Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: K42vf1aMhCjlq2GnCDnz8gCOc2rXBzlr0qLcuolp+64=
Subject key identifier: 33:06:93:35:23:26:84:79:40:8B:A0:76:1C:8C:1C:79:4E:94:F8:E9
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019A4D739342D7B20EBE6CEF90F0859733C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 15E5
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: hztacjH2XO4a3zIWPwMs91ONh+b1IePjWTt2Vag0ojE=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:93:42:d7:b2:0e:be:6c:ef:90:f0:85:97:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=3306933523268479408ba0761c8c1c794e94f8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:db:9f:5b:ec:46:d0:54:03:5d:01:5a:96:
01:cb:d3:d8:8b:30:b1:80:de:a2:89:28:84:06:c7:
7f:0e:50:87:3e:4d:59:e8:b0:ef:c8:de:05:e5:0b:
fe:1d:11:73:a3:6c:78:c3:0f:eb:35:de:d1:88:81:
9e:6e:5a:2c:10:9b:89:de:ae:b2:c2:0c:77:f7:6f:
20:e4:3b:4f:0e:28:cf:bc:ea:2e:cd:71:69:89:76:
27:06:d8:a2:07:b4:9e:05:97:b7:c1:d4:33:ad:98:
9b:d4:f6:ae:5c:2f:bc:08:4a:54:df:44:ac:da:04:
a0:ee:8d:1b:79:d4:02:c6:46:75:bc:ac:27:b3:16:
90:5d:96:08:ed:16:6d:74:16:fe:dd:ee:8f:f6:9e:
10:e0:3b:6f:eb:37:82:5f:c4:11:1d:7f:53:3c:1e:
34:0b:c6:48:17:8e:08:95:9c:e7:c8:8e:74:13:bf:
16:5b:47:8a:83:22:76:6d:90:49:ec:d8:f9:a4:0e:
cf:e5:4b:2c:ad:9b:a2:c6:f2:17:b8:c9:9d:6e:d2:
98:31:90:47:61:4f:5d:16:16:95:57:c9:2f:a3:f7:
35:2a:de:77:ec:55:66:6f:67:e5:34:4c:9b:71:c1:
6c:46:44:33:54:f2:19:e6:44:c6:fe:3b:1b:5e:17:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:93:35:23:26:84:79:40:8B:A0:76:1C:8C:1C:79:4E:94:F8:E9
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:22:99:de:73:e5:6c:33:95:b6:e5:7e:32:54:a4:92:95:aa:
72:fd:bf:ac:90:ec:30:17:98:d5:24:c2:d3:8b:bd:26:4f:53:
40:4e:1c:33:27:a6:68:fc:a2:06:80:e4:51:48:6e:5c:b2:4b:
42:42:58:52:95:53:04:58:42:48:ae:63:cc:97:28:69:bb:f8:
7d:82:6b:ac:a5:f9:15:40:69:ab:3e:63:0c:9f:94:97:3c:f7:
24:41:7d:26:de:2f:46:42:cc:77:e1:a6:2a:8d:e2:df:0c:5b:
a2:f3:b0:9a:05:53:6f:c6:5c:bb:2e:a1:d9:4a:23:6e:6e:b8:
3f:00:b0:89:7a:a7:15:fc:4f:02:da:5d:38:d6:31:63:20:50:
9e:d4:b5:9c:fa:70:77:6e:2c:73:b0:d1:e9:54:6f:33:6b:67:
99:0b:97:ee:5e:be:84:90:b6:95:a2:2d:b0:c0:47:a3:42:2e:
12:7e:65:a4:92:ec:d2:a0:e8:dc:1d:c6:40:44:34:7b:82:d6:
39:51:81:fa:5e:69:3a:9b:57:d4:4d:eb:10:83:bb:3c:fc:48:
82:f2:eb:e4:19:c1:3a:67:5e:6a:f9:a5:a8:3c:58:73:12:a3:
04:a4:ca:62:43:ea:93:b6:b6:4e:1e:16:38:3c:df:cf:36:31:
c4:23:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:49 2025 by rpki-client