Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: CfuEorQv2C/NbXnSU0J2PD3/ZJvavFI1+d9Ws28E6Tc=
Subject key identifier: 5C:4A:BD:D0:7F:BD:54:E2:1B:65:7D:04:07:5C:EC:AC:F2:E3:F0:B5
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 019A1CBE2EB8691FE6A1C5EEF8D1F9877F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 0656
Signing time: Sat 25 Oct 2025 19:00:17 +0000
Manifest this update: Sat 25 Oct 2025 19:00:17 +0000
Manifest next update: Sun 26 Oct 2025 19:00:17 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: XD/O/JOcnV7kY7/ObG9Dwz7cmPtz0ot22xiTCfA0DLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:2e:b8:69:1f:e6:a1:c5:ee:f8:d1:f9:87:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Oct 25 19:00:17 2025 GMT
Not After : Oct 26 19:00:17 2025 GMT
Subject: CN=5c4abdd07fbd54e21b657d04075cecacf2e3f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:dc:f1:ca:ce:16:4c:c3:42:23:23:ec:ce:
69:47:47:60:fe:a6:cc:ec:ca:75:90:fb:1d:a6:d7:
8f:33:5c:97:39:a1:b8:af:fd:a8:ca:ea:13:8b:93:
ea:d6:e7:5a:67:ce:2f:3f:43:80:9d:03:e3:05:d0:
a6:2e:9c:40:65:19:2c:cb:7b:cf:cd:98:ef:b3:46:
f1:49:2e:c2:90:28:f9:97:c4:61:aa:88:99:e9:78:
2d:4e:54:a9:71:55:b3:70:8e:a3:5b:f9:94:31:5f:
67:db:dd:0e:35:2c:0e:f1:3f:bf:5e:b0:bf:ec:be:
eb:33:bf:04:50:61:40:d4:3a:cc:f8:2e:db:35:db:
66:0b:9d:db:e0:b8:fe:58:58:98:2a:b9:91:4a:ef:
25:3b:15:cd:6c:e4:14:09:bb:8f:82:83:68:a6:10:
47:14:cb:c2:da:fc:fa:93:a6:81:a5:4d:64:fc:19:
59:8f:ef:09:3e:56:5b:9b:e6:11:38:a7:b4:8a:94:
c4:15:f0:97:4b:c9:ad:c5:55:0f:b0:92:21:5a:af:
75:ee:4c:a3:ab:f7:bf:22:13:08:5d:8d:3a:ed:be:
4a:21:f3:84:73:2a:1c:bd:0a:a3:6e:0c:ff:20:6e:
ed:0e:35:cd:2e:3f:18:91:c3:af:49:be:9d:7d:ba:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:BD:D0:7F:BD:54:E2:1B:65:7D:04:07:5C:EC:AC:F2:E3:F0:B5
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:06:09:c8:7e:fd:50:90:6f:b4:63:b7:e5:0a:e3:f9:d3:50:
12:11:d8:f9:c4:9f:1b:4f:d1:28:bd:40:a7:23:fa:0b:ba:52:
1d:d1:b7:08:14:68:00:46:1e:2b:5b:13:86:3c:d6:28:e8:4a:
23:68:5c:af:3f:88:36:c5:4a:90:b6:5e:fb:ed:10:b1:3c:ab:
dd:90:7e:08:e8:d1:02:d8:56:69:6d:51:92:0e:bc:ab:a0:f5:
c7:ce:e2:26:39:7c:68:ab:61:66:97:dd:07:c9:65:63:ec:fa:
62:eb:33:d4:5d:10:18:10:6b:c6:af:fc:56:ec:71:2f:56:94:
02:17:69:90:35:2e:1c:fe:d8:94:1b:c1:66:5f:9f:9c:8c:9a:
3d:3c:24:e0:9b:7d:8f:f4:7e:41:d9:3e:ed:c4:e0:d3:48:68:
a6:08:a2:ae:96:21:da:19:b6:53:d0:07:d6:a8:c0:e6:86:7c:
dc:4d:68:85:01:25:67:0f:50:a7:89:d0:54:01:74:ee:6f:f5:
cc:ea:bf:4a:58:57:9c:d0:b2:ce:cf:2b:fb:a8:a0:13:90:55:
71:8d:f7:5e:6c:c5:4b:da:b0:3f:af:ec:a3:d2:44:ae:f5:56:
50:df:b0:be:85:cc:aa:53:de:6d:ef:bf:ed:f5:15:7c:ae:31:
9b:59:c3:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvi64aR/mocXu+NH5h38rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm
NGZlZjkwHhcNMjUxMDI1MTkwMDE3WhcNMjUxMDI2MTkwMDE3WjAzMTEwLwYDVQQD
Eyg1YzRhYmRkMDdmYmQ1NGUyMWI2NTdkMDQwNzVjZWNhY2YyZTNmMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0irc8crOFkzDQiMj7M5pR0dg/qbM
7Mp1kPsdptePM1yXOaG4r/2oyuoTi5Pq1udaZ84vP0OAnQPjBdCmLpxAZRksy3vP
zZjvs0bxSS7CkCj5l8RhqoiZ6XgtTlSpcVWzcI6jW/mUMV9n290ONSwO8T+/XrC/
7L7rM78EUGFA1DrM+C7bNdtmC53b4Lj+WFiYKrmRSu8lOxXNbOQUCbuPgoNophBH
FMvC2vz6k6aBpU1k/BlZj+8JPlZbm+YROKe0ipTEFfCXS8mtxVUPsJIhWq917kyj
q/e/IhMIXY067b5KIfOEcyocvQqjbgz/IG7tDjXNLj8YkcOvSb6dfbqGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxKvdB/vVTiG2V9BAdc7Kzy4/C1MB8GA1UdIwQY
MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt
YjQ5MWY1YjM5ZWYyLzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy
LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQYJyH79
UJBvtGO35Qrj+dNQEhHY+cSfG0/RKL1ApyP6C7pSHdG3CBRoAEYeK1sThjzWKOhK
I2hcrz+INsVKkLZe++0QsTyr3ZB+COjRAthWaW1Rkg68q6D1x87iJjl8aKthZpfd
B8llY+z6Yusz1F0QGBBrxq/8VuxxL1aUAhdpkDUuHP7YlBvBZl+fnIyaPTwk4Jt9
j/R+Qdk+7cTg00hopgiirpYh2hm2U9AH1qjA5oZ83E1ohQElZw9Qp4nQVAF07m/1
zOq/SlhXnNCyzs8r+6igE5BVcY33XmzFS9qwP6/so9JErvVWUN+wvoXMqlPebe+/
7fUVfK4xm1nD1Q==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:16:06 2025 by rpki-client