Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier: ihjk9zVCEYdC8ap+3zQvEuqPtiNXClyyNQfPUlCoQwc=
Subject key identifier: 60:AC:40:5E:95:04:FB:12:3D:22:8A:A8:EE:D4:11:2E:AA:CC:60:95
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01992E22C2D5DD21C308DA0B1EB1FDFFBF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 11:00:53 +0000
Manifest this update: Tue 09 Sep 2025 11:00:53 +0000
Manifest next update: Wed 10 Sep 2025 11:00:53 +0000
Files and hashes: 1: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (hash: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=)
2: THgpYsuwtp7Ym3zY6av8RgfZzLY.roa (hash: uQpggmJggCBeqYH5pLAJ2yEpa7lh8jrstdPPyiUJ77Q=)
3: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (hash: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=)
4: nofXYpB0FisO0jICtG3Ef-GQMH0.roa (hash: 6sPkKup7pdVWKTBxrRqOcxcRj13RLFPr/8N1XCriJwg=)
5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: xdFFJwAlOL2wPbKYyYn+1HL7Gw19J50eU+/CTB56+MM=)
6: zoiZaQy1X6uA_fb18sRqVooSN48.roa (hash: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:c2:d5:dd:21:c3:08:da:0b:1e:b1:fd:ff:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Sep 9 11:00:53 2025 GMT
Not After : Sep 10 11:00:53 2025 GMT
Subject: CN=60ac405e9504fb123d228aa8eed4112eaacc6095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:5d:6c:f1:36:a6:47:db:4e:ac:64:e0:1b:
8e:00:88:c5:49:a4:9e:79:d2:b9:f6:23:0e:82:83:
ae:5c:fc:08:8b:59:d2:e0:23:d9:e8:ed:f4:c4:6b:
23:3d:1c:b3:89:e6:91:48:97:98:29:0c:92:ee:69:
76:51:af:5e:8c:33:5e:5d:af:b6:23:3e:b9:9f:6b:
54:41:ea:73:1e:c1:dc:42:ca:e9:25:d0:37:18:26:
97:e2:97:22:ce:12:73:b7:28:ae:90:f2:ab:29:12:
f1:9a:30:a9:fc:0f:60:c8:61:3d:f3:77:5c:db:e5:
fe:51:21:d3:7f:b1:90:56:19:8e:31:18:c3:a3:9f:
bb:3b:2b:59:0c:0a:2a:17:39:e9:c4:b3:30:29:ac:
eb:a6:c9:e4:a8:9e:08:96:6b:3b:02:fa:f8:28:d2:
f3:89:c1:90:bd:35:05:8b:09:1c:a7:f9:e6:fd:10:
ed:81:b3:c8:18:ea:cb:0e:33:a2:96:25:a2:e0:a5:
fe:2d:7f:f4:aa:37:98:dc:a1:0e:8f:17:8a:4d:f1:
c7:f7:3c:a5:ce:39:7e:e6:9b:1f:3a:7c:3d:69:ac:
b3:74:49:26:30:05:60:5e:48:16:12:e3:5e:d8:8e:
fb:9f:29:9a:f1:3e:33:37:9d:50:79:45:27:c5:3e:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:40:5E:95:04:FB:12:3D:22:8A:A8:EE:D4:11:2E:AA:CC:60:95
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c6:10:d3:39:84:54:87:6a:d4:cd:9b:f2:9e:46:a4:e8:56:
c6:f5:6b:c7:07:81:e2:83:43:dc:0f:b4:08:27:6d:9f:f7:d2:
ef:04:95:98:c4:96:5b:14:18:9d:dd:bb:17:2c:97:a4:c7:80:
0d:0e:20:81:53:5f:34:2e:3c:98:26:d1:ad:13:57:80:0e:82:
0a:01:f2:a5:17:d3:6d:49:f5:4b:3b:d6:1a:a9:58:13:ae:f8:
87:c1:08:86:fb:8b:d9:40:54:0f:cb:f4:32:c8:a1:ce:65:a9:
a1:f6:b0:72:51:ee:4d:99:1c:7d:7e:aa:65:db:77:69:53:ab:
cc:4b:62:19:69:65:e2:1e:2f:42:60:ed:f3:82:5a:37:6e:8e:
37:7f:3d:3d:74:70:49:d6:fb:d8:72:de:c3:3f:cd:2e:b0:31:
df:c0:f2:63:67:14:7a:aa:0c:ab:3b:a3:14:dd:71:30:e3:b6:
d2:54:c4:5d:2b:33:bb:2f:cf:86:29:49:3f:f1:01:27:56:bc:
d0:b1:65:94:7c:46:64:7e:a4:ab:28:7e:65:27:c6:e9:0e:2a:
33:3d:7b:aa:ac:90:d6:c3:86:9d:fc:a4:66:49:2c:ed:ee:1c:
a3:0d:b6:9c:04:52:a0:02:28:6b:0b:ae:6c:0f:1b:b6:15:8d:
a0:e4:d8:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkuIsLV3SHDCNoLHrH9/79cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm
ZjJlMzAwHhcNMjUwOTA5MTEwMDUzWhcNMjUwOTEwMTEwMDUzWjAzMTEwLwYDVQQD
Eyg2MGFjNDA1ZTk1MDRmYjEyM2QyMjhhYThlZWQ0MTEyZWFhY2M2MDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss5dbPE2pkfbTqxk4BuOAIjFSaSe
edK59iMOgoOuXPwIi1nS4CPZ6O30xGsjPRyzieaRSJeYKQyS7ml2Ua9ejDNeXa+2
Iz65n2tUQepzHsHcQsrpJdA3GCaX4pcizhJztyiukPKrKRLxmjCp/A9gyGE983dc
2+X+USHTf7GQVhmOMRjDo5+7OytZDAoqFznpxLMwKazrpsnkqJ4Ilms7Avr4KNLz
icGQvTUFiwkcp/nm/RDtgbPIGOrLDjOiliWi4KX+LX/0qjeY3KEOjxeKTfHH9zyl
zjl+5psfOnw9aayzdEkmMAVgXkgWEuNe2I77nyma8T4zN51QeUUnxT4xIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCsQF6VBPsSPSKKqO7UES6qzGCVMB8GA1UdIwQY
MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt
ZGJjYThjMzFlYmM4LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4
LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcYQ0zmE
VIdq1M2b8p5GpOhWxvVrxweB4oND3A+0CCdtn/fS7wSVmMSWWxQYnd27FyyXpMeA
DQ4ggVNfNC48mCbRrRNXgA6CCgHypRfTbUn1SzvWGqlYE674h8EIhvuL2UBUD8v0
MsihzmWpofawclHuTZkcfX6qZdt3aVOrzEtiGWll4h4vQmDt84JaN26ON389PXRw
Sdb72HLewz/NLrAx38DyY2cUeqoMqzujFN1xMOO20lTEXSszuy/PhilJP/EBJ1a8
0LFllHxGZH6kqyh+ZSfG6Q4qMz17qqyQ1sOGnfykZkks7e4cow22nARSoAIoawuu
bA8bthWNoOTYQA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:36:51 2025 by rpki-client