0c:89:ee:6f:41:
eb:bd:fe:8e:84:54:dc:9e:ea:0c:47:a7:8d:b0:6b:85:94:7b:
7a:9a:31:d1:e1:61:18:ea:b5:b1:7b:c4:5b:3c:6e:56:e8:2f:
17:fe:f4:47:8e:06:ed:54:79:dc:26:5a:ec:b5:71:f8:59:76:
fe:60:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client