Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: 8af4EGznDOWUpHhMXkSzmTONS/sj3W6veS4DLrDjlo4=
Subject key identifier: 7C:B0:D4:99:CD:7E:22:AC:E2:61:9D:63:35:BA:CF:C2:BC:C7:3E:FF
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019A7225DD680692A2884D2964D223E80F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 15F8
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 7mTNLV1z9yzyaxdG9zqjHCM35+PROj7rH7u5421cPVM=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:dd:68:06:92:a2:88:4d:29:64:d2:23:e8:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=7cb0d499cd7e22ace2619d6335bacfc2bcc73eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:8a:47:9a:21:0f:d3:ab:f6:00:ec:f2:a6:
57:70:78:4c:54:8e:ea:64:7f:8a:f7:96:97:de:cd:
fe:b5:67:6d:a8:35:af:91:a3:a0:5c:46:4f:bb:9a:
51:2a:cb:e0:03:27:15:66:9e:cc:7f:b6:f0:4c:d2:
d5:34:9e:85:0d:9b:a0:79:c7:1d:88:f7:e8:95:65:
7d:40:7e:4c:c0:b3:38:00:ce:4d:74:cd:b8:cc:d9:
47:60:b4:c6:96:f3:31:0e:fa:75:88:63:ec:c4:de:
23:a3:51:eb:42:9d:64:c9:63:bb:57:e7:4a:cc:a2:
f1:b5:74:3e:48:06:b3:90:e0:8d:d5:f4:a8:61:c7:
9b:34:c5:b8:87:3c:d4:48:5c:d8:21:a9:ca:63:a7:
8e:a2:2e:96:94:91:90:89:45:ca:80:87:c6:6b:59:
5a:00:fe:6f:c9:9a:82:52:b6:dc:96:f2:8a:d9:01:
6a:b0:eb:e6:2a:fb:48:65:78:da:d2:0e:2d:8a:59:
45:5f:b0:fa:70:d2:71:e6:e5:79:bf:14:a7:b8:2b:
d1:1d:74:a7:e9:56:9f:12:08:25:18:c0:04:84:69:
43:98:2e:e8:05:0c:93:43:b0:f5:dc:c1:ea:ad:0c:
e5:c4:de:b8:a0:0a:37:ff:e4:2c:5d:ac:4e:0e:eb:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:D4:99:CD:7E:22:AC:E2:61:9D:63:35:BA:CF:C2:BC:C7:3E:FF
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:9e:5d:a5:c4:a3:26:41:b3:0d:d0:d0:30:0e:e9:b8:89:ef:
ac:41:48:d1:e2:82:20:54:fd:36:1b:57:a2:d1:f2:f9:3c:85:
4e:90:eb:ee:32:d8:45:1c:04:06:14:cc:fd:6d:68:20:e2:10:
18:d4:95:bf:fb:b4:ea:61:93:cf:e0:90:61:8a:ab:ec:9e:e4:
2c:3e:60:ff:f8:e1:fe:59:de:5d:45:af:02:64:b6:2d:4a:64:
ed:b5:4c:3d:2e:d4:e0:0f:5c:cf:0f:46:e8:30:59:36:19:94:
33:fd:6e:e9:9d:ad:c6:3a:2e:00:d2:52:98:34:7e:c2:1e:02:
66:13:0f:f6:25:f9:a2:11:f5:7a:99:b5:00:cd:6b:0c:21:6f:
60:1f:ed:fa:5a:28:78:e9:f1:6a:cb:4d:23:bf:8e:82:0b:7e:
cb:78:5b:ab:d0:78:76:19:9b:96:78:81:45:f7:ec:7d:4e:22:
ce:28:dc:cf:52:37:af:a8:eb:72:00:bf:34:21:45:5b:4b:f0:
0d:94:ec:24:15:ab:a1:e3:08:1d:8e:30:9a:96:3c:79:f8:3d:
72:30:dd:43:2d:c3:f4:4a:12:7d:15:2f:6d:93:a5:bc:2f:b1:
e3:21:1b:a6:0d:df:f6:41:f2:9e:9a:81:00:f9:1a:9f:0e:ae:
87:0d:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:22 2025 by rpki-client