Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: 5GTicg2qF2OsNe+u78+jnekfHLbQ9TOK273I7e57CNk=
Subject key identifier: 5C:4B:08:CE:F3:16:6C:DB:2B:08:18:30:C8:B7:48:89:61:96:A2:26
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 0197B88F17CA7EFAE19B6743EEFA56872AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 0519
Signing time: Sat 28 Jun 2025 22:01:14 +0000
Manifest this update: Sat 28 Jun 2025 22:01:14 +0000
Manifest next update: Sun 29 Jun 2025 22:01:14 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: z4GANgPI/NdV3e3eUeCxzQiS82dZDTjJyOEeEZrQmSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:17:ca:7e:fa:e1:9b:67:43:ee:fa:56:87:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Jun 28 22:01:14 2025 GMT
Not After : Jun 29 22:01:14 2025 GMT
Subject: CN=5c4b08cef3166cdb2b081830c8b748896196a226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:f7:e4:df:a4:9a:c2:01:f2:c1:14:13:df:
5d:54:9a:8c:d9:f6:fc:70:2f:c6:82:e8:f7:dd:c4:
4a:31:69:2c:c4:36:df:0e:1e:dc:04:99:e1:cb:2d:
38:49:72:c3:cc:7a:4f:c6:24:2f:a1:d4:23:60:66:
d8:0d:79:cd:7f:11:e6:89:ea:90:30:d6:af:e7:bf:
92:80:71:09:1a:28:b2:64:24:46:f9:21:ab:2c:c0:
8c:66:16:5d:bc:34:cd:76:b8:b5:50:91:f9:46:41:
d8:88:ae:e8:69:72:eb:ed:98:67:bf:de:59:48:dd:
c8:2d:28:92:5a:e0:b7:08:69:15:04:61:76:8f:9a:
e4:70:c2:58:93:d2:65:22:fb:ba:cf:59:cf:58:bf:
3f:97:42:1c:ca:0a:8d:7d:b3:d6:10:3a:68:08:a6:
bc:60:95:0d:0e:59:99:d5:09:f0:40:d6:52:93:22:
1c:f1:dc:be:36:c0:42:14:98:1f:1b:aa:56:98:a1:
3b:bb:2c:f1:4c:24:3a:36:4b:e3:29:13:6f:6d:fe:
4a:28:8a:8d:38:87:58:87:85:8d:e3:bb:59:b2:ec:
b2:4a:86:c2:cc:b2:1f:27:f4:4a:f9:d4:b2:1c:30:
5c:5f:f7:7f:bb:d4:83:e7:f1:43:4b:82:d5:68:34:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:08:CE:F3:16:6C:DB:2B:08:18:30:C8:B7:48:89:61:96:A2:26
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f6:b3:3b:be:a5:6d:fe:81:de:aa:bb:bb:32:5f:25:27:95:
a0:bb:b1:9f:b1:07:ee:ab:7e:2c:cd:b8:e4:d4:61:58:3c:23:
04:98:9a:14:f6:12:cc:85:d2:d2:9f:de:68:46:92:8d:7f:52:
dd:0f:b3:37:05:c6:28:f8:f9:5a:e9:d2:9a:aa:77:0c:39:ee:
15:23:91:f0:49:49:1f:47:9c:ce:b2:38:a1:ab:a1:4e:6a:0a:
f6:4b:b8:1e:6a:51:07:9a:81:f7:de:03:ac:04:a0:b1:eb:d0:
5e:95:5e:c4:94:a5:67:f3:f9:1a:a1:7d:b6:b5:23:65:0f:af:
1f:9c:97:06:33:b9:e5:93:4c:53:15:35:0a:82:a2:9d:08:db:
15:16:1d:c6:2a:78:ec:7d:7d:fd:b9:6a:44:6b:e5:e9:6a:65:
99:77:03:85:08:00:2b:22:6d:ca:a3:0f:06:24:b2:c5:48:84:
31:db:ac:3d:d5:32:4a:23:10:97:73:f1:df:9a:bc:cc:ec:e4:
ff:4a:a7:5b:37:fe:3e:82:a8:08:16:42:9b:b1:d6:c6:81:2a:
80:f7:fc:50:e2:82:fb:2d:d5:69:79:b2:16:ce:6b:6f:5c:8e:
6e:40:1f:f1:6d:ff:cc:54:b1:03:11:51:ab:6d:eb:23:a4:b6:
ec:f1:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:04 2025 by rpki-client