Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: l2/udwWrmJOnUhba2KDPfoOiC9B5/uj7DNRiFnwkz3E=
Subject key identifier: 59:BD:74:AA:36:EA:E8:CC:D5:F7:AA:F1:AF:5A:96:E8:72:1F:09:61
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 01974A7AA760BF704F7878908ECE48A648E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 04E0
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: gHQoF8KTThhPiRz9jJPyRYEbMsVoc42IVhbXl8Hrq0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a7:60:bf:70:4f:78:78:90:8e:ce:48:a6:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=59bd74aa36eae8ccd5f7aaf1af5a96e8721f0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:38:b1:8f:63:1e:bf:9f:21:fe:a9:e7:f8:
e4:eb:74:c3:fc:ca:e7:cb:a3:34:27:bd:c2:41:a4:
59:02:62:b6:ed:29:cc:0f:31:b2:4d:4a:8e:bc:1e:
aa:92:53:66:50:ac:60:05:0a:fe:dc:e7:e5:6c:df:
1d:80:ee:d2:c4:86:1b:8f:46:e1:bd:07:5b:a7:84:
f3:16:e6:89:34:cf:8b:f5:df:e5:94:e2:64:6e:6d:
83:20:fd:09:ee:5b:e9:eb:fd:f0:ca:b0:36:e8:37:
b8:8b:ad:01:2a:28:95:45:d6:e3:1b:50:bb:58:64:
9a:00:be:47:fa:b4:e6:81:fa:5d:af:f3:43:b9:e8:
94:12:5f:32:52:6f:3d:19:d7:d6:34:75:6a:1f:f6:
68:4e:ec:86:ef:3c:1f:5a:85:cc:05:2c:40:e6:45:
63:f6:91:51:7f:dc:f7:d0:70:1c:ed:6d:b5:36:c0:
4f:f5:79:ea:9a:57:01:45:ad:b6:64:02:c2:09:11:
32:2f:64:90:39:0b:ec:d1:cf:e2:5f:58:27:83:9a:
7a:cf:48:eb:fb:53:85:55:99:74:f0:54:e2:ec:26:
79:b8:1e:53:5d:cd:bd:2d:39:ae:1e:82:bd:cb:c7:
95:9f:5b:82:d9:6b:cd:2c:e1:f1:9f:85:10:4f:ce:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:74:AA:36:EA:E8:CC:D5:F7:AA:F1:AF:5A:96:E8:72:1F:09:61
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:90:bb:a2:a4:ad:64:98:90:e7:21:0a:23:32:5b:b9:12:44:
28:8e:0f:e8:b2:07:e3:bc:2b:06:4e:e4:46:3b:0e:a8:7f:81:
89:53:2d:69:90:fd:55:04:dc:a6:ee:b7:73:17:55:65:ec:69:
39:af:96:73:7f:b8:95:f7:cc:66:3a:e6:68:57:77:6a:56:3e:
93:e4:3c:92:8b:31:8f:88:02:ca:e1:82:02:29:b7:92:de:e8:
8a:31:89:1d:a6:27:8a:b8:9b:56:7a:d2:ae:40:ba:01:da:5f:
c6:c9:59:5d:93:2e:02:71:a7:8f:d4:da:5d:c7:9c:ad:af:b0:
fd:2c:05:bb:59:25:4c:db:1b:a2:e5:8f:b1:14:52:cf:e2:34:
75:d8:6a:82:78:e7:3e:7c:23:ab:46:4a:94:4e:23:fb:8c:a1:
1d:62:75:6e:0b:00:4e:cc:0a:f1:21:06:8c:5b:c9:5c:06:25:
43:16:11:b0:f2:51:27:cd:cb:07:0a:e7:90:e6:5a:18:f6:9a:
5d:35:a6:77:e1:3d:c1:40:e7:b7:0c:45:dd:09:88:52:0c:87:
0d:b5:f7:52:0e:93:13:10:87:ce:d5:e3:fe:9c:bc:93:22:fc:
8d:11:5d:0b:e3:8c:72:10:ee:59:d9:7c:de:e7:8c:e1:c6:c6:
b7:d8:3a:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqdgv3BPeHiQjs5IpkjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm
NGZlZjkwHhcNMjUwNjA3MTMwMDQxWhcNMjUwNjA4MTMwMDQxWjAzMTEwLwYDVQQD
Eyg1OWJkNzRhYTM2ZWFlOGNjZDVmN2FhZjFhZjVhOTZlODcyMWYwOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLU4sY9jHr+fIf6p5/jk63TD/Mrn
y6M0J73CQaRZAmK27SnMDzGyTUqOvB6qklNmUKxgBQr+3OflbN8dgO7SxIYbj0bh
vQdbp4TzFuaJNM+L9d/llOJkbm2DIP0J7lvp6/3wyrA26De4i60BKiiVRdbjG1C7
WGSaAL5H+rTmgfpdr/NDueiUEl8yUm89GdfWNHVqH/ZoTuyG7zwfWoXMBSxA5kVj
9pFRf9z30HAc7W21NsBP9XnqmlcBRa22ZALCCREyL2SQOQvs0c/iX1gng5p6z0jr
+1OFVZl08FTi7CZ5uB5TXc29LTmuHoK9y8eVn1uC2WvNLOHxn4UQT87uXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm9dKo26ujM1feq8a9aluhyHwlhMB8GA1UdIwQY
MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt
YjQ5MWY1YjM5ZWYyLzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy
LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5C7oqSt
ZJiQ5yEKIzJbuRJEKI4P6LIH47wrBk7kRjsOqH+BiVMtaZD9VQTcpu63cxdVZexp
Oa+Wc3+4lffMZjrmaFd3alY+k+Q8kosxj4gCyuGCAim3kt7oijGJHaYniribVnrS
rkC6AdpfxslZXZMuAnGnj9TaXcecra+w/SwFu1klTNsbouWPsRRSz+I0ddhqgnjn
Pnwjq0ZKlE4j+4yhHWJ1bgsATswK8SEGjFvJXAYlQxYRsPJRJ83LBwrnkOZaGPaa
XTWmd+E9wUDntwxF3QmIUgyHDbX3Ug6TExCHztXj/py8kyL8jRFdC+OMchDuWdl8
3ueM4cbGt9g6dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:54 2025 by rpki-client