Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: Z+XqSwcO8gKZT7BXoOOhwqspL1GF0r7pPbknDrq4jkk=
Subject key identifier: FF:50:E7:1C:91:05:C1:46:72:80:DB:C2:82:CB:F3:17:C0:6D:84:40
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 0196BF6F57D4704D80682F95DDD79FC531F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 0498
Signing time: Sun 11 May 2025 13:01:07 +0000
Manifest this update: Sun 11 May 2025 13:01:07 +0000
Manifest next update: Mon 12 May 2025 13:01:07 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: 8FEALNBaaKORtl5MkNKsSB7bugkTbwUMyItdPamKFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:57:d4:70:4d:80:68:2f:95:dd:d7:9f:c5:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: May 11 13:01:07 2025 GMT
Not After : May 12 13:01:07 2025 GMT
Subject: CN=ff50e71c9105c1467280dbc282cbf317c06d8440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:82:45:e8:12:62:20:8c:b5:3c:33:ff:01:
98:89:c5:e4:d9:ea:fe:06:b1:33:25:ac:13:58:6f:
1b:72:da:27:a0:3f:e0:7a:f0:ce:7f:ff:3f:3f:18:
93:52:52:e0:8f:3c:49:f6:7c:43:a2:7c:e6:f8:f6:
a3:8e:fc:c7:07:03:fc:a9:c1:74:6e:a8:8a:d9:f2:
ad:d5:dc:02:6b:22:db:e1:ac:28:7e:9f:2f:cd:5d:
fb:b8:ac:dc:29:dd:b5:61:b2:78:c2:86:92:d3:2e:
3b:d3:d3:4c:e6:7e:cb:62:6c:46:c7:fe:ba:f0:a7:
41:e4:ab:66:43:4e:8f:fd:73:35:2c:f4:28:7a:5f:
da:fb:42:b6:1d:44:a3:8d:fa:12:17:15:2a:32:34:
67:cd:74:90:e1:3f:26:07:a4:6e:8e:7a:42:b0:e5:
15:e7:78:d0:07:ee:dd:54:12:5c:13:5b:c7:55:fd:
62:39:d8:86:50:2d:4e:2c:41:27:8b:60:c9:8a:49:
cc:73:e9:36:a0:b7:b0:ea:29:dc:83:8b:f8:36:93:
09:ab:92:04:23:33:f6:2b:e2:c8:b7:48:f4:07:6c:
70:49:3d:f8:1c:fa:b8:78:f5:73:85:de:c4:42:0d:
60:e8:33:63:a0:5c:35:7e:75:31:e6:06:a0:e3:48:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:E7:1C:91:05:C1:46:72:80:DB:C2:82:CB:F3:17:C0:6D:84:40
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:fc:4d:ea:fd:26:1b:20:30:33:f2:c5:8c:13:1d:c0:31:
37:ff:2e:0b:1d:91:ec:83:dd:b3:d7:f8:5d:3e:04:4f:a9:81:
88:a3:62:b2:99:3e:76:78:5a:c2:ae:5d:bb:64:45:12:7e:3f:
e2:4e:fd:93:ba:bd:19:9a:a1:71:71:e3:33:2c:a2:b4:7f:88:
07:2b:d6:78:90:50:d0:da:fe:bf:f6:e2:01:24:f2:e9:9f:a8:
96:6d:36:96:91:33:83:df:47:42:5c:b5:e5:3c:c4:da:ca:61:
3c:a3:21:5c:fc:3f:47:3c:4a:a0:48:39:f1:45:a2:4d:2c:f3:
3d:fb:98:50:92:7b:91:e9:27:29:f5:f8:b3:55:f9:40:85:e6:
c1:b0:f1:a1:db:a5:4b:04:53:11:a8:40:1e:99:38:f5:3d:7a:
c0:d2:25:5a:82:43:c4:2f:a4:fb:97:d7:ad:a1:cb:8f:69:65:
f4:b0:fc:f7:85:fb:07:40:83:16:25:95:8e:b8:b3:55:1b:a6:
90:41:b3:d1:9e:d8:d5:5a:f4:cf:ff:b0:f9:9a:34:66:d4:22:
96:04:74:72:ea:9f:42:2a:9f:7a:d2:20:18:d1:17:91:39:92:
87:2a:3b:d4:8f:3b:8c:f0:29:17:44:d5:6e:ab:5d:e0:ed:32:
57:13:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:35:45 2025 by rpki-client