Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
File: vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft (raw, json)
Hash identifier: OqXjaFT9Juj/OepqOD5tD61h9dqDGrQnp09NcxVxvPQ=
Subject key identifier: 88:69:83:1E:49:31:56:F6:11:D6:3C:CF:A4:41:43:32:0C:DE:05:86
Authority key identifier: BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
Certificate issuer: /CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Certificate serial: 0199FBEB0AD224BE956D65F6A92A6F2D72FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
Manifest number: 0254
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: EkTaUypg_pd7rGnsbGXftVikPSk.roa (hash: sEhgMg8C+XnNqF8zClrkN2E7JsFwEbgtXl2it8CHZBU=)
2: vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl (hash: DmZoRKTTuVqxyu+vUedLu8tZe2HFpi8GF0OlUX8Pi8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0a:d2:24:be:95:6d:65:f6:a9:2a:6f:2d:72:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=8869831e493156f611d63ccfa44143320cde0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:6d:8c:53:1d:f0:69:4e:78:e1:35:c6:14:
c5:58:be:eb:4d:17:22:98:01:45:c8:97:03:a7:a5:
ef:70:52:be:92:33:2f:62:32:26:45:02:79:89:b4:
42:a4:76:5d:5c:39:6d:1b:8d:4a:a6:20:e9:46:1b:
c8:ff:5c:65:17:b6:99:e2:2b:86:56:35:83:a1:82:
ff:99:02:43:e8:98:b5:be:17:d2:55:5a:27:c9:84:
1f:d0:77:09:c2:86:56:85:12:61:0a:66:b6:fd:47:
20:b5:d3:a4:b4:38:90:ad:98:57:a4:7d:a8:9f:ea:
d6:57:af:5b:a9:e5:6e:56:8e:af:f2:53:3b:0a:bc:
92:75:bd:71:bf:10:5b:65:07:e5:e8:7f:44:de:b2:
8e:3b:72:e1:18:64:e2:eb:45:b3:9e:c8:74:0f:e1:
d1:6c:a6:bd:03:64:6d:16:a8:04:87:8c:6c:da:a1:
7b:e6:83:7a:87:ee:1c:68:3f:85:bc:48:4a:4b:0c:
f2:87:7d:0d:e1:b8:68:f4:fc:3a:61:b9:42:7e:d7:
15:65:dd:89:63:ed:7a:78:2f:ff:97:b2:18:71:15:
f6:a3:23:c7:1c:91:81:17:4f:a2:04:09:33:0d:fc:
a8:a7:c1:71:3d:da:27:94:91:62:5d:e3:16:b4:f2:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:83:1E:49:31:56:F6:11:D6:3C:CF:A4:41:43:32:0C:DE:05:86
X509v3 Authority Key Identifier:
keyid:BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:f6:2b:e4:95:85:a3:7e:8b:1a:39:22:37:3a:4a:97:8f:
00:6b:a4:b5:53:5f:74:70:75:5a:68:98:e9:f6:e0:be:01:0d:
3b:b3:0a:5c:bd:20:a6:06:07:43:e0:c6:6e:4e:90:d6:62:24:
d7:33:c5:bb:8f:d0:e7:44:0a:9c:26:ab:07:d5:05:26:ef:c1:
fd:76:64:b7:9f:66:70:1c:d9:35:af:db:cf:df:56:96:05:35:
10:cf:40:03:1c:45:a7:4c:7c:3a:52:14:78:eb:ea:24:f4:ed:
46:f4:14:3e:7a:9f:de:a6:9f:6c:80:24:0e:68:03:27:93:46:
90:0b:65:f3:ca:f1:8a:a6:cc:70:2b:fb:9b:ee:cb:f5:45:01:
85:23:ce:81:d2:88:27:bd:a0:6a:98:23:09:d7:66:7a:4d:e5:
00:be:b3:e2:75:ac:90:fa:3c:94:6a:c2:fe:f7:fe:d8:e6:f5:
33:f1:17:e3:2f:75:f9:3f:ed:c8:d2:b2:89:32:e5:98:bd:cc:
af:9f:9e:8e:3a:7f:56:26:fa:c8:d8:fa:44:ee:f7:a2:93:4c:
66:91:7a:97:97:1b:50:e1:ff:13:be:7c:5c:8a:6a:44:54:22:
ad:83:e3:4b:68:2f:7a:42:b8:e1:04:0f:41:c1:47:29:aa:cc:
3d:79:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:43 2025 by rpki-client