
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: skUGuelBpNyhJ2Gqxp7OUZG90FF8pCKFt7UXQuggogw=
Subject key identifier: 9A:81:DC:60:97:E6:86:90:BB:53:54:93:3C:9F:B8:C0:ED:18:36:2D
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 019889210BC7C57E6605042769823335D200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 0585
Signing time: Fri 08 Aug 2025 10:01:40 +0000
Manifest this update: Fri 08 Aug 2025 10:01:40 +0000
Manifest next update: Sat 09 Aug 2025 10:01:40 +0000
Files and hashes: 1: Ht13e1Za2l8nzI4EirfQHIpz86I.roa (hash: Bla/NLVxkqOMOLwHSw1S4if6WTX8Mptt860NK9sdUrI=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: MJagIJ4XVk+1ITLC5BtXPuYZZXyYR6VaF/zWHv8/Lvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:0b:c7:c5:7e:66:05:04:27:69:82:33:35:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Aug 8 10:01:40 2025 GMT
Not After : Aug 9 10:01:40 2025 GMT
Subject: CN=9a81dc6097e68690bb5354933c9fb8c0ed18362d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:67:09:33:ea:af:62:39:be:82:9b:f6:74:
27:70:4c:b4:cf:55:2b:c2:06:26:9f:1e:91:36:89:
07:1e:bb:71:a7:8c:14:a0:a8:fb:c3:64:53:e3:d1:
b7:e8:68:6e:3a:62:2b:ab:0a:c0:6e:f0:a2:90:bb:
66:2e:62:0c:a5:d1:05:88:43:b6:ec:de:ec:6f:6b:
f9:5a:a0:44:9a:19:da:df:87:d4:1f:22:0d:86:3f:
a9:7d:01:cb:b5:5c:10:84:00:cd:67:22:6e:11:27:
73:46:3c:c1:d0:df:eb:32:e2:3d:72:e5:a6:9b:d5:
d3:ef:0d:d0:a0:a2:f2:51:18:73:45:42:e2:83:9a:
40:a9:3a:2f:dd:3f:18:a8:da:78:c7:63:2b:91:db:
1b:b2:5d:57:a7:20:17:dc:d3:8a:42:73:82:9d:1b:
3d:44:de:4a:c6:56:5c:4c:e3:51:ac:7f:be:a6:be:
b5:d5:4e:42:2a:d0:1f:be:3f:8d:06:b3:dd:92:6c:
36:47:a4:49:8a:8f:34:cf:ce:f2:af:fa:21:61:a1:
9a:23:aa:20:b7:68:10:f9:4d:aa:1a:43:a8:8e:83:
8f:44:7a:90:9a:d3:37:04:46:a2:3c:4c:b8:40:7e:
ce:20:4d:25:9b:36:66:5c:95:e1:41:ff:48:3d:62:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:81:DC:60:97:E6:86:90:BB:53:54:93:3C:9F:B8:C0:ED:18:36:2D
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:25:64:08:96:dd:c5:7b:c5:d6:8a:8e:a2:1e:4a:e5:89:fa:
21:8a:69:dd:65:85:f2:53:cf:b9:ce:42:d9:a8:8b:21:5a:1e:
61:af:dc:6c:9a:bb:ab:78:84:02:96:44:3d:c9:92:27:9b:00:
07:4e:09:a7:e4:a7:f3:04:c7:79:d0:1e:73:4f:cc:be:13:e0:
91:8d:17:78:d9:6a:84:a1:14:88:69:ea:eb:cc:cf:cb:ba:e4:
52:cc:3e:2b:d9:88:ca:2d:69:68:cf:ca:37:8a:38:02:33:57:
6c:ac:b7:d4:e3:6a:f3:0b:79:95:41:10:8e:a5:b4:2e:2c:bf:
33:37:51:14:43:c7:54:68:a9:f3:30:87:6f:28:19:32:d5:68:
dd:26:ec:7f:db:d3:47:10:64:12:8f:4e:cb:bc:01:af:c1:71:
6b:4c:9e:d6:75:d8:ca:52:d0:06:03:a1:76:d1:bd:a1:28:4d:
a8:f4:83:4d:50:05:93:9d:fc:2f:05:30:fc:11:7b:a8:80:fc:
09:df:1d:d8:d9:b9:93:a8:86:80:02:4b:15:5e:f7:23:cc:18:
c6:47:98:ed:bf:23:96:ea:27:72:c2:43:14:0d:bb:a7:b2:a3:
4f:b4:24:b1:e7:08:a9:27:2a:e8:32:9f:a2:9b:57:e0:24:a1:
f7:9d:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:38 2025 by rpki-client