Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: 1s/SeZjeSUrjcfaqxKb7P01BQCTS+KrQpBjlpbpz3j4=
Subject key identifier: 31:4C:91:2B:59:16:21:AC:74:D3:8B:C6:8C:A7:30:F7:CC:64:88:6B
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0199FA6A6EE8D212B29E95A83A5E6E897AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 15BA
Signing time: Sun 19 Oct 2025 03:01:43 +0000
Manifest this update: Sun 19 Oct 2025 03:01:43 +0000
Manifest next update: Mon 20 Oct 2025 03:01:43 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 0YbRmJv6iAhlVxD7ZTgoXbNB+UhISJWE9W4LQLRHZoU=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:6e:e8:d2:12:b2:9e:95:a8:3a:5e:6e:89:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Oct 19 03:01:43 2025 GMT
Not After : Oct 20 03:01:43 2025 GMT
Subject: CN=314c912b591621ac74d38bc68ca730f7cc64886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:5c:5d:4c:0b:35:49:a3:fc:e3:bd:f4:56:
3a:76:b5:1d:f2:23:8a:21:b6:2e:85:a4:e8:2b:8e:
be:43:f6:3d:61:ec:da:c4:21:db:e6:09:a8:e7:1d:
48:3e:de:19:59:a1:77:7d:52:9e:a0:71:8f:1e:88:
5a:14:45:74:43:f3:1d:2d:f3:a9:bd:2f:4d:61:59:
55:7e:7e:a3:59:da:c4:6c:9d:79:61:84:b0:30:4c:
35:53:7d:a9:51:cf:6b:ca:44:a7:f4:ca:9f:36:b8:
44:aa:b9:c7:29:3a:43:3a:8d:3b:38:0f:d7:9d:76:
e5:fc:2a:ee:d4:a0:cd:ca:be:e8:c7:22:19:18:6f:
5a:8a:39:c0:9e:90:2b:f4:18:89:24:8e:4e:71:2f:
f7:4f:d2:c3:ac:9d:b6:e8:f2:b7:08:32:33:46:95:
d4:b3:22:88:0b:04:aa:d3:85:bf:4d:ff:cb:4a:96:
6f:cc:a4:a4:0b:27:df:27:40:d8:93:86:d6:51:9f:
4c:8f:32:15:2c:a5:27:6b:a0:e4:4c:ee:2c:21:c6:
ef:ab:22:b1:69:8a:4c:3a:ee:78:dd:81:27:75:5d:
2e:8f:39:e0:da:ef:c1:d5:21:cd:f0:45:89:0b:b3:
8e:ab:e1:cd:b2:64:ad:4b:d9:d4:43:1f:e9:10:59:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:91:2B:59:16:21:AC:74:D3:8B:C6:8C:A7:30:F7:CC:64:88:6B
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:76:50:8c:f7:3a:63:64:b2:db:53:e8:a4:b2:3e:8f:82:
f5:83:03:6d:ce:57:03:fd:f0:aa:6d:26:94:63:7d:64:4c:a6:
e2:d8:ff:1b:80:41:75:a4:64:2f:62:4f:0a:f2:bc:b2:12:eb:
79:ce:07:92:2a:25:6c:ad:1c:45:44:dc:6d:d3:8e:b4:c3:59:
5d:f7:91:98:4c:8f:27:a0:81:36:84:e0:69:d3:9a:12:f7:26:
f3:27:5b:96:41:78:7f:bf:35:dc:c1:7c:d5:80:d4:61:9d:0d:
5c:87:f1:75:37:04:0a:88:71:1f:1e:d2:81:46:79:8f:9c:6f:
98:84:ae:26:32:54:00:d2:dd:2a:6e:76:66:ef:09:ba:2e:f5:
b4:ee:a6:aa:f2:a1:a3:bc:1b:26:ce:28:f4:b5:5d:64:83:fa:
33:ae:80:f9:d2:9a:c1:63:d4:52:95:4b:8a:d7:ac:1b:5e:3d:
9f:0f:73:63:87:6d:f7:d1:f3:cc:a9:76:2c:73:3f:db:75:6d:
52:dd:07:5a:df:80:20:c7:01:a0:88:fa:d7:03:2f:42:00:ce:
06:fa:d1:42:59:e2:60:5d:29:48:a8:25:4c:c3:bb:4a:7d:eb:
9c:77:b6:05:b8:d6:32:9b:36:a6:25:f6:f0:6f:ba:75:8c:d7:
55:50:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:50 2025 by rpki-client