Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: oUlDwJMkL+INawEnlNG0DNYdXQgIeFlolq7023Jtgx0=
Subject key identifier: 58:A9:11:73:0F:11:4A:EB:E9:FD:CF:B9:83:AF:DD:B1:35:53:D0:3E
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 019923A0B69B10C0FDF3C24D4C51ADAA3D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 05D5
Signing time: Sun 07 Sep 2025 10:02:38 +0000
Manifest this update: Sun 07 Sep 2025 10:02:38 +0000
Manifest next update: Mon 08 Sep 2025 10:02:38 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: r2K0LUo+5oRQ5ZY1EcHz4xjxmNuAC9EIPJyqrYDVhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b6:9b:10:c0:fd:f3:c2:4d:4c:51:ad:aa:3d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Sep 7 10:02:38 2025 GMT
Not After : Sep 8 10:02:38 2025 GMT
Subject: CN=58a911730f114aebe9fdcfb983afddb13553d03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:93:3b:74:6e:2e:2a:e5:b2:e7:11:bf:f3:
0e:7a:0c:49:45:54:a0:fd:e1:30:ba:1b:2b:b8:68:
72:f7:f7:b6:21:57:62:d2:29:09:d6:73:95:75:67:
89:88:66:fa:ac:c5:92:dc:e7:2e:c9:36:86:42:e5:
1b:17:96:59:92:95:c1:c3:04:66:ff:0b:e4:f8:59:
ef:ea:15:94:45:e6:61:2e:c5:ab:68:cc:63:c8:4e:
af:11:25:11:53:80:5a:0e:3f:cd:a1:0a:66:d4:09:
16:d7:3d:2d:ef:be:a8:ad:9f:77:11:ed:cc:3f:dd:
bc:d5:0a:b9:44:a9:8c:ff:45:29:d0:27:cc:64:5d:
35:77:b1:63:b1:26:81:2f:7f:03:b3:e3:73:f0:4d:
d9:36:66:b4:22:32:1c:d1:c8:53:95:b1:c5:a1:3a:
29:48:a8:58:50:a0:8b:f4:5a:a3:c6:38:cd:68:e2:
64:7b:aa:a6:d3:64:62:4b:ef:57:39:34:40:5a:56:
ed:65:b7:87:1c:35:b9:3c:50:77:5d:3d:e1:61:b7:
25:b1:77:54:65:e8:47:b7:aa:3f:3e:3f:a8:7a:98:
de:b4:03:f7:76:31:54:e7:d0:88:82:a9:8e:af:a5:
70:bd:50:37:ce:b6:42:98:d9:db:bf:19:45:1e:21:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:11:73:0F:11:4A:EB:E9:FD:CF:B9:83:AF:DD:B1:35:53:D0:3E
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9b:0b:21:93:04:ac:8a:5e:62:ba:fb:18:16:33:ca:fa:9d:
03:42:a6:2c:fe:6e:4e:1a:5c:20:6c:7f:ce:4c:aa:7d:fa:be:
f2:76:a4:34:b5:62:de:97:b6:96:60:a5:c8:e4:fd:33:ed:69:
d0:37:5a:04:b0:f4:8d:d6:de:eb:fd:a0:2e:ed:d2:69:04:36:
93:13:a4:8c:57:02:7b:75:5f:4a:24:b9:0c:ad:7c:05:69:33:
f0:ed:9a:a2:78:47:4e:83:c3:ab:de:72:e1:be:db:62:02:4f:
3d:0a:ca:1a:fb:45:5e:33:76:cd:43:7c:be:b2:63:ef:36:41:
61:c6:4d:58:9d:7a:d5:09:37:eb:ed:2b:34:9b:aa:05:70:47:
1b:c0:df:55:e4:0e:d1:15:27:b8:f2:83:29:6d:40:6a:c3:cf:
72:f1:1d:10:c5:40:72:63:10:a3:df:ba:f9:62:01:3e:de:a2:
42:72:30:88:b2:f9:96:33:b3:8b:ef:89:a1:45:13:4b:14:e4:
22:b5:39:7c:e4:ab:b3:ec:83:08:bc:82:ab:8c:6e:7e:6b:e2:
ad:77:d5:e6:15:77:49:6c:6b:b7:d3:a2:0b:52:ab:80:08:f5:
78:62:04:2d:bf:9c:c0:ae:c4:c4:1f:66:5a:b7:97:65:e2:a4:
e9:ef:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:06 2025 by rpki-client