Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: Q9y92FBGB4lNUzOx4W1I+ZoSC4xtJA5Y8bRxgmooa0A=
Subject key identifier: DE:63:FE:60:C6:D9:81:9D:11:01:46:B7:0C:2C:D7:F5:60:17:65:11
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0198D4DFEC5CA42B67EE19D304E2CBE9E4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1522
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: UgfDGkMvBhbqQV4Qhly3fKtiiwu80vqNXi7YOuKNp9k=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ec:5c:a4:2b:67:ee:19:d3:04:e2:cb:e9:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=de63fe60c6d9819d110146b70c2cd7f560176511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:69:5a:1d:89:65:bd:49:c8:c4:8a:19:ef:
fd:90:ea:d6:a9:3e:05:dd:cc:bf:69:c3:a3:f4:14:
2e:53:05:e0:a4:56:a1:7d:59:29:16:9b:80:9a:45:
1a:08:25:57:51:8c:ef:6a:a3:40:47:8d:c9:42:20:
57:22:e2:99:41:32:11:dc:f0:da:e2:37:2b:6a:35:
a6:e3:38:d3:0b:74:9a:03:d8:15:3a:42:54:c2:d0:
bd:18:ca:93:31:59:85:cf:9f:8a:33:f1:a1:7b:aa:
87:1c:07:1d:79:08:52:d9:5c:84:ab:2c:f5:af:7e:
6e:6f:74:86:3b:3a:7c:4d:28:a8:2b:06:f2:1e:69:
26:76:2b:f4:b2:54:5e:09:7b:93:31:62:e6:fe:53:
1d:30:a8:9d:96:f6:53:7e:7e:a1:ee:25:54:44:75:
64:a7:16:38:60:8f:ee:26:ee:18:4a:78:20:e1:7f:
3d:00:83:b3:e0:9f:48:c8:7c:8c:0a:5b:73:3d:40:
eb:4c:11:17:e0:92:72:8d:86:85:65:48:99:aa:b1:
be:a6:17:d1:2c:41:d6:9a:d0:4d:93:4f:24:41:87:
e8:ba:ed:4a:b8:2a:2e:e7:7b:c6:e1:a0:c2:89:f5:
ef:a9:b9:3a:45:ac:af:23:9a:6d:9c:47:cc:2c:d5:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:FE:60:C6:D9:81:9D:11:01:46:B7:0C:2C:D7:F5:60:17:65:11
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:90:c5:65:25:43:ea:d0:41:d9:cd:3f:43:4b:a0:50:d7:7e:
f0:55:18:e6:0d:bf:58:e1:dc:27:45:75:08:f1:9b:28:8d:8c:
0f:9e:b8:d1:5b:27:d4:a1:66:a7:b2:f4:98:b7:c9:b0:ff:7f:
38:2e:72:6a:46:1e:7e:83:8d:29:5b:ad:c4:ee:ec:ce:6c:56:
87:a6:f1:31:93:be:18:51:e2:1c:21:18:72:ce:1e:b1:b8:13:
fc:c5:aa:47:53:ad:2d:9c:c8:5e:a2:b9:79:73:47:10:de:22:
12:13:5c:4e:55:4c:e8:10:f1:9c:53:43:b9:f0:09:84:fe:d3:
f4:8d:70:54:e3:3d:29:76:e2:70:9e:4e:6d:e5:1b:b5:e6:5c:
5f:61:59:16:1c:ba:7f:01:73:ca:13:a2:ef:89:4b:af:fe:89:
62:f3:95:cb:f1:61:36:45:dd:aa:75:0b:35:11:bb:3f:b6:e4:
a2:1e:40:49:85:d8:f1:c8:d1:42:00:bb:99:c7:9b:fe:4f:dd:
fa:c2:da:8a:f7:6b:f2:27:94:f1:36:a6:5c:bf:3c:72:84:67:
32:b5:48:26:e2:b2:28:10:9d:b9:6a:be:90:af:c5:ec:01:92:
9f:b1:10:f8:6a:bf:a6:34:9b:44:0d:a3:95:8b:6e:cb:db:e0:
0f:dc:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:35 2025 by rpki-client