Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: BrVC7n7yq5gKCGN4iYVs5dNGFncFEQ2lbsndeU0c8rM=
Subject key identifier: 32:AD:2B:9D:79:97:AF:30:81:41:99:46:30:B6:21:AC:AD:75:0B:60
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0199221EE1BB089F765AF612E641F01410D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 154A
Signing time: Sun 07 Sep 2025 03:01:13 +0000
Manifest this update: Sun 07 Sep 2025 03:01:13 +0000
Manifest next update: Mon 08 Sep 2025 03:01:13 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 0dUs2TXd36O6BFJnrQaBMXw6+YDkuzhQoamLYlqno8M=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e1:bb:08:9f:76:5a:f6:12:e6:41:f0:14:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Sep 7 03:01:13 2025 GMT
Not After : Sep 8 03:01:13 2025 GMT
Subject: CN=32ad2b9d7997af308141994630b621acad750b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:18:69:cd:17:90:e8:8b:fa:f9:2a:53:0a:
ce:29:7b:c4:38:01:b6:7f:64:47:37:7d:c5:1d:bc:
f5:ea:95:e3:0c:51:e8:c3:86:02:9c:52:15:58:fa:
cf:ba:07:b2:6c:bf:08:e0:49:12:50:4c:b3:0b:69:
5e:ac:8c:66:27:d3:7b:11:d3:58:59:59:41:c6:b1:
c3:1b:fa:fb:12:f2:e1:02:0b:5e:4e:cd:e6:e5:6b:
e3:2a:46:da:a2:1a:4b:f7:e2:a8:ba:b5:19:8a:72:
e1:f6:8e:2f:6c:39:ff:a8:79:0c:54:10:34:18:bc:
0b:4c:e0:fe:b5:3c:a1:df:83:06:d2:83:e6:29:e0:
cd:91:a7:76:dc:61:09:d8:94:da:54:93:c2:db:c6:
12:b7:76:ef:25:fd:7a:f3:da:13:0d:ae:f8:2d:fc:
82:c1:96:06:31:e0:0f:88:49:0f:39:74:94:f4:8d:
67:8a:04:7a:0e:c1:fd:e0:0d:99:f6:c7:ff:2c:c1:
65:dd:dd:f9:fb:7d:9a:6b:4c:59:01:4a:3a:3a:4a:
56:95:e5:c9:b5:08:1f:d6:da:f3:5f:28:06:a8:1f:
e3:4c:29:71:1f:57:f3:a9:1e:57:f5:18:9f:e0:a0:
9e:33:d5:24:b9:59:35:36:e8:53:51:b5:66:bb:f3:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AD:2B:9D:79:97:AF:30:81:41:99:46:30:B6:21:AC:AD:75:0B:60
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:19:45:7f:c3:99:d5:e1:d4:18:c9:52:05:f1:ed:5d:76:
09:8a:2b:69:21:1e:fa:7b:65:62:10:da:6b:ab:eb:6d:3d:ed:
6b:19:2c:6e:17:cf:e9:1a:fa:7a:82:cd:9d:5c:d9:5e:eb:0e:
f6:35:31:72:91:46:8d:79:7c:44:29:2c:f6:9d:6e:2d:9a:4e:
ee:b4:22:ee:e3:4b:b0:4d:fc:ef:80:8c:8e:cc:06:8b:dc:88:
86:64:1d:93:ff:0a:45:1e:86:61:7d:7d:62:a2:b9:79:b3:40:
00:13:58:04:4f:7e:82:43:17:77:19:ef:a9:c1:65:5b:fb:0d:
35:6b:b1:06:21:28:65:6e:ce:2b:f3:bc:98:57:63:91:37:38:
d4:37:53:f3:ce:ea:40:06:fa:b0:89:bc:51:fc:04:a7:fc:ee:
13:20:ed:70:42:6a:d3:af:f5:56:a1:97:82:ba:9a:32:b2:17:
6d:bc:f3:3d:79:ac:7f:2a:c2:03:29:58:04:85:af:49:fc:2b:
18:cd:14:20:50:03:7b:19:e4:e2:7b:c6:21:b9:7b:b6:0f:e2:
ab:86:ed:56:5a:60:5a:26:4f:42:cd:c1:a6:ef:27:e2:b2:c7:
fe:72:5b:d4:4c:7f:68:2c:f2:50:b3:fd:44:03:17:14:b6:c7:
2a:9e:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:44 2025 by rpki-client