Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: wguc+4JTiYspd/fSSqKS/2XpzMA+cJQn80LlcyHAQeE=
Subject key identifier: 70:D4:AE:9A:02:1A:15:D2:37:5D:50:7C:29:A5:C6:08:3C:5C:C2:3D
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 019611A1B410A509D4160C9548F4C6C3EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 043E
Signing time: Mon 07 Apr 2025 19:02:12 +0000
Manifest this update: Mon 07 Apr 2025 19:02:12 +0000
Manifest next update: Tue 08 Apr 2025 19:02:12 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: u5B6uAojv8ta/cn65rSF4JdDZ5uInkZKujWLDBkuGDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:b4:10:a5:09:d4:16:0c:95:48:f4:c6:c3:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Apr 7 19:02:12 2025 GMT
Not After : Apr 8 19:02:12 2025 GMT
Subject: CN=70d4ae9a021a15d2375d507c29a5c6083c5cc23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:9b:27:f6:1f:f8:f2:b8:e2:be:40:54:fe:
ef:1b:c4:1a:29:df:91:32:fd:85:34:43:c9:9d:8c:
d8:05:89:4c:eb:05:4d:d8:d7:84:4c:b7:49:25:3e:
83:d1:7d:67:81:20:9c:80:0a:67:0a:4f:21:12:c8:
9d:d2:4f:63:da:96:60:da:31:06:9f:ed:43:3c:05:
76:b1:7c:f1:f8:ec:e6:31:0c:59:42:52:1b:0b:a7:
58:d3:93:64:b0:7c:0c:8d:f2:bf:01:dc:c0:65:85:
81:c5:57:6c:5c:43:69:9e:ea:39:3f:3c:1f:d6:e8:
07:4a:ef:b1:ff:40:61:c0:f3:e2:91:42:ed:54:e3:
eb:a3:c3:6e:47:02:58:fd:7f:a1:a2:2c:fa:f0:47:
23:69:a8:34:44:bd:86:2a:61:25:fc:32:f6:c5:a7:
24:ba:54:3a:74:4b:17:30:12:f0:ec:b5:64:68:36:
80:39:fb:73:93:6a:15:40:17:ec:37:19:7b:5c:cf:
a9:7b:11:79:3c:e3:3b:72:a3:19:92:56:1b:a3:fe:
a9:e6:cb:53:a5:47:99:77:04:00:ec:4b:0e:34:f7:
79:32:8f:28:37:e2:f9:47:e0:66:e5:40:53:fc:95:
9a:21:6f:ac:7b:52:69:e3:eb:26:db:0d:06:b5:7d:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:AE:9A:02:1A:15:D2:37:5D:50:7C:29:A5:C6:08:3C:5C:C2:3D
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3f:9f:19:76:f7:cc:d7:12:03:2e:22:55:62:e2:88:cf:f3:
bb:e4:9c:78:b3:ca:7e:2e:e4:51:e6:a4:2e:6d:82:f1:13:92:
11:29:e6:ce:cc:8f:b6:8f:e2:a7:57:37:a2:9d:93:d2:d1:db:
3c:f4:e8:49:c5:9c:f6:00:11:3e:5a:96:14:23:a4:7a:ac:99:
8e:1c:61:59:92:1a:97:f3:64:19:58:21:27:03:76:97:2c:c5:
a9:98:f4:d1:fb:8a:0a:d9:d2:87:aa:7f:bc:4c:ad:8b:d4:79:
82:0c:29:61:8d:41:2e:0c:2c:ff:0b:be:e9:58:9f:87:87:79:
de:05:40:73:90:d3:f9:bc:69:f2:8a:cf:e3:1a:a2:2d:cb:ea:
76:6b:a9:a6:d8:9c:8b:a3:ef:ae:36:9a:c7:a6:d0:4a:15:c9:
6b:cf:1a:5a:b3:9e:a6:1d:5b:33:d0:fc:77:35:fb:5f:62:92:
f9:0f:b7:63:f2:57:3d:80:69:86:e3:43:89:f2:b5:da:d2:50:
e0:d7:4d:6d:c8:f5:d8:b4:d5:32:ba:b3:fc:f6:c0:41:78:bc:
4e:a7:a4:51:64:b4:b3:15:7c:5e:bc:19:80:3e:ea:0e:e0:e1:
e8:b9:97:74:46:91:e4:04:ff:77:e2:9d:54:5c:8f:15:32:02:
00:70:09:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRobQQpQnUFgyVSPTGw+uiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm
NGZlZjkwHhcNMjUwNDA3MTkwMjEyWhcNMjUwNDA4MTkwMjEyWjAzMTEwLwYDVQQD
Eyg3MGQ0YWU5YTAyMWExNWQyMzc1ZDUwN2MyOWE1YzYwODNjNWNjMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk+bJ/Yf+PK44r5AVP7vG8QaKd+R
Mv2FNEPJnYzYBYlM6wVN2NeETLdJJT6D0X1ngSCcgApnCk8hEsid0k9j2pZg2jEG
n+1DPAV2sXzx+OzmMQxZQlIbC6dY05NksHwMjfK/AdzAZYWBxVdsXENpnuo5Pzwf
1ugHSu+x/0BhwPPikULtVOPro8NuRwJY/X+hoiz68Ecjaag0RL2GKmEl/DL2xack
ulQ6dEsXMBLw7LVkaDaAOftzk2oVQBfsNxl7XM+pexF5POM7cqMZklYbo/6p5stT
pUeZdwQA7EsONPd5Mo8oN+L5R+Bm5UBT/JWaIW+se1Jp4+sm2w0GtX0l7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDUrpoCGhXSN11QfCmlxgg8XMI9MB8GA1UdIwQY
MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt
YjQ5MWY1YjM5ZWYyLzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy
LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND+fGXb3
zNcSAy4iVWLiiM/zu+SceLPKfi7kUeakLm2C8ROSESnmzsyPto/ip1c3op2T0tHb
PPToScWc9gARPlqWFCOkeqyZjhxhWZIal/NkGVghJwN2lyzFqZj00fuKCtnSh6p/
vEyti9R5ggwpYY1BLgws/wu+6Vifh4d53gVAc5DT+bxp8orP4xqiLcvqdmupptic
i6Pvrjaax6bQShXJa88aWrOeph1bM9D8dzX7X2KS+Q+3Y/JXPYBphuNDifK12tJQ
4NdNbcj12LTVMrqz/PbAQXi8TqekUWS0sxV8XrwZgD7qDuDh6LmXdEaR5AT/d+Kd
VFyPFTICAHAJjQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:40 2025 by rpki-client