Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: pIrb++EnrqGpxm4WIhtxPWc3WU9j16f3QZUJ7c/CeFw=
Subject key identifier: 38:80:3D:AC:33:52:A4:57:E9:82:60:09:AE:45:FA:82:6F:E4:4C:C7
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 0198D4738FBD1CBF11104D025246F4FCB9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 05AC
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: 1F1r9Bh29TnlxpkTkhaUcWrz1K7yIcMDd9acmgxjjxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8f:bd:1c:bf:11:10:4d:02:52:46:f4:fc:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=38803dac3352a457e9826009ae45fa826fe44cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:2d:e8:65:8d:5f:27:79:13:fa:9b:6a:9e:
6b:84:85:29:a2:e9:02:c9:80:3f:a1:50:83:1d:2d:
e2:a7:1e:0a:c8:77:8b:ba:bf:d2:dd:68:09:85:ca:
f5:e6:a7:3c:a5:eb:48:64:67:72:60:2d:0c:d4:42:
50:e3:55:2a:73:53:75:d6:58:f6:24:82:f6:54:67:
00:c3:e5:62:54:6c:be:0a:38:c9:9a:af:54:0d:e2:
9c:fc:3a:ed:3a:f6:74:f6:ef:9e:7e:d7:a3:64:85:
12:01:cb:5f:74:9e:b4:db:e5:3e:d3:2f:87:e9:8c:
cd:17:a8:79:95:8f:86:61:4b:ea:4a:d9:51:09:b8:
6c:14:ac:0a:53:1a:b9:89:01:f3:28:b9:2f:ef:35:
77:b0:85:3c:55:62:1b:75:bb:4d:60:bc:87:ab:65:
49:d3:1b:64:53:57:39:0f:56:07:b6:b3:1c:9b:e1:
66:e7:66:d2:e0:e5:94:8a:8d:97:a4:6b:17:47:25:
e9:78:cf:aa:8f:7d:1a:2c:d8:3d:13:08:4b:82:84:
56:f6:f2:c2:9b:a6:04:04:b6:9c:0a:d3:42:d9:21:
7f:74:16:34:e5:cc:62:3e:1e:18:6a:f9:93:56:7b:
d8:81:77:1d:06:25:59:e6:9c:5f:2a:1a:5a:10:30:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:3D:AC:33:52:A4:57:E9:82:60:09:AE:45:FA:82:6F:E4:4C:C7
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f3:91:72:f8:5e:7a:a6:cf:aa:87:93:ff:0f:14:8d:cb:0a:
24:74:bc:e7:7d:ec:6c:4e:59:54:98:5c:91:24:87:f5:ca:a5:
2d:a7:05:85:8a:c4:16:7f:ce:c0:5d:6c:87:a5:71:b6:75:e1:
1e:11:e6:bb:66:a6:e2:b5:59:1c:a2:6e:99:7b:02:49:c8:16:
f5:3e:9b:4b:22:8b:2c:ec:76:a7:94:c2:4f:50:38:b6:ec:6e:
f5:d0:ef:f2:6a:a0:af:8c:a8:21:d4:e0:1a:55:f8:59:cd:47:
0e:3b:6e:5e:c6:61:06:9a:5a:fe:72:e2:76:cd:75:d5:95:4e:
bd:2e:83:eb:28:0e:5b:79:3b:ac:b4:16:7c:8f:b3:01:96:ab:
97:00:bc:a7:b7:d7:c8:ea:ac:89:30:e8:87:ed:3a:f5:ff:9b:
ff:36:19:ad:18:c4:b3:d5:de:28:a6:c9:b5:fb:78:76:ac:06:
9a:72:ef:e8:5a:88:b3:90:a8:7a:be:13:e0:40:4e:2d:cd:c3:
16:17:ad:ac:39:c2:05:98:7d:c4:e7:14:c5:26:9d:fc:85:d4:
b1:54:fa:17:29:14:ac:72:a1:4d:7b:37:c6:1a:fd:c2:7b:d9:
55:e1:0e:cc:c1:9f:78:2d:82:07:8a:23:d9:ba:b8:80:ba:85:
8a:4e:cb:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc4+9HL8REE0CUkb0/LnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm
NGZlZjkwHhcNMjUwODIzMDEwMzE5WhcNMjUwODI0MDEwMzE5WjAzMTEwLwYDVQQD
EygzODgwM2RhYzMzNTJhNDU3ZTk4MjYwMDlhZTQ1ZmE4MjZmZTQ0Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4st6GWNXyd5E/qbap5rhIUpoukC
yYA/oVCDHS3ipx4KyHeLur/S3WgJhcr15qc8petIZGdyYC0M1EJQ41Uqc1N11lj2
JIL2VGcAw+ViVGy+CjjJmq9UDeKc/DrtOvZ09u+eftejZIUSActfdJ602+U+0y+H
6YzNF6h5lY+GYUvqStlRCbhsFKwKUxq5iQHzKLkv7zV3sIU8VWIbdbtNYLyHq2VJ
0xtkU1c5D1YHtrMcm+Fm52bS4OWUio2XpGsXRyXpeM+qj30aLNg9EwhLgoRW9vLC
m6YEBLacCtNC2SF/dBY05cxiPh4YavmTVnvYgXcdBiVZ5pxfKhpaEDA2vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiAPawzUqRX6YJgCa5F+oJv5EzHMB8GA1UdIwQY
MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt
YjQ5MWY1YjM5ZWYyLzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy
LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPORcvhe
eqbPqoeT/w8UjcsKJHS8533sbE5ZVJhckSSH9cqlLacFhYrEFn/OwF1sh6VxtnXh
HhHmu2am4rVZHKJumXsCScgW9T6bSyKLLOx2p5TCT1A4tuxu9dDv8mqgr4yoIdTg
GlX4Wc1HDjtuXsZhBppa/nLids111ZVOvS6D6ygOW3k7rLQWfI+zAZarlwC8p7fX
yOqsiTDoh+069f+b/zYZrRjEs9XeKKbJtft4dqwGmnLv6FqIs5Coer4T4EBOLc3D
FhetrDnCBZh9xOcUxSad/IXUsVT6FykUrHKhTXs3xhr9wnvZVeEOzMGfeC2CB4oj
2bq4gLqFik7L7g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:47 2025 by rpki-client