Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: Ay3gkUBqpGyaWd+gj4tAbbdj+qFVsMqSiEdJs7u7BM4=
Subject key identifier: 14:A6:8C:FB:CF:CF:8F:11:0B:BC:80:77:AC:4F:3F:43:6C:C3:4E:E1
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019828FEC7145D414A0E54EA593EC6ADEECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 14C9
Signing time: Sun 20 Jul 2025 18:00:42 +0000
Manifest this update: Sun 20 Jul 2025 18:00:42 +0000
Manifest next update: Mon 21 Jul 2025 18:00:42 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: OuroYQtk+T62lKnowqxrR2NbYF0TrrODhCOKye1/FSw=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:fe:c7:14:5d:41:4a:0e:54:ea:59:3e:c6:ad:ee:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jul 20 18:00:42 2025 GMT
Not After : Jul 21 18:00:42 2025 GMT
Subject: CN=14a68cfbcfcf8f110bbc8077ac4f3f436cc34ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:f8:b3:c8:18:a4:7a:13:1a:19:a2:18:05:
44:94:9b:0f:16:e5:52:9b:93:ae:14:bc:a4:87:3a:
38:d9:4e:f4:72:91:b2:22:2c:43:6d:c4:50:35:85:
aa:57:9a:bd:dd:ab:c7:39:f3:bc:a6:9a:40:6c:42:
54:eb:87:88:9c:e6:15:ea:44:e3:b4:c1:48:cd:08:
f2:c1:7b:f9:99:e9:c6:cf:74:08:f1:74:bd:36:aa:
29:d2:4b:20:e0:74:61:b5:2b:5b:5c:ea:3f:da:83:
a4:6b:c8:fc:5f:75:23:28:75:4d:da:ef:78:d1:25:
2b:80:f5:97:d7:90:5d:f0:7e:b8:6f:06:d3:2c:cc:
86:2d:cc:53:73:ff:43:f5:64:32:ee:96:d1:fc:c3:
25:cf:f5:f8:38:3b:47:12:5f:34:4a:64:e4:90:b2:
9f:49:e1:5d:48:50:f8:29:31:5d:39:42:e9:6f:a3:
88:f4:36:fa:2b:5d:30:7a:2c:4e:a7:17:14:5d:8b:
e4:8d:9d:05:fd:e8:8a:bc:ce:dd:56:dd:d0:45:0f:
d3:1d:a3:2c:e7:d3:20:7a:81:47:56:47:d7:82:55:
d8:18:65:6e:9c:f3:26:91:53:68:42:26:78:2d:63:
90:ba:c1:15:af:fd:0d:48:92:f0:e7:55:a6:ef:6c:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:8C:FB:CF:CF:8F:11:0B:BC:80:77:AC:4F:3F:43:6C:C3:4E:E1
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:b0:d9:29:79:9e:0d:3a:e9:5c:d9:09:b1:07:0b:73:b1:
91:ae:8e:eb:30:9f:73:47:d4:c5:17:28:e0:0b:af:d7:41:9b:
8e:77:6f:4d:40:1d:23:03:55:1c:8a:c2:ea:a4:fd:92:c8:e8:
50:08:32:05:4d:f0:28:ba:9b:24:e8:f2:7c:bb:82:d1:20:00:
1f:98:ed:ee:d5:ad:29:95:d4:e2:89:a7:c0:aa:62:1c:28:6d:
8f:9d:c1:98:d5:e0:90:28:a8:9f:e7:57:2d:da:40:84:3c:69:
f1:8d:65:f9:f3:d8:28:ee:93:bd:11:c4:04:78:c8:cc:11:dc:
3e:fd:b1:6d:66:3f:86:71:23:e8:ba:ad:d5:58:91:5f:b5:f2:
91:0b:b8:fb:47:dc:73:c8:58:fe:17:01:2e:db:24:a8:d1:db:
f4:77:1f:7d:4b:a2:7b:89:7c:1b:16:49:a5:e2:39:fb:ed:cd:
25:e2:71:43:50:69:e5:f9:2e:ac:b6:47:c1:b1:4c:17:20:7c:
53:9b:b6:5c:10:b5:80:5f:d2:51:56:c4:61:73:12:ab:f4:ba:
b7:24:2b:a8:9e:94:96:ae:c5:20:e2:7d:34:66:47:28:8d:89:
a1:c9:ec:4e:b2:fb:44:be:34:66:8c:2f:36:2c:7a:f8:5c:97:
cb:d8:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:19:41 2025 by rpki-client